Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32342d3234203d3e20323731363536.roa
File:                     34352e3138362e3233342e302f32342d3234203d3e20323731363536.roa (raw, json)
Hash identifier:          80QTV5AYIWm/4INswb1YO5n+aWcaXYbRiPJBu/e2NiY=
Subject key identifier:   0F:91:64:5E:99:E9:9D:1D:E2:87:8C:AC:80:08:96:12:F5:6C:38:71
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       082CE605EAE919AF4887E683DCD7B7DEEE6B1736
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32342d3234203d3e20323731363536.roa
Signing time:             Wed 24 Apr 2024 19:15:23 +0000
ROA not before:           Wed 24 Apr 2024 19:10:23 +0000
ROA not after:            Wed 23 Apr 2025 19:15:23 +0000
asID:                     271656
IP address blocks:        45.186.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2c:e6:05:ea:e9:19:af:48:87:e6:83:dc:d7:b7:de:ee:6b:17:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Apr 24 19:10:23 2024 GMT
            Not After : Apr 23 19:15:23 2025 GMT
        Subject: CN=0F91645E99E99D1DE2878CAC80089612F56C3871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:5e:77:fc:06:66:16:d1:2a:5d:99:53:e5:
                    b2:04:33:8a:ff:b4:62:c9:35:40:d2:8f:98:29:64:
                    d4:3d:ae:cd:2f:4a:c6:0c:e2:83:f0:57:fd:44:94:
                    af:3e:5b:00:88:f1:86:3e:c3:90:ed:95:a7:11:cb:
                    0a:5c:4b:2d:50:35:9e:8c:ff:28:ae:cd:51:6b:bf:
                    30:75:1d:4c:95:01:38:75:42:0b:ab:20:7e:69:9d:
                    ca:62:1e:31:1b:55:1c:2a:c6:c7:ee:54:f5:cf:c5:
                    bb:03:6c:e9:df:43:2c:09:97:5b:75:d1:cf:c6:7a:
                    98:d2:e1:b4:b9:bc:d7:14:ad:07:40:ec:9a:03:5d:
                    24:bf:d8:7f:5a:30:a9:cf:84:e4:a6:c9:23:dc:af:
                    66:57:a3:f7:f2:42:60:61:fb:6f:42:37:37:58:58:
                    2a:60:1d:ed:d0:a9:71:91:cf:50:e4:ad:00:97:39:
                    33:ef:de:92:4c:5c:4c:76:c5:20:c7:39:33:74:2c:
                    92:64:37:d7:22:a0:96:11:c2:0f:45:38:0e:15:72:
                    50:4e:66:66:82:22:01:b4:30:67:c9:ce:81:24:40:
                    28:5b:51:80:2a:0e:e1:2d:c4:50:28:de:c6:df:fe:
                    b7:d7:da:c5:7f:83:d3:90:3f:f4:b6:b2:d9:4c:6b:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:64:5E:99:E9:9D:1D:E2:87:8C:AC:80:08:96:12:F5:6C:38:71
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233342e302f32342d3234203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e4:13:b5:9d:8e:82:d9:90:13:6f:b6:85:19:85:e5:a0:1c:
         5d:1f:d5:aa:02:31:b2:ba:ee:0d:3d:30:1c:90:e9:24:1d:27:
         46:8d:81:65:e1:38:1f:e6:01:c0:4c:29:5c:8e:d3:f7:a7:9a:
         03:10:6b:ab:97:0b:51:42:e9:d0:9d:d2:97:73:45:c0:b2:d3:
         9d:bd:ad:3c:45:d2:2f:ba:27:42:bf:c8:c9:15:34:51:7c:93:
         af:db:51:89:5f:08:7a:b9:b7:c9:b9:ef:04:cb:00:bf:08:c0:
         10:43:07:15:ff:c4:07:54:66:62:ff:ff:ec:25:51:f2:51:f1:
         f1:cc:87:fd:f9:5f:a3:0c:82:17:97:34:21:b6:98:fa:59:cf:
         80:a1:52:8d:b6:a3:7a:0e:c7:d3:cb:6c:1e:fd:7e:cd:53:1b:
         69:b1:78:d9:0d:05:8e:57:6f:45:75:36:23:08:1f:d0:52:98:
         28:e5:61:1a:92:85:37:16:a0:2d:d9:44:23:8c:c1:65:76:f6:
         76:84:d6:53:aa:3e:7c:c8:03:2c:e8:45:34:d3:ee:e9:58:32:
         96:46:7b:21:f7:83:7a:26:ee:1f:19:3a:b2:9e:b5:bd:bd:a7:
         e5:93:b8:d0:35:45:43:1d:a9:3d:ad:37:50:fe:4e:44:4c:4f:
         ff:bc:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org