Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32332d3233203d3e20323639323632.roa
File:                     34352e3138322e382e302f32332d3233203d3e20323639323632.roa (raw, json)
Hash identifier:          8fRpfMnQ9SgRWJ03MpTpb6k4NgBGVF41ONe2QA/2w2U=
Subject key identifier:   9A:65:63:F7:B0:30:C1:A2:F9:A7:91:4E:B5:02:15:F9:D1:0C:FD:E0
Certificate issuer:       /CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
Certificate serial:       3EFCBD009A8B68ACC5E25FE3B5D0E6878A964BED
Authority key identifier: F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32332d3233203d3e20323639323632.roa
Signing time:             Thu 04 Apr 2024 07:29:06 +0000
ROA not before:           Thu 04 Apr 2024 07:24:06 +0000
ROA not after:            Thu 03 Apr 2025 07:29:06 +0000
asID:                     269262
IP address blocks:        45.182.8.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 07:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fc:bd:00:9a:8b:68:ac:c5:e2:5f:e3:b5:d0:e6:87:8a:96:4b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Validity
            Not Before: Apr  4 07:24:06 2024 GMT
            Not After : Apr  3 07:29:06 2025 GMT
        Subject: CN=9A6563F7B030C1A2F9A7914EB50215F9D10CFDE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:05:c3:3d:d3:20:3b:13:6b:e8:5f:0e:87:
                    dc:58:97:03:09:e6:fe:1e:7e:39:04:9c:9b:7a:11:
                    01:39:27:93:74:9e:c1:df:a4:76:3e:c9:8c:d3:d3:
                    82:97:fc:ea:2d:e0:00:b2:4b:e7:0f:f4:07:fa:9b:
                    1b:90:60:38:90:43:96:9e:cf:3d:bc:a8:74:89:bc:
                    13:ba:bc:18:58:87:35:d3:7a:06:a0:89:bb:e1:48:
                    3b:90:cf:d0:80:2f:df:95:81:fa:68:77:7e:b2:e3:
                    d4:4c:84:40:3b:ac:a1:7a:22:85:1a:c4:a8:a7:b7:
                    79:03:3c:0a:8e:06:29:c7:77:0a:be:89:06:99:5b:
                    0f:41:e8:d0:7c:63:b7:24:94:50:56:57:a2:29:3d:
                    05:94:fb:08:57:72:75:d8:6e:70:6c:ba:ef:f3:9d:
                    10:3c:7c:49:15:f4:84:fc:c1:4e:7f:7b:a3:ad:e0:
                    a8:09:a9:32:e7:8c:05:13:7f:32:98:21:8e:1b:78:
                    59:5b:2e:3d:f5:82:87:0b:ca:ce:0f:6f:79:8c:eb:
                    fc:81:44:9e:d8:64:d6:2e:e2:b9:6d:8c:2e:d7:b9:
                    e3:91:7b:71:12:f9:62:51:2d:95:81:f1:93:44:6f:
                    15:a9:64:46:c2:6c:1a:ca:86:ef:4a:49:cd:54:e7:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:63:F7:B0:30:C1:A2:F9:A7:91:4E:B5:02:15:F9:D1:0C:FD:E0
            X509v3 Authority Key Identifier:
                keyid:F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32332d3233203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:6e:07:e1:09:73:18:b4:55:28:55:95:6e:11:ad:a0:9e:0f:
         d4:af:23:eb:af:58:60:c6:d6:92:3b:aa:5c:e4:b5:3d:e7:0e:
         8f:4a:86:51:81:a4:f5:6c:2c:71:07:7f:4c:c0:37:51:f7:c9:
         3e:e3:5c:d8:16:36:66:a7:32:9b:53:74:dc:b2:ef:67:41:8c:
         fe:29:bd:50:8c:62:b7:31:49:f5:ae:5f:8b:d0:c9:07:3c:81:
         25:4b:28:11:a2:af:a6:51:3e:bc:ba:67:7d:14:81:bf:86:b3:
         37:fb:86:86:e2:6c:f3:a0:16:7d:b9:5e:c7:eb:7d:b3:e4:3d:
         77:c7:56:14:ca:bf:d7:ed:8d:9f:36:26:95:d4:03:93:f6:ed:
         43:3c:bc:a0:8d:41:97:bd:f9:38:5a:5f:75:0f:49:7c:05:75:
         b0:19:1c:2e:0b:e0:f9:3d:35:52:12:c4:3b:2a:ac:c9:20:c8:
         87:61:77:ed:5b:56:70:b2:95:bf:f3:9e:b2:c0:9f:6a:03:ed:
         f5:8a:54:dd:eb:44:71:fb:f6:50:24:ae:25:84:dd:9a:df:30:
         d8:82:0a:c9:ab:9e:75:23:5b:69:5c:a9:92:83:8a:90:b7:1a:
         0e:d9:17:2d:7d:88:41:f0:cf:18:54:1f:18:d6:9d:0f:fb:d3:
         50:2d:27:71
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPvy9AJqLaKzF4l/jtdDmh4qWS+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJBQUZGQTM1OTlDMDZFOEU2OEFCNzc5NUYwREI4RjFC
QzdBN0Q2RTAeFw0yNDA0MDQwNzI0MDZaFw0yNTA0MDMwNzI5MDZaMDMxMTAvBgNV
BAMTKDlBNjU2M0Y3QjAzMEMxQTJGOUE3OTE0RUI1MDIxNUY5RDEwQ0ZERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0AXDPdMgOxNr6F8Oh9xYlwMJ
5v4efjkEnJt6EQE5J5N0nsHfpHY+yYzT04KX/Oot4ACyS+cP9Af6mxuQYDiQQ5ae
zz28qHSJvBO6vBhYhzXTegagibvhSDuQz9CAL9+Vgfpod36y49RMhEA7rKF6IoUa
xKint3kDPAqOBinHdwq+iQaZWw9B6NB8Y7cklFBWV6IpPQWU+whXcnXYbnBsuu/z
nRA8fEkV9IT8wU5/e6Ot4KgJqTLnjAUTfzKYIY4beFlbLj31gocLys4Pb3mM6/yB
RJ7YZNYu4rltjC7XueORe3ES+WJRLZWB8ZNEbxWpZEbCbBrKhu9KSc1U54XjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmmVj97AwwaL5p5FOtQIV+dEM/eAwHwYDVR0j
BBgwFoAU8qr/o1mcBujmird5Xw248bx6fW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNkYkNUYWl5c1I3ejhMRjRWZTI5Sm5WS0IxU1lXamN1bjVXVDg0VW9j
bVkvMi9GMkFBRkZBMzU5OUMwNkU4RTY4QUI3Nzk1RjBEQjhGMUJDN0E3RDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQUFGRkEzNTk5QzA2RThF
NjhBQjc3OTVGMERCOEYxQkM3QTdENkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZGJDVGFpeXNSN3o4TEY0VmUyOUpuVktCMVNZV2pjdW41V1Q4NFVvY21ZLzIv
MzQzNTJlMzEzODMyMmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzOTMy
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS22CDANBgkqhkiG9w0BAQsFAAOCAQEAom4H4QlzGLRV
KFWVbhGtoJ4P1K8j669YYMbWkjuqXOS1PecOj0qGUYGk9WwscQd/TMA3UffJPuNc
2BY2Zqcym1N03LLvZ0GM/im9UIxitzFJ9a5fi9DJBzyBJUsoEaKvplE+vLpnfRSB
v4azN/uGhuJs86AWfblex+t9s+Q9d8dWFMq/1+2NnzYmldQDk/btQzy8oI1Bl735
OFpfdQ9JfAV1sBkcLgvg+T01UhLEOyqsySDIh2F37VtWcLKVv/OessCfagPt9YpU
3etEcfv2UCSuJYTdmt8w2IIKyauedSNbaVypkoOKkLcaDtkXLX2IQfDPGFQfGNad
D/vTUC0ncQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org