Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/34352e3232392e3230302e302f32322d3332203d3e20323637313333.roa
File:                     34352e3232392e3230302e302f32322d3332203d3e20323637313333.roa (raw, json)
Hash identifier:          2AMjCiWxE5At8EnO/mPfky1zGdgGgjgtKipQpR7RL14=
Subject key identifier:   E9:7D:D6:E8:1E:F6:FA:38:A3:AB:75:06:5F:15:8D:86:99:45:EC:6C
Certificate issuer:       /CN=6247EC2E5F532DBE5991DF683B8E94EA128B117F
Certificate serial:       68476EF46EDF64C890FB8DD25EB9FF5F12B582C3
Authority key identifier: 62:47:EC:2E:5F:53:2D:BE:59:91:DF:68:3B:8E:94:EA:12:8B:11:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6247EC2E5F532DBE5991DF683B8E94EA128B117F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/34352e3232392e3230302e302f32322d3332203d3e20323637313333.roa
Signing time:             Thu 16 May 2024 15:14:42 +0000
ROA not before:           Thu 16 May 2024 15:09:42 +0000
ROA not after:            Thu 15 May 2025 15:14:42 +0000
asID:                     267133
IP address blocks:        45.229.200.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Thu 23 May 2024 13:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:47:6e:f4:6e:df:64:c8:90:fb:8d:d2:5e:b9:ff:5f:12:b5:82:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6247EC2E5F532DBE5991DF683B8E94EA128B117F
        Validity
            Not Before: May 16 15:09:42 2024 GMT
            Not After : May 15 15:14:42 2025 GMT
        Subject: CN=E97DD6E81EF6FA38A3AB75065F158D869945EC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8a:73:91:98:fb:86:9a:80:f3:76:4b:39:ee:
                    5d:e8:0f:b7:b1:62:15:40:72:e2:6f:54:c9:f6:d2:
                    27:82:b6:32:68:9e:75:85:f5:97:c3:bc:d7:d4:b6:
                    dd:4f:1e:85:33:02:46:be:ef:f6:6d:49:7c:87:40:
                    8c:4b:f7:75:0b:eb:af:ab:c2:c4:3b:c3:9a:d6:5f:
                    c3:47:f7:c8:8e:7f:26:fb:8c:df:f5:01:10:70:5b:
                    34:d9:db:0d:d9:25:f3:88:91:2d:e4:50:15:f3:15:
                    90:20:da:eb:3c:e3:02:67:09:de:61:25:b5:1f:5a:
                    97:a8:11:17:02:97:29:91:60:89:6a:39:1f:6b:b8:
                    bc:f8:cc:a8:79:30:ec:93:ad:39:c7:f0:37:ad:f9:
                    15:54:f6:f5:b4:07:27:65:b0:1b:92:b8:3b:38:e1:
                    cc:fe:a9:c4:c8:37:0f:a5:d8:8f:66:19:b7:92:70:
                    d9:7c:0d:00:87:d3:7d:7d:ec:41:ed:59:c4:8c:c8:
                    64:69:08:07:c7:24:b1:7a:ab:bf:f3:e9:60:b2:22:
                    b2:ef:a1:57:52:bb:2a:2d:d4:80:54:d1:bf:1e:8a:
                    0a:3b:3c:1a:c0:88:e1:8c:b2:5e:eb:e5:27:74:7a:
                    21:90:da:2d:3b:eb:26:6e:f4:fb:18:30:26:f8:f3:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7D:D6:E8:1E:F6:FA:38:A3:AB:75:06:5F:15:8D:86:99:45:EC:6C
            X509v3 Authority Key Identifier:
                keyid:62:47:EC:2E:5F:53:2D:BE:59:91:DF:68:3B:8E:94:EA:12:8B:11:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/6247EC2E5F532DBE5991DF683B8E94EA128B117F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6247EC2E5F532DBE5991DF683B8E94EA128B117F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4m5Hy18hwXEC3RQ82y5o31ZenHCRLz9ExhmEowQKCbUi/0/34352e3232392e3230302e302f32322d3332203d3e20323637313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:2e:61:51:af:31:b8:cc:0b:54:3d:28:bd:5c:d7:b3:2f:
         d3:1c:ed:be:ff:19:80:db:63:a6:26:1a:f9:64:a0:f7:13:b3:
         39:3e:d5:36:bc:0a:9d:61:94:62:b7:b6:8b:01:93:aa:6e:93:
         d0:82:80:cb:c9:c8:ee:9c:3a:70:ab:4b:eb:94:8f:7a:7d:c9:
         22:5d:b0:4c:3f:fa:f2:c7:8a:0a:fc:fa:18:ae:cb:56:e1:ec:
         5c:fd:9e:72:9a:1e:ce:87:96:c4:8a:3f:33:66:04:7c:8f:02:
         7f:3a:b1:22:81:8c:9d:df:63:0c:85:66:96:37:92:f5:32:5a:
         b4:32:e5:a0:00:f8:bf:f4:4f:4d:f0:81:5d:3f:ff:3d:31:4a:
         8a:6e:67:51:46:2d:54:b6:4d:91:d6:20:73:41:5c:71:b2:be:
         df:6b:2d:2c:49:a7:fa:7a:83:c2:77:ab:22:f8:20:dd:8b:77:
         e4:35:4f:07:ce:40:5b:98:15:24:11:c6:90:76:c5:9c:fb:dc:
         17:88:d2:f7:1a:fa:1f:37:a5:ad:1c:a9:e4:af:2d:0d:41:0f:
         85:e1:1a:ce:f6:cb:77:1a:13:fc:e6:42:b0:d2:0e:fa:b7:be:
         ac:4b:a0:ee:e5:b3:a8:ba:7a:4c:25:cd:e6:51:2c:5b:75:72:
         93:ae:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org