Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e392e302f32342d3234203d3e20323639323632.roa
File:                     34352e3138322e392e302f32342d3234203d3e20323639323632.roa (raw, json)
Hash identifier:          yD5LTBBLn9nR4dnB4tTF3CbUwpCPZfQHs1/tmm90+fw=
Subject key identifier:   84:6B:D2:87:F2:A4:55:09:83:22:C4:1F:8D:E2:D2:BF:C4:26:3F:AC
Certificate issuer:       /CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
Certificate serial:       5E420A947421735928FDA9FA7D713099081E5846
Authority key identifier: F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e392e302f32342d3234203d3e20323639323632.roa
Signing time:             Thu 04 Apr 2024 07:29:07 +0000
ROA not before:           Thu 04 Apr 2024 07:24:07 +0000
ROA not after:            Thu 03 Apr 2025 07:29:07 +0000
asID:                     269262
IP address blocks:        45.182.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 07:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:42:0a:94:74:21:73:59:28:fd:a9:fa:7d:71:30:99:08:1e:58:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Validity
            Not Before: Apr  4 07:24:07 2024 GMT
            Not After : Apr  3 07:29:07 2025 GMT
        Subject: CN=846BD287F2A455098322C41F8DE2D2BFC4263FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:15:b6:f2:20:ad:58:cb:6d:e4:17:d6:18:
                    d2:c9:5b:f2:56:67:27:2a:41:09:53:76:f2:49:ab:
                    e7:05:52:05:32:e4:15:8f:d8:7b:ef:85:02:cf:26:
                    20:85:6f:e9:29:90:0f:d3:cb:c5:26:83:ce:53:2b:
                    c2:02:66:37:9f:e5:bd:d0:fe:20:11:de:a1:ff:e7:
                    f9:9e:cb:3e:20:23:2d:9c:a9:bc:34:c8:36:03:cb:
                    67:42:be:e1:6f:94:92:d8:2d:50:33:1c:1c:54:f4:
                    31:6a:5f:7e:de:01:f2:3f:bf:83:da:32:5f:67:8e:
                    bc:46:8d:d9:13:68:93:1f:6e:31:13:58:1c:89:12:
                    df:49:ad:2c:12:95:f2:2c:3c:73:49:c3:f9:73:10:
                    d8:36:48:1a:b5:43:35:c1:5b:28:f7:e2:09:4f:43:
                    b6:8f:7e:38:3d:f2:0f:e6:33:b0:c0:50:ef:fe:be:
                    58:0f:db:27:47:39:e7:24:9b:22:5e:fe:37:28:f1:
                    61:fd:35:6c:69:3a:5f:93:04:0a:b6:d6:94:08:0b:
                    f5:3b:16:69:55:67:c4:5b:39:7c:66:ae:2e:6e:3b:
                    4f:56:2e:64:f0:5b:da:80:57:3f:21:c3:ae:30:0a:
                    64:84:f3:fe:07:ad:be:3c:c9:1a:5c:23:f1:98:19:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6B:D2:87:F2:A4:55:09:83:22:C4:1F:8D:E2:D2:BF:C4:26:3F:AC
            X509v3 Authority Key Identifier:
                keyid:F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e392e302f32342d3234203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:36:67:60:64:e5:79:ed:ff:c8:8e:f6:a0:65:fb:d2:c5:
         c7:aa:cb:c2:5d:bb:7f:25:dc:e3:ea:2b:63:9f:63:35:c4:1c:
         5e:7d:12:c7:97:2a:33:98:6a:84:ea:3e:7c:d8:7d:db:f8:e8:
         f5:69:9d:4d:cd:77:6f:18:59:6b:4b:43:ab:1c:1a:8a:8e:ee:
         a7:79:7d:39:60:5a:00:3d:6f:db:fc:42:2f:7e:00:9a:ac:1c:
         c1:32:e4:07:31:7a:aa:83:11:1c:dc:30:6d:5e:b2:d7:5d:3b:
         bb:32:27:88:c3:85:42:4d:4e:c7:05:2b:e9:bf:f3:8e:0a:74:
         a4:97:87:62:b7:59:a9:2a:a4:58:22:b0:3c:36:0a:37:f7:42:
         ed:59:dc:3f:07:d3:f8:ed:6b:6a:f2:7d:dc:5e:28:a8:ff:c0:
         5e:72:0a:b8:27:56:07:1a:91:60:ba:79:e6:cf:6c:36:ee:21:
         53:ca:9d:e1:44:e4:52:d4:59:b6:7f:dd:5c:c0:69:7b:44:f3:
         41:c4:c3:d8:3d:4c:6b:22:71:9e:c7:82:f7:7b:d2:be:49:8c:
         35:7a:ae:60:37:a1:4d:53:10:50:3b:dc:f5:1f:77:d9:65:3c:
         1a:65:9d:46:83:1b:1a:75:57:44:9c:11:69:f1:f2:c5:5a:2d:
         dd:da:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org