Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/34352e3138322e38382e302f32332d3233203d3e20323639323736.roa
File:                     34352e3138322e38382e302f32332d3233203d3e20323639323736.roa (raw, json)
Hash identifier:          01gSC/v4CJj2sYO4pbQCEuvGq5rszvigM5j45jRiEZM=
Subject key identifier:   21:5A:E6:22:C5:55:D7:CD:F6:95:B5:84:3B:89:29:E1:9E:4B:08:2F
Certificate issuer:       /CN=BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F
Certificate serial:       4A2D0707885E25912BE0E8458DE2E52C9A80A252
Authority key identifier: BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/34352e3138322e38382e302f32332d3233203d3e20323639323736.roa
Signing time:             Fri 05 Apr 2024 04:14:10 +0000
ROA not before:           Fri 05 Apr 2024 04:09:10 +0000
ROA not after:            Fri 04 Apr 2025 04:14:10 +0000
asID:                     269276
IP address blocks:        45.182.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 14:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2d:07:07:88:5e:25:91:2b:e0:e8:45:8d:e2:e5:2c:9a:80:a2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F
        Validity
            Not Before: Apr  5 04:09:10 2024 GMT
            Not After : Apr  4 04:14:10 2025 GMT
        Subject: CN=215AE622C555D7CDF695B5843B8929E19E4B082F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:86:bb:a0:b6:e0:5f:9b:27:ed:b3:a6:70:
                    0b:1f:7b:2a:71:d2:cc:a0:9d:69:5b:50:b7:2c:e0:
                    02:9b:02:7d:6c:fa:1a:c0:8d:ed:df:e8:a3:86:2e:
                    8a:09:b0:ef:61:91:13:04:c4:15:ce:72:15:e7:17:
                    95:eb:91:d1:49:c7:ff:97:77:19:58:95:06:59:14:
                    a8:76:85:59:bf:9e:65:22:f6:a0:2b:40:82:91:0a:
                    66:3b:6a:e7:e5:ce:5e:a9:d6:39:64:e9:1a:a4:ca:
                    e1:86:91:aa:12:5c:2d:85:d5:15:b1:05:87:95:81:
                    ed:79:5f:5f:9d:81:d5:26:45:2c:0e:7d:eb:8e:42:
                    46:a5:01:68:2a:c2:ac:cd:a2:3c:2a:33:81:eb:fa:
                    ea:8e:9b:c5:29:12:66:3b:5b:97:9b:ee:61:48:d9:
                    d9:de:c2:97:88:e3:99:fb:33:fd:8b:33:65:dd:db:
                    89:07:aa:6d:03:38:ab:dd:6d:c5:05:f9:d2:3a:8a:
                    c4:13:95:fb:c0:c4:a5:a1:f0:78:e5:f9:8f:21:67:
                    5a:53:9d:2f:e9:ae:50:03:33:59:3e:15:79:4b:b7:
                    8b:40:ee:58:df:ab:06:42:73:86:6b:ab:90:72:27:
                    c1:bd:a1:11:92:dc:12:c8:8f:65:ea:2c:c4:46:fd:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5A:E6:22:C5:55:D7:CD:F6:95:B5:84:3B:89:29:E1:9E:4B:08:2F
            X509v3 Authority Key Identifier:
                keyid:BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/34352e3138322e38382e302f32332d3233203d3e20323639323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:97:7b:a6:4b:43:66:32:d9:e0:bb:1e:db:c0:1a:2a:dd:
         e9:d3:af:1f:3f:d4:72:76:f2:1d:d6:03:f9:9b:19:02:6e:58:
         ef:5c:86:87:45:ef:af:e0:95:21:0d:94:77:f7:eb:e7:da:70:
         43:4b:b0:a1:a7:87:bd:5b:bc:89:7b:5b:25:3f:c3:ef:4b:22:
         7e:a5:01:39:68:5a:22:fc:cd:60:90:1f:18:4b:05:3a:c5:00:
         68:3b:27:7c:cc:dc:59:22:08:78:ee:6d:e4:5f:42:4a:4c:e3:
         fd:4a:dc:80:02:dc:1d:7b:8c:3e:97:1e:f1:07:22:35:a8:f5:
         82:2e:02:9c:77:4d:d4:10:10:42:36:f1:1a:cb:e8:5d:b7:e7:
         bc:23:5f:c2:57:56:60:aa:0c:6a:37:fb:f1:6e:21:36:b1:23:
         61:84:e2:4f:17:ab:12:ed:b9:2d:22:0c:39:b2:f4:bc:f4:5a:
         e0:95:1a:2e:eb:35:be:08:9d:59:c4:32:ff:eb:d6:10:fe:67:
         1a:58:dd:30:c4:0a:3d:91:f8:8e:8e:19:14:06:1f:3c:ac:b3:
         92:3a:5d:47:ee:b0:e2:6e:2f:b4:00:02:24:bd:1f:a6:b5:a6:
         5e:97:4b:7c:33:fb:64:fa:86:ec:87:80:82:00:49:c3:e1:05:
         b0:cd:eb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 16:53:34 2024 by rpki-client on console-fra.rpki-client.org