Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32322d3232203d3e20323637393938.roa
File:                     34352e3136372e39362e302f32322d3232203d3e20323637393938.roa (raw, json)
Hash identifier:          /zxwT7vcAr+sXi4PYYy5o68yy8dw2xt1c2VEndYleWo=
Subject key identifier:   F6:B6:88:30:CC:E3:37:42:60:18:32:C5:13:CA:E5:57:EA:A0:BB:69
Certificate issuer:       /CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
Certificate serial:       64F885AE9E16C2F0479E0F8D6313209837C586A9
Authority key identifier: E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32322d3232203d3e20323637393938.roa
Signing time:             Tue 23 Apr 2024 13:46:24 +0000
ROA not before:           Tue 23 Apr 2024 13:41:24 +0000
ROA not after:            Tue 22 Apr 2025 13:46:24 +0000
asID:                     267998
IP address blocks:        45.167.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f8:85:ae:9e:16:c2:f0:47:9e:0f:8d:63:13:20:98:37:c5:86:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
        Validity
            Not Before: Apr 23 13:41:24 2024 GMT
            Not After : Apr 22 13:46:24 2025 GMT
        Subject: CN=F6B68830CCE33742601832C513CAE557EAA0BB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:a5:26:aa:f4:89:b5:5a:2c:ed:eb:5d:e1:
                    24:9d:aa:b9:35:54:90:d9:17:13:f7:d5:79:da:b9:
                    b1:61:08:1a:9d:17:67:01:52:3e:27:40:7b:07:9a:
                    ed:35:95:1f:77:f9:b2:f4:79:1e:b1:5b:79:84:dc:
                    8d:29:98:39:9a:4b:eb:bc:9a:d6:56:18:1c:2c:d5:
                    c1:63:ca:6f:8a:c1:1f:d5:a1:b2:ce:d1:8a:7f:35:
                    d0:06:99:1d:ae:67:ef:48:28:40:70:fc:65:b4:b0:
                    2f:56:6e:14:c7:60:bf:43:8e:17:d4:6a:00:5f:8e:
                    da:7e:13:ea:d9:70:d7:31:29:ba:e4:15:38:f8:08:
                    23:5a:32:2a:e5:37:20:7b:76:4e:21:ad:de:75:5a:
                    e7:0f:53:02:29:26:a5:8c:f5:d5:39:0f:03:9d:da:
                    e9:a1:89:49:94:91:77:c6:6d:19:41:53:7b:80:25:
                    71:4a:3f:e2:2b:e7:b0:96:dd:81:da:14:50:06:82:
                    8a:4d:4a:08:ee:98:4b:0c:46:8f:85:ec:39:ce:c8:
                    8e:f9:21:8b:34:49:71:f6:77:be:a1:37:64:03:67:
                    64:53:30:bd:8f:75:fd:9b:b6:e7:f5:f4:a3:80:65:
                    e5:9e:40:b7:f4:9a:5e:50:ab:da:c2:f8:e7:2b:7a:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B6:88:30:CC:E3:37:42:60:18:32:C5:13:CA:E5:57:EA:A0:BB:69
            X509v3 Authority Key Identifier:
                keyid:E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32322d3232203d3e20323637393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:08:a8:20:51:5c:85:c5:dd:1a:57:7b:03:9a:d4:be:b6:3d:
         e8:82:50:60:74:fd:ef:7c:c2:56:44:1f:b1:ab:cc:c4:ba:03:
         e0:63:14:f8:d9:cf:b2:e7:4c:f2:5e:d2:c7:21:89:49:86:f9:
         21:c1:e3:74:57:a2:9f:5f:5f:87:66:2d:5d:37:a3:6a:d0:cd:
         0a:74:e8:d1:f5:4b:2c:38:2c:28:ce:02:79:1d:14:48:e0:4a:
         ef:33:81:e5:dd:20:63:5c:43:7d:de:3a:dc:06:52:44:d9:f8:
         f6:6d:6d:90:9a:58:14:57:84:0b:78:06:ed:ff:59:b7:12:39:
         61:6d:99:61:91:2c:05:6a:f0:89:8d:f0:37:58:27:2d:ef:bc:
         7c:2b:d7:81:fc:77:59:97:a1:ad:67:11:d8:93:de:5d:12:13:
         da:b2:3b:f4:03:59:4f:4b:28:20:b2:aa:4c:80:7d:cf:90:d7:
         bf:90:a4:50:46:e7:ab:95:d1:fa:da:7e:e2:3c:07:07:b9:ca:
         9f:e6:66:73:ee:f9:6c:f0:a8:43:a2:23:72:63:de:d2:07:3d:
         7d:21:7e:4b:3f:b9:63:b0:3d:c5:ff:c0:74:1c:e6:bf:23:ed:
         f9:a3:02:79:26:94:73:bd:9b:67:e0:fb:58:bf:49:01:e2:79:
         35:dd:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org