Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/34352e3233382e3133362e302f32322d3234203d3e20323638333332.roa
File:                     34352e3233382e3133362e302f32322d3234203d3e20323638333332.roa (raw, json)
Hash identifier:          XAbhrgzFe6KK2qGmQi1+bi4hVpTcLgAHIr2XDWlG3L0=
Subject key identifier:   A3:82:94:99:74:1C:E5:46:A0:C7:F5:4E:4A:9F:76:9E:BA:57:49:0A
Certificate issuer:       /CN=5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569
Certificate serial:       67DE459E46F1909EA0E3713864785D0ED7A14638
Authority key identifier: 5F:D4:E6:E1:ED:FB:75:29:B3:E6:62:21:5D:DD:A6:DA:02:6A:25:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/34352e3233382e3133362e302f32322d3234203d3e20323638333332.roa
Signing time:             Wed 04 Sep 2024 18:20:08 +0000
ROA not before:           Wed 04 Sep 2024 18:15:08 +0000
ROA not after:            Wed 03 Sep 2025 18:20:08 +0000
asID:                     268332
IP address blocks:        45.238.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:de:45:9e:46:f1:90:9e:a0:e3:71:38:64:78:5d:0e:d7:a1:46:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569
        Validity
            Not Before: Sep  4 18:15:08 2024 GMT
            Not After : Sep  3 18:20:08 2025 GMT
        Subject: CN=A3829499741CE546A0C7F54E4A9F769EBA57490A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:ba:b8:62:92:ec:86:f3:ab:c7:56:08:83:
                    61:66:88:c7:c3:96:7a:fa:55:a8:7c:79:f2:55:bc:
                    b0:de:1d:1c:a0:e3:d3:fa:9e:f8:14:fa:68:98:0a:
                    2a:87:52:db:3e:88:d8:95:b0:a4:59:49:90:c1:c3:
                    84:87:46:d6:6e:09:e2:80:1a:ff:5a:74:c6:c0:43:
                    5a:d8:0c:87:d3:08:7d:b1:2a:32:46:f9:ef:e9:b7:
                    04:db:90:cc:b7:bd:e4:b1:2d:f7:67:d0:e0:b1:a2:
                    33:1a:b9:cc:ee:1d:26:9f:34:a2:4a:e8:08:14:12:
                    d9:f9:de:ca:4f:a1:b1:ae:00:88:68:8d:4b:0d:ed:
                    38:a9:2e:bf:d2:53:69:af:93:e3:8a:fd:9f:c3:a1:
                    d2:00:a9:49:b5:41:e3:29:d0:ca:56:74:3b:07:80:
                    a2:1f:e4:61:e2:e2:51:83:db:89:f5:86:bf:54:cc:
                    36:0a:a9:ca:05:e8:92:f2:7b:9c:24:ac:c3:36:07:
                    07:9d:fe:ab:39:c5:dd:d7:1b:10:5e:d3:eb:d4:53:
                    4a:24:7f:a9:28:c4:a0:f8:b2:b9:7b:28:02:33:e9:
                    95:cf:a7:0a:54:da:55:c7:fa:e3:75:dd:5f:7a:ab:
                    6d:69:8d:78:2a:24:c7:b4:dc:8c:97:15:d3:cc:5f:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:82:94:99:74:1C:E5:46:A0:C7:F5:4E:4A:9F:76:9E:BA:57:49:0A
            X509v3 Authority Key Identifier:
                keyid:5F:D4:E6:E1:ED:FB:75:29:B3:E6:62:21:5D:DD:A6:DA:02:6A:25:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/34352e3233382e3133362e302f32322d3234203d3e20323638333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:95:fd:d8:c0:d8:66:b4:d2:9a:83:ae:57:68:c8:1c:9e:
         00:ce:18:45:24:18:21:60:03:d0:82:e6:dc:17:42:91:29:06:
         31:a2:8e:43:3c:48:92:f9:22:7d:26:84:59:b8:1f:eb:82:b1:
         8f:ef:a4:94:2c:1a:a9:7d:1e:d2:20:f3:ce:5e:f9:b0:f4:19:
         2b:65:a9:c5:51:79:0f:ca:2e:45:61:c1:4a:36:ae:8c:7f:07:
         c4:98:ac:8d:71:fc:44:a7:5e:76:cf:d6:20:72:ce:8b:78:16:
         64:81:bf:9e:3f:84:9f:29:ba:d9:00:ed:e5:f6:84:eb:b6:e0:
         57:ef:2c:f3:3c:48:78:60:05:9a:ec:eb:48:dc:c5:51:1d:ff:
         19:09:0f:19:33:cf:8e:0a:a8:19:13:64:6b:29:0c:d9:e7:fb:
         51:5b:48:36:a7:8e:4d:45:a9:2a:80:0c:52:2a:0c:35:23:57:
         01:41:b4:17:e6:51:7b:48:e6:cf:cc:95:5a:ff:0d:48:6f:a5:
         3f:87:f1:3e:54:e1:39:23:3e:52:0f:78:72:51:82:26:fb:4d:
         86:f0:42:dd:14:d3:9c:c2:ed:52:39:01:32:5c:10:da:ba:5a:
         9a:23:10:e8:fe:b1:e9:20:a1:e6:93:ca:4c:06:f3:88:d1:85:
         f4:b7:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 20:38:12 2024 by rpki-client on console-ams.rpki-client.org