Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135362e302f32332d3233203d3e20323639313431.roa
File:                     34352e3138302e3135362e302f32332d3233203d3e20323639313431.roa (raw, json)
Hash identifier:          +qICD+6EnDHkM/ujMeETzBNqZHzO+BeSm0+65UIMWuY=
Subject key identifier:   43:21:0F:97:9F:06:D7:DB:69:64:2B:07:F4:AC:75:5A:F4:A9:99:59
Certificate issuer:       /CN=5666FA538340CCBC4448BADB02FF13734D58C9DA
Certificate serial:       05E8947797E3CDBA7B8CA7080B9984BCC3DF4AC7
Authority key identifier: 56:66:FA:53:83:40:CC:BC:44:48:BA:DB:02:FF:13:73:4D:58:C9:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5666FA538340CCBC4448BADB02FF13734D58C9DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135362e302f32332d3233203d3e20323639313431.roa
Signing time:             Thu 18 Apr 2024 16:42:04 +0000
ROA not before:           Thu 18 Apr 2024 16:37:04 +0000
ROA not after:            Thu 17 Apr 2025 16:42:04 +0000
asID:                     269141
IP address blocks:        45.180.156.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e8:94:77:97:e3:cd:ba:7b:8c:a7:08:0b:99:84:bc:c3:df:4a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5666FA538340CCBC4448BADB02FF13734D58C9DA
        Validity
            Not Before: Apr 18 16:37:04 2024 GMT
            Not After : Apr 17 16:42:04 2025 GMT
        Subject: CN=43210F979F06D7DB69642B07F4AC755AF4A99959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:0c:10:c0:58:ee:ac:f5:ca:c2:7e:90:e5:
                    4b:b2:d7:bb:74:4b:51:80:64:84:ef:6d:05:9a:cc:
                    aa:bc:a0:e7:dd:9c:32:5f:c7:ef:31:a7:11:ad:12:
                    57:b6:d5:d8:75:6e:8b:0e:12:32:6e:5a:73:7e:aa:
                    e9:50:6a:83:91:68:79:da:2a:d4:36:f9:36:89:c9:
                    dc:dc:54:95:56:bf:c9:75:90:2d:09:99:67:02:31:
                    eb:f2:e6:31:15:a8:42:43:6d:18:91:25:88:e4:56:
                    c3:ec:61:70:db:de:e6:77:90:77:c2:31:7f:7e:12:
                    d5:00:ed:cb:c2:a9:ea:ce:f5:32:58:1b:6b:4c:f6:
                    4e:db:74:95:61:56:6d:cf:95:e6:e8:5a:e2:8c:b0:
                    da:dd:36:16:41:10:81:20:e4:7f:6c:5c:eb:13:2b:
                    c6:e0:10:34:8b:7a:6e:d4:f5:ff:0a:bc:20:d5:3b:
                    4a:cc:69:01:13:31:e1:b5:0a:13:ec:88:9b:ca:8e:
                    03:79:8c:b1:39:cc:fc:55:b9:03:7e:00:41:54:71:
                    aa:37:50:1b:b1:b4:01:0a:46:18:a5:b2:ce:15:3f:
                    c3:aa:71:20:62:6b:24:df:54:82:52:74:33:0d:1b:
                    17:d5:65:79:d4:1a:fb:92:ce:83:fa:33:4f:56:0d:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:21:0F:97:9F:06:D7:DB:69:64:2B:07:F4:AC:75:5A:F4:A9:99:59
            X509v3 Authority Key Identifier:
                keyid:56:66:FA:53:83:40:CC:BC:44:48:BA:DB:02:FF:13:73:4D:58:C9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/5666FA538340CCBC4448BADB02FF13734D58C9DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5666FA538340CCBC4448BADB02FF13734D58C9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135362e302f32332d3233203d3e20323639313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:1f:1c:7b:58:85:d8:75:26:34:eb:6d:2d:18:dd:a9:d2:1d:
         f0:fa:7c:98:fe:9e:90:12:af:f1:85:1e:7b:4a:da:4b:cb:9d:
         2c:1a:d7:64:f8:40:ae:3e:01:61:fa:3c:97:b0:db:97:03:da:
         c8:64:4b:8c:bf:ad:40:6d:81:90:0d:f1:f2:c8:8f:54:24:9a:
         f8:d5:31:f0:07:3c:51:8e:1c:33:7a:6b:bd:af:57:88:89:de:
         71:90:1c:04:51:84:39:87:43:0b:a5:7f:e1:04:1a:55:37:4a:
         25:dd:02:de:7f:02:36:77:ed:4e:ba:ce:9b:2e:bc:b0:45:25:
         d1:7e:88:78:b5:09:d2:7a:31:00:f3:a2:5a:ba:e9:5d:dd:f3:
         b3:3c:59:8e:93:46:0e:0a:ae:0e:f1:bf:14:56:93:fa:1a:b9:
         53:79:e1:12:8d:19:da:d6:70:f9:77:82:0e:0c:f2:4f:c3:1a:
         36:37:3f:fb:09:3e:c4:f2:fc:2a:56:99:e7:72:33:fd:5e:c1:
         14:7c:95:cc:d9:2f:d0:3d:ca:7a:fe:1d:57:f5:b8:a7:b9:dc:
         50:b1:cd:7a:2a:04:cc:92:71:de:e5:20:d4:ce:c3:18:1d:39:
         3d:87:24:d0:c2:b2:bb:c1:18:60:67:ab:cb:f2:3b:1c:3d:98:
         e8:e0:97:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org