Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e362e302f32332d3233203d3e20323637303339.roa
File:                     34352e3232382e362e302f32332d3233203d3e20323637303339.roa (raw, json)
Hash identifier:          G51r8gJc/O4zdSorQsbUFF5/4GZwsw1zBZDkoK2Y9Q8=
Subject key identifier:   82:5C:BA:36:D0:9B:A0:9B:71:03:A8:6C:A8:A8:2D:4B:60:FB:67:B5
Certificate issuer:       /CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
Certificate serial:       1FC78F89DAF1692C961C915C545F08BBD23171A1
Authority key identifier: 62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e362e302f32332d3233203d3e20323637303339.roa
Signing time:             Wed 03 Apr 2024 18:31:19 +0000
ROA not before:           Wed 03 Apr 2024 18:26:19 +0000
ROA not after:            Wed 02 Apr 2025 18:31:19 +0000
asID:                     267039
IP address blocks:        45.228.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c7:8f:89:da:f1:69:2c:96:1c:91:5c:54:5f:08:bb:d2:31:71:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
        Validity
            Not Before: Apr  3 18:26:19 2024 GMT
            Not After : Apr  2 18:31:19 2025 GMT
        Subject: CN=825CBA36D09BA09B7103A86CA8A82D4B60FB67B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:05:c7:0a:90:93:cc:7e:4a:6d:d0:cc:82:
                    e6:0c:26:10:97:e1:57:1a:a0:75:80:8d:0b:26:38:
                    60:7d:52:70:46:b6:46:08:23:c2:8f:bb:f8:1c:97:
                    df:f9:4b:06:72:e7:92:a3:36:71:bd:a6:2a:2b:bc:
                    07:b4:e6:f2:f6:40:10:c1:32:21:8e:ac:c3:e8:06:
                    c7:d9:26:40:5d:34:9f:34:00:ba:b7:e5:95:d1:dd:
                    25:0a:28:f9:3e:3b:4b:95:96:f8:27:89:af:5f:5d:
                    4c:df:3a:b9:cf:b0:1c:27:d0:da:86:5e:6b:f3:dc:
                    69:8f:26:f1:9f:bf:38:1f:62:6f:54:cd:e4:60:6e:
                    f4:15:20:54:95:b9:ff:fd:d5:38:4c:be:91:7d:d2:
                    b4:a3:da:83:9a:35:08:be:df:60:d4:f3:9f:70:d5:
                    c6:c6:71:2b:86:6b:12:d2:c6:20:d8:c6:74:a6:bf:
                    ee:7a:10:ee:53:51:d2:97:a9:db:90:6d:dc:99:a7:
                    8a:8c:86:64:45:f8:0b:e8:d0:e3:7e:f6:dc:5c:fc:
                    f8:b2:a8:b6:36:71:52:dc:5a:6e:ab:25:c9:ff:de:
                    7d:9b:e5:ae:60:1e:d3:12:90:b8:bf:e8:ca:b2:39:
                    8c:65:ba:f3:3e:8f:b5:17:63:6b:af:33:42:da:25:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5C:BA:36:D0:9B:A0:9B:71:03:A8:6C:A8:A8:2D:4B:60:FB:67:B5
            X509v3 Authority Key Identifier:
                keyid:62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e362e302f32332d3233203d3e20323637303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:19:9d:92:13:fb:d9:51:5f:eb:27:f8:a8:a8:eb:22:66:3f:
         b0:a3:2f:ae:42:bc:5f:e8:bd:15:34:93:64:86:1d:61:d4:78:
         2c:01:df:9c:bd:1b:30:37:40:a9:c9:22:2a:d6:02:d7:08:b2:
         17:99:ce:15:52:76:86:6a:9b:9a:8a:1f:91:b1:82:e2:9c:18:
         bb:c6:19:aa:95:85:29:4e:7a:f2:b3:55:4a:fd:92:b2:0a:21:
         0d:f1:0b:f4:5f:c5:36:3c:40:14:de:19:85:39:3b:65:88:ff:
         05:c6:1d:1a:9b:17:9f:ad:b3:a6:9f:cf:92:fc:38:85:80:35:
         96:8b:89:22:b4:40:1a:d9:12:50:5d:0b:fe:62:ec:c4:ff:22:
         86:fa:7c:ea:3a:bb:45:36:e1:c3:67:8d:56:81:b7:2f:8a:01:
         ea:6f:7a:cc:1d:d1:a3:2a:e0:b6:17:79:7f:d8:ab:85:4e:98:
         c0:5e:98:42:04:d7:83:91:d1:88:16:9c:ba:78:94:2b:ab:24:
         bf:56:00:52:fb:91:1a:1f:57:9e:31:3b:3b:4d:1a:53:a3:de:
         6f:b8:97:5d:77:8e:65:39:8d:c5:72:da:b1:97:65:f5:fe:ae:
         f2:59:7e:b2:57:35:bc:41:0f:f5:c4:aa:28:67:0f:c6:de:07:
         27:cb:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:36:33 2024 by rpki-client on console-ams.rpki-client.org