Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/34352e3138302e33372e302f32342d3234203d3e20323639313234.roa
File:                     34352e3138302e33372e302f32342d3234203d3e20323639313234.roa (raw, json)
Hash identifier:          xSmGadNNenpGmplmUjppVLYcI50SDbbEsit7Qcxp0Nc=
Subject key identifier:   CB:14:1E:6D:62:D7:04:DA:BE:B9:1F:AE:68:84:EA:4E:AA:04:88:EB
Certificate issuer:       /CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
Certificate serial:       4380A38032746368C6A342586B3C5CBB63B25AE6
Authority key identifier: 56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/34352e3138302e33372e302f32342d3234203d3e20323639313234.roa
Signing time:             Thu 04 Apr 2024 09:47:17 +0000
ROA not before:           Thu 04 Apr 2024 09:42:17 +0000
ROA not after:            Thu 03 Apr 2025 09:47:17 +0000
asID:                     269124
IP address blocks:        45.180.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 20:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:80:a3:80:32:74:63:68:c6:a3:42:58:6b:3c:5c:bb:63:b2:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
        Validity
            Not Before: Apr  4 09:42:17 2024 GMT
            Not After : Apr  3 09:47:17 2025 GMT
        Subject: CN=CB141E6D62D704DABEB91FAE6884EA4EAA0488EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:6d:cb:fb:cb:96:2a:77:0a:66:36:b3:eb:
                    e2:28:93:2a:a6:b4:4c:84:1f:89:71:c6:5a:9e:01:
                    8a:76:78:25:f9:1a:c2:1d:85:3c:07:2f:56:41:48:
                    3e:b4:8b:ac:5b:7e:47:2f:c3:59:d0:ee:9e:8d:7e:
                    8b:ce:f8:43:7a:66:a4:a0:04:d9:a7:a3:49:dc:c3:
                    fb:7f:e0:74:75:87:16:13:fa:bb:9e:ef:bf:13:5f:
                    c1:3f:3f:46:1b:14:68:50:e4:68:e4:87:6e:b6:9c:
                    59:a5:e2:9f:c5:af:f0:f3:65:07:d9:d5:89:f8:d5:
                    0c:44:61:19:05:a9:52:d9:39:47:b4:1d:fa:46:f7:
                    89:c9:33:9f:2f:c4:76:1d:ec:10:54:44:93:90:85:
                    9c:8e:4b:87:a8:28:12:eb:64:7e:0d:c1:af:4f:3f:
                    cc:c1:b9:35:ed:af:01:0c:bc:2f:7a:98:d7:b3:bb:
                    6c:51:de:29:c0:83:af:10:41:be:49:d6:43:b0:00:
                    84:4b:b8:ec:14:86:9e:fb:ee:4a:f9:46:54:15:40:
                    88:52:80:29:f6:8c:0c:6a:47:32:9f:f1:b6:99:a1:
                    0b:b2:33:e2:9d:65:d4:88:e5:8d:61:b2:b1:5e:fd:
                    dc:c1:d6:6b:f6:60:75:bc:c6:67:cc:c2:66:f0:53:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:14:1E:6D:62:D7:04:DA:BE:B9:1F:AE:68:84:EA:4E:AA:04:88:EB
            X509v3 Authority Key Identifier:
                keyid:56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/34352e3138302e33372e302f32342d3234203d3e20323639313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a8:68:61:22:40:04:b9:1a:48:90:49:4a:85:0c:82:03:27:
         3a:30:34:aa:02:41:7f:f3:5f:5f:01:a6:08:ff:fa:7e:c9:c0:
         93:ce:e1:46:38:f5:84:13:fb:ea:be:6b:76:3f:c3:97:61:aa:
         0c:03:95:a8:0c:a5:91:78:e7:ba:86:28:c2:3c:f6:ac:55:b5:
         9c:4b:94:df:d5:9b:04:25:33:df:28:61:12:0b:6e:09:03:3b:
         f6:45:7e:10:65:f3:e1:10:1f:07:21:21:0c:0a:00:66:31:2f:
         7b:e4:7d:c6:98:e4:fe:35:9d:12:ec:15:f7:71:4b:47:7e:19:
         ba:1b:aa:b6:eb:48:0c:d0:50:3f:4b:15:d2:30:12:3e:22:da:
         5d:2d:88:be:22:36:49:7a:42:13:21:fd:48:1c:12:87:ea:de:
         52:dc:42:61:30:8f:3b:79:28:db:1c:8c:ff:af:0e:bf:b2:99:
         b4:31:fd:4c:40:3b:49:8f:49:fb:fc:30:3e:93:29:57:32:18:
         a2:a2:f1:7d:0d:a1:95:de:c3:15:5d:28:b2:73:64:bd:c2:b5:
         14:48:bd:e5:bd:d7:ae:8b:d3:70:e8:8c:60:f0:5d:13:45:a7:
         f5:c8:40:6d:aa:87:a8:ba:6c:94:2f:79:e3:94:b5:83:81:4f:
         4a:c4:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 22:20:45 2024 by rpki-client on console-ams.rpki-client.org