Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3232362e31362e302f32322d3234203d3e20323632393037.roa
File:                     34352e3232362e31362e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          zhJHJHgy2K8i9JpjXl0N6z/wLfVMTC/7BnaUh83+Zq8=
Subject key identifier:   15:AC:3F:54:3D:06:C2:5E:4E:72:4E:E3:CF:FD:A2:09:7D:43:B7:BE
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       1D2BF2AD4D10182F488BD9FFA3D8A4C68891E4AF
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3232362e31362e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:24 +0000
ROA not before:           Sat 03 Feb 2024 12:48:24 +0000
ROA not after:            Sat 01 Feb 2025 12:53:24 +0000
asID:                     262907
IP address blocks:        45.226.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2b:f2:ad:4d:10:18:2f:48:8b:d9:ff:a3:d8:a4:c6:88:91:e4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:24 2024 GMT
            Not After : Feb  1 12:53:24 2025 GMT
        Subject: CN=15AC3F543D06C25E4E724EE3CFFDA2097D43B7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:7f:42:48:3d:70:a2:66:77:f1:3d:a6:37:
                    d5:0b:8d:c3:4b:65:ab:38:94:2d:db:98:c6:66:17:
                    7a:03:5b:37:78:01:a9:5e:ca:f5:e8:71:b5:c2:d8:
                    ab:2c:b0:e4:b9:13:14:21:94:c7:9d:67:47:41:fb:
                    55:ec:f8:71:64:aa:93:60:27:60:8b:42:ba:68:56:
                    bd:73:f7:24:67:72:aa:9e:2c:65:ed:a5:5b:9f:6a:
                    fb:2a:d4:75:8b:c7:a5:29:84:3c:54:c6:c6:20:69:
                    ba:ee:66:72:c1:14:18:95:c1:45:ec:3b:a6:ea:40:
                    b3:eb:b6:08:06:e6:92:74:59:99:62:c0:ee:96:48:
                    c3:ef:05:b9:92:fa:f5:7c:74:f0:6e:1b:1c:39:72:
                    6a:fe:a3:d4:31:d1:3d:1d:2b:65:9f:28:99:51:a8:
                    75:38:cd:ea:03:08:25:21:8c:5c:60:0a:d4:fd:f0:
                    cc:e2:e5:b6:44:95:7b:64:74:9d:1e:20:38:c1:62:
                    35:fd:36:01:a6:bd:7f:36:53:21:52:c6:6d:4c:3e:
                    90:64:c7:0e:39:bd:3f:bb:3d:74:01:a9:bb:27:34:
                    fa:dd:09:18:58:49:c4:11:e1:f3:b3:e2:35:56:76:
                    bd:00:16:bd:7a:44:03:ab:33:20:4a:24:02:a7:f7:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AC:3F:54:3D:06:C2:5E:4E:72:4E:E3:CF:FD:A2:09:7D:43:B7:BE
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3232362e31362e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:75:e8:43:a6:e9:89:2b:ae:5e:c0:65:df:7e:36:4d:65:
         ed:b5:44:8e:7a:8b:13:72:70:55:4e:b7:58:7e:7e:a6:9a:02:
         7e:9e:02:1c:b0:b0:6c:f8:4e:16:70:a4:05:0b:78:8e:1d:66:
         40:7d:e0:54:ff:20:92:b3:3e:f2:f8:7a:0a:09:d6:92:bb:f5:
         d2:f0:f8:ac:dc:18:38:95:86:59:b2:b0:88:c0:6c:1d:1d:5e:
         7e:ae:f6:99:f3:fd:0e:e9:f0:f7:49:f8:1d:90:67:5e:c7:fb:
         78:7e:c6:0e:e6:50:13:52:28:c7:a5:2f:24:e8:9b:f8:61:cc:
         b5:ca:eb:05:36:ea:70:01:d4:84:9f:34:74:c4:6e:a5:cd:92:
         72:68:31:7d:8e:29:e8:46:33:2c:a1:2e:f2:dd:14:a3:fb:14:
         cc:4a:f4:0d:f3:d5:08:d7:a0:97:70:fa:e0:74:0a:e8:3d:98:
         80:b7:46:e0:5e:d3:5d:18:23:2a:af:56:5d:5b:86:62:ce:5d:
         90:8e:f1:db:28:e4:3e:28:7e:2a:f2:60:8f:a9:5d:ca:0a:4a:
         4e:e7:96:ad:d5:62:b2:e9:ec:78:50:80:92:d4:98:78:58:6e:
         fc:06:01:b0:8e:7c:fb:54:3c:b9:45:5d:42:d6:82:b5:62:da:
         0b:6d:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org