Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa
File:                     34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (raw, json)
Hash identifier:          MvroZDztLHgOmiTF9qBfG8G5zFYmFTdd0U98/sYW3Tc=
Subject key identifier:   99:C9:BA:2D:E4:FD:7C:33:A9:C2:78:53:C7:88:96:0D:71:E8:9E:87
Certificate issuer:       /CN=EEAED5639DA591A226FB7469252567652499ADA3
Certificate serial:       0A6C7CF5626DB17E76240B69CEFC858B3DA17DD8
Authority key identifier: EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa
Signing time:             Wed 03 Apr 2024 18:43:07 +0000
ROA not before:           Wed 03 Apr 2024 18:38:07 +0000
ROA not after:            Wed 02 Apr 2025 18:43:07 +0000
asID:                     268077
IP address blocks:        45.168.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 12:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6c:7c:f5:62:6d:b1:7e:76:24:0b:69:ce:fc:85:8b:3d:a1:7d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAED5639DA591A226FB7469252567652499ADA3
        Validity
            Not Before: Apr  3 18:38:07 2024 GMT
            Not After : Apr  2 18:43:07 2025 GMT
        Subject: CN=99C9BA2DE4FD7C33A9C27853C788960D71E89E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:d6:72:63:8e:04:0d:af:b9:d0:ac:8b:96:
                    eb:30:66:ce:d1:1a:18:bc:29:eb:78:00:6a:5a:d6:
                    98:0e:40:02:63:ea:27:22:42:66:d5:62:c0:1d:eb:
                    3d:ba:6a:01:8c:bc:58:38:30:3b:ad:1f:b6:7e:f2:
                    a8:75:9f:07:6e:90:84:ad:2e:4a:f6:11:3d:ff:cb:
                    82:0f:f7:cf:99:35:08:3c:e9:55:41:73:3a:fe:3f:
                    07:f4:48:8e:e9:6b:3d:ba:6c:83:0c:05:3e:b5:c9:
                    aa:da:c2:9c:10:5c:78:22:6a:bf:af:40:90:e5:c3:
                    de:9e:26:61:87:51:73:bf:c7:84:87:8d:76:c2:0b:
                    67:cd:77:c9:2b:22:9b:f2:d9:f7:f7:17:24:58:d1:
                    86:69:9e:62:93:a8:c4:1c:10:8c:e9:25:dc:d7:ae:
                    c5:b4:0b:6f:d4:a7:22:f3:0f:fb:7f:d0:16:f5:83:
                    bd:75:2d:ab:8e:61:cb:f9:0c:dd:8b:49:fa:f9:0b:
                    2c:7a:fa:96:7b:90:c4:0d:b8:2c:55:a1:84:a7:b4:
                    93:5c:96:00:13:79:cb:2c:ec:75:1d:7b:19:61:e0:
                    5f:e2:5f:61:d9:77:9c:9f:86:2c:95:d1:d1:9b:38:
                    3f:b5:4c:14:d0:88:57:9b:9f:62:6b:75:d0:b7:1f:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C9:BA:2D:E4:FD:7C:33:A9:C2:78:53:C7:88:96:0D:71:E8:9E:87
            X509v3 Authority Key Identifier:
                keyid:EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:ea:06:1c:b2:7b:c5:42:73:a3:aa:c7:7b:e5:5c:b3:bb:
         a0:9c:42:05:48:a6:00:19:cc:aa:00:95:41:c6:e4:17:08:83:
         2b:18:5e:41:8c:12:b1:69:88:97:50:ed:6a:42:97:d3:d9:f8:
         2f:d4:a4:b9:57:51:9c:65:21:d1:e5:b9:74:a9:69:7e:dc:ba:
         82:6d:62:4e:05:3d:ca:d1:11:50:fa:6b:d3:e1:65:7e:38:a2:
         f2:93:7a:51:3e:a6:47:4d:0f:9e:07:3e:5e:76:f2:bc:5c:5f:
         73:31:ad:99:f3:eb:c5:fc:f9:ad:b5:df:92:72:5b:b9:57:f0:
         b5:6d:7a:47:9a:7a:ab:bc:fc:8a:ee:8e:51:73:a0:f8:c8:06:
         4d:31:be:d6:07:63:e7:28:f8:04:71:66:9b:2e:97:88:88:80:
         6e:4f:14:ca:94:19:00:d8:61:9c:26:f8:12:23:11:b9:47:61:
         9e:c0:8e:05:66:6a:0e:b5:f9:47:67:bb:ac:79:70:33:c9:39:
         ae:06:dc:58:a7:8a:7e:d8:57:f5:2c:d2:bd:29:5a:6b:c6:f3:
         c0:bc:d1:39:b0:ed:b4:b7:3f:34:e6:fe:c7:ee:35:40:c0:e4:
         35:a2:af:93:b7:7b:eb:5f:63:4c:44:61:24:92:94:76:cf:02:
         dd:31:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 15:18:59 2024 by rpki-client on console-ams.rpki-client.org