Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e31302e302f32332d3233203d3e20323639323632.roa
File:                     34352e3138322e31302e302f32332d3233203d3e20323639323632.roa (raw, json)
Hash identifier:          J/p01bpau1BLqUPNQPCta0U32lJWUt/uJlNi1J4RZN4=
Subject key identifier:   0A:B8:0D:60:55:C3:0B:92:72:16:B0:67:6B:D5:C1:26:68:D5:7B:8E
Certificate issuer:       /CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
Certificate serial:       51740C78BA9A8252CE385EDEC96B0623B1D61B9D
Authority key identifier: F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e31302e302f32332d3233203d3e20323639323632.roa
Signing time:             Thu 04 Apr 2024 07:29:07 +0000
ROA not before:           Thu 04 Apr 2024 07:24:07 +0000
ROA not after:            Thu 03 Apr 2025 07:29:07 +0000
asID:                     269262
IP address blocks:        45.182.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 07:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:74:0c:78:ba:9a:82:52:ce:38:5e:de:c9:6b:06:23:b1:d6:1b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Validity
            Not Before: Apr  4 07:24:07 2024 GMT
            Not After : Apr  3 07:29:07 2025 GMT
        Subject: CN=0AB80D6055C30B927216B0676BD5C12668D57B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:b6:34:c8:01:3b:4b:53:9c:ec:68:f9:37:
                    13:f9:2e:f1:ee:f2:46:eb:ad:17:18:eb:7f:81:2f:
                    dc:52:d3:cc:5b:27:d7:af:94:ff:49:7b:9c:a9:79:
                    4f:fa:93:a3:4a:ab:8b:4a:07:0b:5d:06:0f:81:61:
                    9a:d6:eb:0b:bc:ab:5e:a4:bd:6e:c1:55:90:f0:5d:
                    2e:d4:6c:ad:73:29:68:39:c5:ea:de:cc:3e:03:08:
                    87:e4:ff:55:76:42:e9:3f:c2:d1:ae:78:5c:82:fc:
                    62:2a:1a:01:20:37:30:9d:eb:15:b7:49:4f:37:94:
                    c2:a0:69:b2:46:2a:bc:a4:4c:45:6f:23:52:4c:2f:
                    0f:0b:ba:22:78:91:8d:8d:bf:da:b0:80:ff:0e:5e:
                    3c:7f:06:ea:56:fa:6a:ab:f6:19:85:01:02:d6:8f:
                    50:1b:64:7c:94:dc:24:34:01:be:96:f0:2d:b5:4c:
                    72:68:76:fb:44:e2:44:be:bf:e2:91:42:97:74:ec:
                    2f:42:f9:2e:2d:62:44:40:82:49:58:67:1f:28:fe:
                    13:fa:13:fe:e6:1f:d8:66:16:50:54:36:57:5c:ae:
                    40:fa:d9:f6:70:98:b5:7e:e5:c7:5f:28:dc:67:23:
                    b1:54:84:60:9c:26:61:27:12:2f:36:7f:31:4b:3c:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B8:0D:60:55:C3:0B:92:72:16:B0:67:6B:D5:C1:26:68:D5:7B:8E
            X509v3 Authority Key Identifier:
                keyid:F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e31302e302f32332d3233203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:ab:ce:3e:ff:95:77:d8:f7:cf:cb:f8:df:62:c6:c3:cf:
         e7:dd:62:f6:cd:93:81:76:ae:6e:79:51:cb:24:85:d9:ff:5d:
         fc:b9:14:30:26:52:d5:21:36:d7:f9:b2:78:8d:4f:e4:b5:b5:
         7e:62:a8:03:b8:5c:dc:02:68:ed:32:dc:d8:96:27:08:35:68:
         fc:e9:25:71:c8:61:f8:50:f0:42:68:8d:04:cd:a1:8c:c9:2c:
         bc:b3:91:6c:1a:04:f1:78:06:fc:fe:16:3f:fa:60:d6:cf:18:
         92:18:de:0d:48:91:31:c8:8a:15:97:d2:3e:55:dc:cb:7b:df:
         5c:c7:78:b8:a5:b5:f1:50:fe:7f:fc:74:53:65:63:6b:1f:94:
         11:76:b1:7f:1c:e7:93:87:e4:d7:c4:c2:00:77:7b:c2:c3:08:
         46:d5:8a:5b:d3:4d:52:c4:d1:5b:1c:ca:17:63:07:8a:ac:6d:
         b2:74:8e:c5:8f:09:c6:17:e8:af:48:14:4b:1e:a8:7e:41:fe:
         e3:fa:b5:f8:68:7c:eb:3f:27:6a:ff:43:5b:4f:e7:03:0f:47:
         ad:b7:75:70:59:fa:47:4f:d8:89:c5:7b:61:b7:e8:d4:ae:24:
         07:45:39:a6:aa:00:18:8a:c0:a4:ee:3d:16:f9:42:12:b6:9f:
         ac:d1:90:04
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUXQMeLqaglLOOF7eyWsGI7HWG50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJBQUZGQTM1OTlDMDZFOEU2OEFCNzc5NUYwREI4RjFC
QzdBN0Q2RTAeFw0yNDA0MDQwNzI0MDdaFw0yNTA0MDMwNzI5MDdaMDMxMTAvBgNV
BAMTKDBBQjgwRDYwNTVDMzBCOTI3MjE2QjA2NzZCRDVDMTI2NjhENTdCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXbY0yAE7S1Oc7Gj5NxP5LvHu
8kbrrRcY63+BL9xS08xbJ9evlP9Je5ypeU/6k6NKq4tKBwtdBg+BYZrW6wu8q16k
vW7BVZDwXS7UbK1zKWg5xerezD4DCIfk/1V2Quk/wtGueFyC/GIqGgEgNzCd6xW3
SU83lMKgabJGKrykTEVvI1JMLw8LuiJ4kY2Nv9qwgP8OXjx/BupW+mqr9hmFAQLW
j1AbZHyU3CQ0Ab6W8C21THJodvtE4kS+v+KRQpd07C9C+S4tYkRAgklYZx8o/hP6
E/7mH9hmFlBUNldcrkD62fZwmLV+5cdfKNxnI7FUhGCcJmEnEi82fzFLPCC7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCrgNYFXDC5JyFrBna9XBJmjVe44wHwYDVR0j
BBgwFoAU8qr/o1mcBujmird5Xw248bx6fW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNkYkNUYWl5c1I3ejhMRjRWZTI5Sm5WS0IxU1lXamN1bjVXVDg0VW9j
bVkvMi9GMkFBRkZBMzU5OUMwNkU4RTY4QUI3Nzk1RjBEQjhGMUJDN0E3RDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQUFGRkEzNTk5QzA2RThF
NjhBQjc3OTVGMERCOEYxQkM3QTdENkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZGJDVGFpeXNSN3o4TEY0VmUyOUpuVktCMVNZV2pjdW41V1Q4NFVvY21ZLzIv
MzQzNTJlMzEzODMyMmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbYKMA0GCSqGSIb3DQEBCwUAA4IBAQCSu6vOPv+V
d9j3z8v432LGw8/n3WL2zZOBdq5ueVHLJIXZ/138uRQwJlLVITbX+bJ4jU/ktbV+
YqgDuFzcAmjtMtzYlicINWj86SVxyGH4UPBCaI0EzaGMySy8s5FsGgTxeAb8/hY/
+mDWzxiSGN4NSJExyIoVl9I+VdzLe99cx3i4pbXxUP5//HRTZWNrH5QRdrF/HOeT
h+TXxMIAd3vCwwhG1Ypb001SxNFbHMoXYweKrG2ydI7FjwnGF+ivSBRLHqh+Qf7j
+rX4aHzrPydq/0NbT+cDD0ett3VwWfpHT9iJxXtht+jUriQHRTmmqgAYisCk7j0W
+UIStp+s0ZAE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org