Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/34352e3233332e382e302f32322d3232203d3e20323637323836.roa
File:                     34352e3233332e382e302f32322d3232203d3e20323637323836.roa (raw, json)
Hash identifier:          P07URSyWHP2WN16FxkmntmOKPPUWX9cOwtiNR7INkqs=
Subject key identifier:   AC:B3:B7:07:64:08:8B:8C:78:DB:6F:FF:99:B6:F2:05:CB:73:29:AF
Certificate issuer:       /CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
Certificate serial:       160DDF5552733B858F5DD28F8F67B35938321601
Authority key identifier: BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/34352e3233332e382e302f32322d3232203d3e20323637323836.roa
Signing time:             Wed 24 Apr 2024 15:02:39 +0000
ROA not before:           Wed 24 Apr 2024 14:57:39 +0000
ROA not after:            Wed 23 Apr 2025 15:02:39 +0000
asID:                     267286
IP address blocks:        45.233.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:df:55:52:73:3b:85:8f:5d:d2:8f:8f:67:b3:59:38:32:16:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
        Validity
            Not Before: Apr 24 14:57:39 2024 GMT
            Not After : Apr 23 15:02:39 2025 GMT
        Subject: CN=ACB3B70764088B8C78DB6FFF99B6F205CB7329AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:71:dd:f2:6c:c9:7d:0a:99:ea:24:09:6b:
                    93:42:ed:dc:15:ed:33:a2:3d:15:83:f1:b7:5c:50:
                    9d:ff:3f:4b:f3:36:61:c7:ee:b3:c9:b4:aa:0f:d8:
                    d5:9d:12:1a:7f:14:0a:32:7b:e6:a7:66:fe:fb:1a:
                    60:b7:70:bd:4f:cc:b6:b5:80:6c:26:2d:f4:c7:17:
                    46:93:b2:45:09:78:c4:12:a9:09:0a:46:17:3f:f4:
                    12:b9:47:ce:42:42:5e:24:69:b2:b3:06:d0:65:c0:
                    5f:f0:49:8a:d3:70:65:f7:62:60:95:f4:45:d3:61:
                    da:e1:e8:7c:5f:38:5f:f1:0e:42:e0:cd:71:a4:f2:
                    c9:5c:26:d7:83:24:cc:39:49:65:fd:2e:07:96:ae:
                    66:e0:32:08:49:38:17:3f:82:74:85:c4:e2:af:a3:
                    f2:6e:26:0f:3a:95:82:a9:03:0e:96:ea:68:14:6b:
                    23:8a:31:39:38:d2:b0:36:d6:1b:6f:70:07:09:bc:
                    91:88:67:f8:12:67:3c:09:5d:75:1e:c3:92:9e:e8:
                    13:67:cf:c7:64:15:7d:d4:8c:ab:5d:bf:d0:26:0e:
                    5f:84:1a:d5:11:3f:ed:74:4d:f0:7d:00:15:93:6f:
                    f2:99:8d:27:0c:7e:d7:bc:c0:04:e7:d0:0a:05:c8:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B3:B7:07:64:08:8B:8C:78:DB:6F:FF:99:B6:F2:05:CB:73:29:AF
            X509v3 Authority Key Identifier:
                keyid:BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/34352e3233332e382e302f32322d3232203d3e20323637323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:78:fc:5a:89:68:19:e2:1d:0e:92:92:1f:ec:e9:ce:88:61:
         92:97:4c:7d:6e:af:50:ec:13:eb:ce:f0:96:ec:11:f5:e6:d5:
         80:10:d8:10:5d:d7:64:b5:c6:cf:ed:8f:96:d2:62:99:da:79:
         1a:5b:18:77:10:c4:67:21:3d:2b:0e:72:88:a1:de:b0:99:a9:
         37:74:db:03:df:92:8c:1f:1b:8e:b0:97:a6:8b:da:eb:70:ca:
         30:b2:42:e1:c5:e8:99:22:f5:5e:d4:5a:ad:2c:19:9f:48:6c:
         7f:34:74:78:62:1c:2f:4c:08:47:46:30:18:e7:c1:39:a0:70:
         f9:2b:9e:ce:2c:7f:31:4f:c5:59:15:9f:d9:de:88:bc:0a:0e:
         c8:de:bd:21:8b:83:d0:b9:44:e2:3d:7e:08:e7:c0:a4:27:c5:
         bb:4f:89:67:3f:3b:b3:1e:46:db:4c:91:cd:18:34:aa:7e:36:
         ee:fa:cf:08:ca:a0:bc:90:a8:7c:dd:3e:27:b7:21:16:08:a4:
         7e:8c:5b:1f:c8:ff:2b:7b:16:ed:e4:9c:64:75:f8:c9:5f:32:
         e6:16:59:44:0e:ee:66:c5:4c:4a:24:68:f0:a4:1c:b4:42:2e:
         5a:4e:23:a6:76:95:b0:fc:33:70:08:e0:bb:e3:32:b1:a8:4c:
         d5:f1:b7:47
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFg3fVVJzO4WPXdKPj2ezWTgyFgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJBQzE5RTkyQjQ1ODdBM0FENThBRDQ0OTUxNkRGRDc2
QkIzQ0Q3MzAeFw0yNDA0MjQxNDU3MzlaFw0yNTA0MjMxNTAyMzlaMDMxMTAvBgNV
BAMTKEFDQjNCNzA3NjQwODhCOEM3OERCNkZGRjk5QjZGMjA1Q0I3MzI5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/W3Hd8mzJfQqZ6iQJa5NC7dwV
7TOiPRWD8bdcUJ3/P0vzNmHH7rPJtKoP2NWdEhp/FAoye+anZv77GmC3cL1PzLa1
gGwmLfTHF0aTskUJeMQSqQkKRhc/9BK5R85CQl4kabKzBtBlwF/wSYrTcGX3YmCV
9EXTYdrh6HxfOF/xDkLgzXGk8slcJteDJMw5SWX9LgeWrmbgMghJOBc/gnSFxOKv
o/JuJg86lYKpAw6W6mgUayOKMTk40rA21htvcAcJvJGIZ/gSZzwJXXUew5Ke6BNn
z8dkFX3UjKtdv9AmDl+EGtURP+10TfB9ABWTb/KZjScMfte8wATn0AoFyE1pAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUrLO3B2QIi4x422//mbbyBctzKa8wHwYDVR0j
BBgwFoAUu6wZ6StFh6OtWK1ElRbf12uzzXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGVwb2NwS1VwMVE5ZkZGTDRRR2E5Q25zTEZaeXJKNFhuNHVGR2o4cXhU
N0UvMC9CQkFDMTlFOTJCNDU4N0EzQUQ1OEFENDQ5NTE2REZENzZCQjNDRDczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCQUMxOUU5MkI0NTg3QTNB
RDU4QUQ0NDk1MTZERkQ3NkJCM0NENzMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRlcG9jcEtVcDFROWZGRkw0UUdhOUNuc0xGWnlySjRYbjR1RkdqOHF4VDdFLzAv
MzQzNTJlMzIzMzMzMmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNzMy
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3pCDANBgkqhkiG9w0BAQsFAAOCAQEAfnj8WoloGeId
DpKSH+zpzohhkpdMfW6vUOwT687wluwR9ebVgBDYEF3XZLXGz+2PltJimdp5GlsY
dxDEZyE9Kw5yiKHesJmpN3TbA9+SjB8bjrCXpova63DKMLJC4cXomSL1XtRarSwZ
n0hsfzR0eGIcL0wIR0YwGOfBOaBw+Suezix/MU/FWRWf2d6IvAoOyN69IYuD0LlE
4j1+COfApCfFu0+JZz87sx5G20yRzRg0qn427vrPCMqgvJCofN0+J7chFgikfoxb
H8j/K3sW7eScZHX4yV8y5hZZRA7uZsVMSiRo8KQctEIuWk4jpnaVsPwzcAjgu+My
sahM1fG3Rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org