Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323537353836.roa
File:                     34352e37302e3230362e302f32342d3234203d3e20323537353836.roa (raw, json)
Hash identifier:          OgQuoy3TQZle7sFv+QPI7NBhBk5L3mcECnFxadIcp+Y=
Subject key identifier:   72:A2:05:D8:D7:6A:00:22:F2:C4:5D:61:47:F9:04:C7:F5:55:A7:10
Certificate issuer:       /CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Certificate serial:       0A552CBEEAF584E6835D20DE7142732EEF904468
Authority key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323537353836.roa
Signing time:             Sun 22 Sep 2024 20:51:54 +0000
ROA not before:           Sun 22 Sep 2024 20:46:54 +0000
ROA not after:            Sun 21 Sep 2025 20:51:54 +0000
asID:                     257586
IP address blocks:        45.70.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:55:2c:be:ea:f5:84:e6:83:5d:20:de:71:42:73:2e:ef:90:44:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
        Validity
            Not Before: Sep 22 20:46:54 2024 GMT
            Not After : Sep 21 20:51:54 2025 GMT
        Subject: CN=72A205D8D76A0022F2C45D6147F904C7F555A710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:93:8b:35:8c:91:b0:d2:15:a1:fa:27:a5:
                    76:3d:2d:aa:ad:07:ba:27:d1:4a:40:9e:2e:06:b9:
                    93:46:98:ef:6a:68:0e:39:98:71:fa:58:05:cc:7d:
                    f2:07:5a:09:2c:ac:df:5b:ef:03:c9:a0:2d:51:77:
                    0d:1a:3d:f2:a4:25:e3:2e:e2:c8:5a:e1:73:fe:a8:
                    0f:f7:45:9b:6c:04:f6:e0:10:df:dd:94:ac:25:7d:
                    f5:df:3c:3c:2a:21:22:3d:d2:f5:91:10:e5:12:23:
                    67:3e:db:f8:f6:c7:06:7e:ca:97:2e:0a:65:96:e7:
                    b9:67:95:76:13:e5:ac:5f:d9:dc:29:12:3f:97:24:
                    15:f1:9c:c0:4d:11:39:39:0d:b0:2b:f8:97:2a:d6:
                    73:2c:d4:89:6c:25:19:e4:54:65:d0:3b:32:ee:34:
                    4e:83:55:ca:9b:bb:10:de:48:99:99:c8:16:b8:76:
                    c4:a5:0a:b5:cf:14:5d:aa:9e:6c:4e:69:cd:88:ea:
                    d7:70:1b:1b:60:d7:de:17:42:0d:aa:2c:4f:90:d2:
                    88:57:83:b5:dd:c9:a8:19:4c:83:55:44:21:f3:98:
                    ae:3e:d1:0c:2a:db:3d:f2:25:29:87:77:53:dc:94:
                    71:52:61:02:47:73:8d:fd:84:84:01:4e:ad:3a:29:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A2:05:D8:D7:6A:00:22:F2:C4:5D:61:47:F9:04:C7:F5:55:A7:10
            X509v3 Authority Key Identifier:
                keyid:D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323537353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:98:52:bb:c6:e2:e6:51:1a:04:ed:cf:44:00:17:2a:5e:17:
         f9:82:2e:25:78:33:76:98:35:aa:29:ad:8f:5d:32:7e:3e:e5:
         62:7f:e1:6a:e4:45:59:c4:f0:46:a5:1b:a6:b8:fb:83:fc:82:
         63:42:c8:81:76:4d:11:91:9d:af:c2:77:fb:8c:90:91:30:cf:
         56:db:7e:01:d6:5e:94:45:2a:a4:95:3f:49:c7:a3:60:14:bc:
         ec:86:3a:cc:26:83:67:2a:a0:8f:be:61:2c:86:09:75:09:44:
         6a:4a:d7:43:2c:42:0d:89:fc:90:4c:2d:60:e6:e0:c8:09:f9:
         9b:b4:19:e8:e3:27:3d:29:c6:0a:2e:0e:7f:61:93:23:52:85:
         d1:43:5e:30:45:4b:31:ea:06:de:a5:6e:c5:5a:07:02:ba:d3:
         33:f9:8c:5b:d4:bc:99:81:3d:2d:f7:fe:70:92:26:2c:6f:2d:
         2a:68:b1:5c:98:88:66:61:ac:e5:bd:34:72:d5:0e:cf:eb:9c:
         16:6c:17:62:97:05:33:ef:f0:5e:97:ba:0a:5d:af:07:cb:f7:
         5f:4a:9c:f2:b9:c2:af:21:77:b9:8a:7c:9b:07:49:e7:68:52:
         7d:42:ac:b3:5a:90:6d:31:7a:11:73:37:78:3c:e5:f5:f1:c2:
         e7:f4:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----