Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130302e302f32322d3232203d3e20323636303935.roa
File:                     34352e352e3130302e302f32322d3232203d3e20323636303935.roa (raw, json)
Hash identifier:          sYHgLNOwckbpnf7BPHEvou3PpKumqvVUXaWzzII76zc=
Subject key identifier:   1A:10:94:81:81:6C:39:56:DC:C5:A5:2D:7B:55:F6:32:38:CB:5C:7C
Certificate issuer:       /CN=A725A180F84B5FBF01391DA6B3583F4846E072FF
Certificate serial:       201E5BFF001665877862C07430196CE981D30B75
Authority key identifier: A7:25:A1:80:F8:4B:5F:BF:01:39:1D:A6:B3:58:3F:48:46:E0:72:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130302e302f32322d3232203d3e20323636303935.roa
Signing time:             Wed 03 Apr 2024 20:43:48 +0000
ROA not before:           Wed 03 Apr 2024 20:38:48 +0000
ROA not after:            Wed 02 Apr 2025 20:43:48 +0000
asID:                     266095
IP address blocks:        45.5.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1e:5b:ff:00:16:65:87:78:62:c0:74:30:19:6c:e9:81:d3:0b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A725A180F84B5FBF01391DA6B3583F4846E072FF
        Validity
            Not Before: Apr  3 20:38:48 2024 GMT
            Not After : Apr  2 20:43:48 2025 GMT
        Subject: CN=1A109481816C3956DCC5A52D7B55F63238CB5C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:31:31:80:e1:0f:88:1c:64:c4:72:95:dd:71:
                    4b:a0:28:4d:4b:1c:8c:e6:9b:21:df:48:18:02:58:
                    04:4b:84:d1:36:26:e1:35:77:0a:f6:5d:5c:de:81:
                    ac:0c:65:bc:76:3d:23:92:d4:25:57:b2:7a:62:3e:
                    e5:c5:a5:d5:22:1b:1b:22:6b:06:8d:f6:65:ab:82:
                    cb:46:42:79:06:5f:10:34:85:45:a3:0d:2f:46:69:
                    64:90:66:0b:a1:62:7c:2d:4b:0e:9e:39:0b:af:6c:
                    c1:f5:c8:ea:74:13:dc:6a:e3:af:49:38:18:d3:e2:
                    2c:d0:2d:1c:0e:53:ef:a3:7a:19:9f:99:6b:c9:58:
                    e2:4f:21:db:3b:0f:24:fe:1b:a6:0a:a3:28:5d:0e:
                    5f:df:17:5d:00:45:8b:1c:b8:96:e6:70:a2:82:6b:
                    ea:4a:4b:62:ac:9a:1b:64:01:c9:cd:8e:76:c8:46:
                    91:ac:b6:bf:35:2d:43:96:35:7c:95:dc:51:e5:ff:
                    d3:05:63:08:d7:63:e2:cf:91:a3:31:8d:06:c4:7f:
                    96:1f:fe:5f:b5:e6:29:31:18:36:e3:08:48:16:7d:
                    27:76:c5:6a:31:2c:82:70:dd:f3:4c:c8:21:b1:cd:
                    16:bc:60:2c:ef:2a:7c:77:e2:51:ff:09:1e:cb:74:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:10:94:81:81:6C:39:56:DC:C5:A5:2D:7B:55:F6:32:38:CB:5C:7C
            X509v3 Authority Key Identifier:
                keyid:A7:25:A1:80:F8:4B:5F:BF:01:39:1D:A6:B3:58:3F:48:46:E0:72:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130302e302f32322d3232203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ea:fc:da:1f:f6:ff:66:0e:d7:c5:c0:46:b1:28:32:b2:3f:
         d3:22:6a:0f:33:96:65:12:b7:0d:5a:c4:8a:45:2d:ef:9a:60:
         6e:64:ce:71:0d:68:9a:38:4e:f4:4a:65:dd:d5:63:e3:c9:a9:
         5a:18:43:14:e3:77:2c:e8:5f:e1:b2:4d:08:f2:a4:fe:e8:f6:
         6f:b2:14:9e:30:82:4c:ae:21:14:37:d4:af:e4:65:0e:80:15:
         c6:5b:ca:65:32:ca:d1:4e:60:cc:bf:8c:3a:e1:08:43:31:45:
         3d:b2:71:f5:89:52:7d:ca:cc:94:7e:4d:77:02:a7:cf:12:b5:
         2e:e2:9a:96:34:eb:ea:30:6a:58:5d:8e:8f:5a:e2:af:df:ef:
         3d:5e:a7:47:fd:37:c6:4f:4a:fc:82:c6:9f:42:66:4c:19:f1:
         d9:3b:55:aa:f9:83:55:12:0c:9a:ed:ff:0e:f8:57:5f:22:00:
         22:e8:1f:5d:fb:53:80:8e:21:84:73:bf:78:21:51:4f:54:e4:
         fe:41:83:62:15:2c:a0:0a:b2:20:44:31:15:75:f8:44:fc:d5:
         c7:f5:8e:31:52:6f:8d:30:0c:5b:88:08:89:31:76:7f:d1:9a:
         c9:fb:58:9d:01:43:6f:78:9e:51:d3:c5:cd:ad:7b:ef:0f:54:
         01:2e:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:10 2024 by rpki-client on console-ams.rpki-client.org