Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3234203d3e20323638323332.roa
File:                     34352e3233362e35362e302f32322d3234203d3e20323638323332.roa (raw, json)
Hash identifier:          sQWqjHwGR0pvn8PO5qKAqQszQhNcSX064xS55uOmuyw=
Subject key identifier:   6A:29:62:E2:38:CB:17:95:30:E8:99:98:C1:F6:D5:13:85:28:8E:EC
Certificate issuer:       /CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
Certificate serial:       3F3C23F0D531BAA75E32C03F7541BDD1196557A8
Authority key identifier: 0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3234203d3e20323638323332.roa
Signing time:             Wed 03 Apr 2024 20:06:55 +0000
ROA not before:           Wed 03 Apr 2024 20:01:55 +0000
ROA not after:            Wed 02 Apr 2025 20:06:55 +0000
asID:                     268232
IP address blocks:        45.236.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3c:23:f0:d5:31:ba:a7:5e:32:c0:3f:75:41:bd:d1:19:65:57:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
        Validity
            Not Before: Apr  3 20:01:55 2024 GMT
            Not After : Apr  2 20:06:55 2025 GMT
        Subject: CN=6A2962E238CB179530E89998C1F6D51385288EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:65:ce:4f:75:48:24:49:c7:ef:f4:cc:c1:
                    b5:aa:bb:79:fc:5f:c3:44:31:11:a2:c0:99:db:92:
                    ca:aa:09:4b:d3:8f:f7:f3:8e:9a:2c:f7:b0:b9:99:
                    d8:92:cf:a6:bc:90:c4:4e:e6:e4:f0:2e:cc:df:23:
                    77:59:b5:ad:eb:02:a4:a0:9d:1a:ca:80:ec:03:c1:
                    7a:61:1f:96:67:29:db:af:06:d1:cd:77:06:3a:d8:
                    a2:3e:8e:b2:cc:76:1a:7b:8e:96:c3:e6:36:4a:04:
                    13:90:7a:64:3e:52:37:64:14:b5:c7:f3:a5:f1:7e:
                    8a:c4:58:b9:88:60:a2:bd:c1:b4:f5:c2:bf:44:8a:
                    b2:bb:3e:3a:b6:46:40:f5:5b:fc:74:79:21:a2:9a:
                    ed:74:3a:e0:7f:e4:65:74:7f:4c:3b:f7:0b:9b:2a:
                    7b:e8:c3:84:ea:0a:e6:e6:44:b4:2a:f4:e8:f9:e0:
                    77:a7:9a:a8:46:e8:c7:2c:dc:0f:9d:fa:9e:01:82:
                    63:f6:ea:a8:e2:f3:36:09:16:0c:0a:2c:e9:db:0b:
                    57:12:2c:a6:08:ee:f7:e3:ec:be:da:c2:3f:50:70:
                    73:b1:f2:50:62:d5:4c:69:80:a3:c9:b4:ef:02:7f:
                    d1:e8:61:26:ba:70:5c:85:b2:f4:e7:55:8b:3b:97:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:29:62:E2:38:CB:17:95:30:E8:99:98:C1:F6:D5:13:85:28:8E:EC
            X509v3 Authority Key Identifier:
                keyid:0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/34352e3233362e35362e302f32322d3234203d3e20323638323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:93:95:08:16:f5:50:58:3d:21:62:e8:c7:68:16:24:24:
         d9:79:e2:46:60:01:f6:e2:02:0e:18:e7:23:e2:6f:7a:cf:5d:
         d5:56:e1:95:b1:d0:a3:a8:43:4e:e7:52:d3:d6:53:99:7e:2f:
         72:36:09:59:2b:97:c9:1e:3f:3e:99:fe:66:12:80:53:d0:67:
         4e:dd:14:01:02:13:a3:66:70:55:d1:68:a6:d9:b1:0e:b7:30:
         56:a3:07:cf:2f:2d:8c:22:05:6d:44:ba:80:2d:ed:49:25:a5:
         79:f0:1b:fa:c2:e3:2e:8c:5d:8e:04:59:ac:28:a0:b2:66:93:
         7e:c6:c0:ac:ae:71:44:3e:56:05:08:28:93:c4:b9:30:25:17:
         ce:2f:e4:f0:1c:a0:9c:9f:d2:fe:ec:55:8d:94:e0:21:60:69:
         c9:15:25:19:ff:86:3a:a3:4f:32:db:f5:e5:3d:f5:c3:43:67:
         54:4f:24:ef:bc:94:cb:4c:b3:5e:22:d4:f2:f9:13:0f:47:81:
         8f:93:57:4f:96:f1:22:53:86:2d:52:50:b8:d8:4b:08:d3:44:
         c8:18:49:b4:b5:4b:f4:fa:73:23:3f:d5:3c:6c:7d:23:d1:63:
         ab:31:4f:6c:a8:bc:68:ee:24:ae:43:b7:5d:63:8e:ac:78:dc:
         34:99:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 22:19:32 2024 by rpki-client on console-ams.rpki-client.org