Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39382e302f32342d3234203d3e20323637333636.roa
File:                     34352e3136372e39382e302f32342d3234203d3e20323637333636.roa (raw, json)
Hash identifier:          7FlCW0X8VWpbZrnp2c8bzKSsPz6ov2HTpb0BnUBqHd0=
Subject key identifier:   27:9C:81:C3:EC:F0:61:76:DC:A1:10:6C:60:89:71:8C:6D:E5:84:63
Certificate issuer:       /CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
Certificate serial:       74BFF8DF263345AB7AB41EA0B86EDBDD6EB7E7B7
Authority key identifier: E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39382e302f32342d3234203d3e20323637333636.roa
Signing time:             Tue 23 Apr 2024 13:46:21 +0000
ROA not before:           Tue 23 Apr 2024 13:41:21 +0000
ROA not after:            Tue 22 Apr 2025 13:46:21 +0000
asID:                     267366
IP address blocks:        45.167.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bf:f8:df:26:33:45:ab:7a:b4:1e:a0:b8:6e:db:dd:6e:b7:e7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
        Validity
            Not Before: Apr 23 13:41:21 2024 GMT
            Not After : Apr 22 13:46:21 2025 GMT
        Subject: CN=279C81C3ECF06176DCA1106C6089718C6DE58463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:8b:36:7f:58:3e:fe:b8:fa:b9:a5:5c:fc:
                    ba:c6:f2:bb:16:d7:98:46:85:1c:0d:26:0a:1b:4b:
                    b3:a7:9f:08:f2:8d:67:e2:f6:a1:5e:9d:dd:59:7d:
                    16:b9:99:cc:28:d2:ba:c7:de:c3:7e:4c:b3:67:7d:
                    b9:f8:37:c4:db:54:94:1f:76:f2:cc:e1:fd:3e:9c:
                    f4:f6:72:dd:33:d0:bd:cd:0a:0b:d2:bf:34:12:51:
                    30:f2:fd:80:08:b3:5b:01:1e:3e:2f:4b:fc:98:08:
                    6b:0b:a8:04:db:61:8c:46:28:d4:4f:de:03:73:b2:
                    78:8d:bf:8a:5a:8b:70:0c:e0:23:bf:19:0c:48:02:
                    12:2f:99:2f:79:a7:42:e8:5f:d8:ba:ee:5f:b2:81:
                    a8:37:f2:ec:00:95:ec:ac:08:f4:6b:8f:dd:1a:ef:
                    7a:71:0d:dc:06:12:ed:90:a4:34:d1:d2:38:d7:fc:
                    fb:60:73:54:47:3f:d5:de:db:64:41:9f:66:48:a8:
                    ce:af:c5:fb:d1:93:27:a6:df:60:51:fb:8e:4e:8a:
                    15:ba:56:33:45:bb:e3:f5:80:d2:74:58:62:3c:99:
                    f7:f0:09:ce:d0:3f:49:8b:17:41:c0:b1:8f:bd:95:
                    09:b4:5b:4b:56:ed:d2:6f:8a:a8:00:61:ec:4e:d8:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9C:81:C3:EC:F0:61:76:DC:A1:10:6C:60:89:71:8C:6D:E5:84:63
            X509v3 Authority Key Identifier:
                keyid:E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39382e302f32342d3234203d3e20323637333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:df:6c:ae:9a:79:ef:c2:2d:84:80:4c:cf:ca:60:29:4a:91:
         7a:92:88:b5:5b:a1:22:e2:ea:e5:c0:ff:ed:cc:27:c7:f9:0c:
         23:ab:87:94:13:58:a2:9a:d0:2c:d8:b4:2d:48:a1:58:23:7c:
         d0:71:21:fa:db:dc:d2:33:e9:cd:e5:19:92:72:11:e3:0a:88:
         fa:8f:2c:98:bd:fc:78:33:bf:e5:41:dd:59:2c:c1:68:69:74:
         15:db:8e:c9:e8:bf:4c:a3:aa:cf:20:88:05:7c:bf:c8:67:82:
         41:97:37:4b:68:c8:8a:73:67:f8:56:fd:9c:f4:20:6e:eb:1f:
         3a:7f:41:2a:b1:5a:76:a4:83:1a:a8:5b:cd:c2:36:c5:76:d6:
         4b:52:bd:b9:83:e6:e1:39:78:d9:fc:29:cb:ac:bc:27:03:ae:
         a8:e1:21:2d:68:bf:bd:f3:8b:ca:6a:11:62:da:23:02:96:a7:
         72:8b:65:32:5d:5e:7c:45:0d:a7:80:79:6d:4b:74:b2:2e:aa:
         76:47:f4:2a:19:c9:8c:51:22:2b:70:83:17:ca:d1:84:dc:31:
         8a:18:37:e2:19:7a:35:88:f5:67:10:35:a4:34:58:6b:68:4f:
         bc:2b:fd:17:07:02:6d:56:bc:c5:0c:e1:62:ef:cf:41:70:22:
         a3:ae:25:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdL/43yYzRat6tB6guG7b3W6357cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVGQUVCQkZCRjg2NkIyODM2RjYwNDFCQjEyRUQzQjAw
OTU0NENCMDAeFw0yNDA0MjMxMzQxMjFaFw0yNTA0MjIxMzQ2MjFaMDMxMTAvBgNV
BAMTKDI3OUM4MUMzRUNGMDYxNzZEQ0ExMTA2QzYwODk3MThDNkRFNTg0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7aIs2f1g+/rj6uaVc/LrG8rsW
15hGhRwNJgobS7OnnwjyjWfi9qFend1ZfRa5mcwo0rrH3sN+TLNnfbn4N8TbVJQf
dvLM4f0+nPT2ct0z0L3NCgvSvzQSUTDy/YAIs1sBHj4vS/yYCGsLqATbYYxGKNRP
3gNzsniNv4pai3AM4CO/GQxIAhIvmS95p0LoX9i67l+ygag38uwAleysCPRrj90a
73pxDdwGEu2QpDTR0jjX/Ptgc1RHP9Xe22RBn2ZIqM6vxfvRkyem32BR+45OihW6
VjNFu+P1gNJ0WGI8mffwCc7QP0mLF0HAsY+9lQm0W0tW7dJviqgAYexO2GaxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJ5yBw+zwYXbcoRBsYIlxjG3lhGMwHwYDVR0j
BBgwFoAU5frrv7+Gayg29gQbsS7TsAlUTLAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFl
SmovMC9FNUZBRUJCRkJGODY2QjI4MzZGNjA0MUJCMTJFRDNCMDA5NTQ0Q0IwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1RkFFQkJGQkY4NjZCMjgz
NkY2MDQxQkIxMkVEM0IwMDk1NDRDQjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4emhRWW5ZN0tSZEVMbjV0VEpjRkVTTGdVeWV0dXBqSHlWeTJodTJRZUpqLzAv
MzQzNTJlMzEzNjM3MmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALadiMA0GCSqGSIb3DQEBCwUAA4IBAQAD32yumnnv
wi2EgEzPymApSpF6koi1W6Ei4urlwP/tzCfH+Qwjq4eUE1iimtAs2LQtSKFYI3zQ
cSH629zSM+nN5RmSchHjCoj6jyyYvfx4M7/lQd1ZLMFoaXQV247J6L9Mo6rPIIgF
fL/IZ4JBlzdLaMiKc2f4Vv2c9CBu6x86f0EqsVp2pIMaqFvNwjbFdtZLUr25g+bh
OXjZ/CnLrLwnA66o4SEtaL+984vKahFi2iMClqdyi2UyXV58RQ2ngHltS3SyLqp2
R/QqGcmMUSIrcIMXytGE3DGKGDfiGXo1iPVnEDWkNFhraE+8K/0XBwJtVrzFDOFi
789BcCKjriUD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org