Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135382e302f32332d3233203d3e20323639313431.roa
File:                     34352e3138302e3135382e302f32332d3233203d3e20323639313431.roa (raw, json)
Hash identifier:          o+PoR85o15z1D2guKQzye9nme9vDTF4EtkTzrlAFVy0=
Subject key identifier:   D2:47:3D:F8:5C:3D:43:E7:81:62:B4:A5:19:76:88:FB:2A:EA:E4:F7
Certificate issuer:       /CN=5666FA538340CCBC4448BADB02FF13734D58C9DA
Certificate serial:       7493311E94E68573433BF7C20A0BA97090DC299B
Authority key identifier: 56:66:FA:53:83:40:CC:BC:44:48:BA:DB:02:FF:13:73:4D:58:C9:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5666FA538340CCBC4448BADB02FF13734D58C9DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135382e302f32332d3233203d3e20323639313431.roa
Signing time:             Thu 18 Apr 2024 16:42:06 +0000
ROA not before:           Thu 18 Apr 2024 16:37:06 +0000
ROA not after:            Thu 17 Apr 2025 16:42:06 +0000
asID:                     269141
IP address blocks:        45.180.158.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:93:31:1e:94:e6:85:73:43:3b:f7:c2:0a:0b:a9:70:90:dc:29:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5666FA538340CCBC4448BADB02FF13734D58C9DA
        Validity
            Not Before: Apr 18 16:37:06 2024 GMT
            Not After : Apr 17 16:42:06 2025 GMT
        Subject: CN=D2473DF85C3D43E78162B4A5197688FB2AEAE4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:79:0c:41:56:46:72:12:af:b4:a4:10:cf:90:
                    b6:81:15:86:2c:ce:8c:b0:07:55:73:8f:1a:7a:73:
                    d8:3d:1f:55:2e:59:b0:7b:63:6f:d6:36:5e:e0:83:
                    4a:0b:73:42:71:5c:08:54:10:2a:3a:a3:35:fc:ec:
                    9d:eb:4c:85:7c:76:f5:9f:86:16:61:bc:a1:d4:db:
                    c1:5c:4f:96:a2:97:c5:6b:b1:34:5b:62:d1:24:89:
                    02:60:35:e1:20:06:a5:4d:b4:31:ef:4c:69:5f:d4:
                    82:17:4c:1e:cb:1a:f6:1c:8a:a8:37:de:75:7b:2c:
                    73:60:d9:71:8f:83:dd:59:6c:9b:44:15:25:ad:e0:
                    84:98:a7:81:54:91:b3:8f:e8:58:e9:78:ca:0e:16:
                    d8:60:ab:78:29:d0:52:41:f7:8b:21:39:1f:5c:b5:
                    61:2d:6a:82:db:64:73:2d:f7:b5:bf:68:ed:dc:81:
                    1d:dd:ab:4c:1b:52:a6:0e:b2:63:85:5e:38:87:10:
                    fc:e4:a0:4e:1a:1b:da:65:0c:bb:60:84:d6:54:56:
                    29:55:27:5a:e0:06:29:b4:76:6a:c4:45:f3:75:45:
                    6c:27:3d:fd:d4:47:95:c2:96:48:2d:33:6f:ce:4a:
                    96:3a:7a:8d:92:f3:00:1d:e8:b3:67:42:b7:17:be:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:47:3D:F8:5C:3D:43:E7:81:62:B4:A5:19:76:88:FB:2A:EA:E4:F7
            X509v3 Authority Key Identifier:
                keyid:56:66:FA:53:83:40:CC:BC:44:48:BA:DB:02:FF:13:73:4D:58:C9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/5666FA538340CCBC4448BADB02FF13734D58C9DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5666FA538340CCBC4448BADB02FF13734D58C9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135382e302f32332d3233203d3e20323639313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:0a:d5:de:2f:87:95:24:2b:9f:c8:19:03:71:1c:74:39:08:
         73:28:0e:61:c3:a7:aa:0d:47:4a:6c:79:71:4c:44:12:d5:a1:
         a2:5e:64:31:57:ab:22:19:de:b6:1d:69:69:7c:85:85:10:bb:
         88:5c:57:4f:08:e9:f6:1f:99:56:7f:8a:0b:bf:82:c7:ef:6c:
         57:0d:97:e4:f6:9b:21:e6:4c:a4:3f:51:1c:d9:f8:ff:3c:08:
         e7:3a:10:95:6c:a2:91:4c:f8:87:9f:09:c8:82:76:49:99:47:
         36:41:de:4a:e5:ec:60:e6:83:86:30:80:17:b7:29:5e:2a:8d:
         e6:84:49:b0:88:d9:6d:e7:2b:84:c9:4a:c4:b2:e1:fd:b4:1a:
         a4:5c:30:2d:24:fc:ed:d2:7f:59:eb:65:ea:5e:0d:04:7e:d9:
         f9:e1:92:66:6b:23:78:db:db:25:fd:b9:40:1e:96:3f:ad:2d:
         96:4f:5d:09:c4:8a:68:68:0b:17:08:df:8f:53:81:a5:9a:d2:
         64:da:f1:c2:75:a0:eb:26:60:5c:71:11:40:d7:74:df:16:81:
         d7:1f:5b:33:f4:0e:9c:2b:cc:80:fa:5b:5e:ba:07:43:85:9f:
         36:f2:d6:69:3d:7a:46:da:9e:e7:41:de:3e:14:15:75:71:24:
         46:41:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org