Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130322e302f32332d3233203d3e20323636303935.roa
File:                     34352e352e3130322e302f32332d3233203d3e20323636303935.roa (raw, json)
Hash identifier:          R4dfd8Jtf4R9GRQmD5TINwwme/wGk3YSW69xpRzbhEw=
Subject key identifier:   32:99:3E:AA:26:59:03:E4:E3:88:3C:36:8D:D3:A8:BD:D7:46:6C:2F
Certificate issuer:       /CN=A725A180F84B5FBF01391DA6B3583F4846E072FF
Certificate serial:       0704606C143D968F708E6B3A2A3F8BB4196CAB18
Authority key identifier: A7:25:A1:80:F8:4B:5F:BF:01:39:1D:A6:B3:58:3F:48:46:E0:72:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130322e302f32332d3233203d3e20323636303935.roa
Signing time:             Wed 03 Apr 2024 20:43:49 +0000
ROA not before:           Wed 03 Apr 2024 20:38:49 +0000
ROA not after:            Wed 02 Apr 2025 20:43:49 +0000
asID:                     266095
IP address blocks:        45.5.102.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:04:60:6c:14:3d:96:8f:70:8e:6b:3a:2a:3f:8b:b4:19:6c:ab:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A725A180F84B5FBF01391DA6B3583F4846E072FF
        Validity
            Not Before: Apr  3 20:38:49 2024 GMT
            Not After : Apr  2 20:43:49 2025 GMT
        Subject: CN=32993EAA265903E4E3883C368DD3A8BDD7466C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:17:ef:a1:5a:98:07:b6:02:b0:f8:83:46:
                    ed:6e:65:bc:16:e7:d9:1b:5c:6d:1e:78:d0:a3:46:
                    5e:74:38:27:3b:0d:e6:ba:8d:05:f6:ac:29:1f:58:
                    84:2a:22:6f:29:d0:ef:42:c8:da:82:f2:77:90:63:
                    10:e5:d6:39:b1:1e:38:69:ac:4a:b2:ed:91:40:08:
                    79:ad:15:a8:15:2d:fb:30:5f:03:66:ca:82:bc:a2:
                    bb:4c:0b:52:81:9b:ea:f0:9d:1d:40:ab:34:73:57:
                    45:50:b2:9d:57:82:3d:bb:9e:13:94:78:32:8d:b8:
                    62:57:8e:85:0a:dd:ce:4a:1b:9a:9c:1f:fa:25:c0:
                    dc:f2:6b:b5:06:67:31:24:44:4b:d2:f0:89:08:dd:
                    b6:6e:8b:e1:09:ee:e8:01:bd:d8:ee:89:50:cf:12:
                    ad:8d:01:b7:c3:66:c0:cf:19:3d:06:41:35:64:32:
                    a6:9e:3b:51:1c:49:77:ff:67:be:f1:1e:17:33:9e:
                    b7:ba:b4:b4:ef:2f:f3:93:3b:6a:a5:a9:ab:72:ae:
                    58:5e:68:60:03:f6:46:b7:35:57:fe:45:22:b4:b8:
                    8d:73:0b:33:24:9a:e6:b2:ba:07:2c:e1:06:92:10:
                    f9:db:05:47:88:64:44:81:4d:6d:30:02:94:06:23:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:99:3E:AA:26:59:03:E4:E3:88:3C:36:8D:D3:A8:BD:D7:46:6C:2F
            X509v3 Authority Key Identifier:
                keyid:A7:25:A1:80:F8:4B:5F:BF:01:39:1D:A6:B3:58:3F:48:46:E0:72:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130322e302f32332d3233203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:b8:ed:ce:40:b6:13:8e:5a:73:c3:90:ff:7d:e5:59:9a:23:
         ec:f8:e7:c6:d7:14:8e:e9:75:b0:02:2e:e1:7c:3d:75:45:7d:
         a6:48:da:5a:58:b1:11:a9:0e:f8:08:d2:b8:78:18:ef:ef:c0:
         3c:ac:d2:f8:84:13:0d:fc:8a:0d:7c:a8:53:16:e0:fa:f7:ea:
         fb:90:88:e8:06:1e:0a:ec:3c:05:99:54:65:fb:33:9d:62:47:
         e4:09:bd:9d:66:9e:19:59:30:3b:a3:c7:5a:b8:98:2a:8e:42:
         be:3d:94:ee:f7:4e:52:37:33:99:19:19:b1:7c:b7:79:bd:c8:
         7c:96:09:43:69:4d:10:43:50:55:01:72:7e:2e:52:42:7b:81:
         7f:0f:44:8a:a6:a5:a7:62:54:ad:08:05:76:26:9d:64:65:30:
         6f:a4:22:c8:18:ff:f4:75:1c:6f:9a:2c:84:95:3b:f6:14:8f:
         61:21:37:15:cc:ba:41:ee:7e:b1:ad:d6:9f:a9:e8:ec:87:9f:
         54:ee:62:5d:eb:4a:38:35:52:05:74:f4:0a:d9:24:7a:84:c8:
         ec:32:fd:5d:b7:00:89:cf:a1:46:18:a8:2d:16:b4:f1:f7:59:
         41:66:a3:d1:5c:f4:9b:a3:26:1d:f0:cd:6c:d4:dc:4e:45:b4:
         de:d7:ea:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:10 2024 by rpki-client on console-ams.rpki-client.org