Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32342d3234203d3e20323639313238.roa
File:                     34352e3138302e39362e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier:          FquF9YAvn4f5Z5BiZj/1rQ52gNL4OrwJ33LPheQLwEw=
Subject key identifier:   01:57:C5:89:D7:C2:E3:2E:E1:98:B2:9E:8A:68:9E:24:60:E2:6E:00
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       7892D949902D50392CABE6FF06A87CD3DA94D3B3
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32342d3234203d3e20323639313238.roa
Signing time:             Thu 04 Apr 2024 08:00:47 +0000
ROA not before:           Thu 04 Apr 2024 07:55:47 +0000
ROA not after:            Thu 03 Apr 2025 08:00:47 +0000
asID:                     269128
IP address blocks:        45.180.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 15:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:92:d9:49:90:2d:50:39:2c:ab:e6:ff:06:a8:7c:d3:da:94:d3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Apr  4 07:55:47 2024 GMT
            Not After : Apr  3 08:00:47 2025 GMT
        Subject: CN=0157C589D7C2E32EE198B29E8A689E2460E26E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:3a:e6:64:08:e4:a5:b1:56:92:cf:35:c4:
                    a6:da:75:95:8b:66:a6:80:21:8e:e4:09:07:24:a0:
                    18:34:a3:84:a0:0e:b3:bf:6c:46:a3:fc:c4:a9:da:
                    19:fa:c0:46:63:a5:e2:ce:81:dc:ae:71:d9:50:d0:
                    78:96:86:5e:41:20:77:07:bc:ea:55:50:4e:82:75:
                    99:6a:93:fc:82:a2:f2:fc:c9:da:90:26:1f:79:7d:
                    95:a4:fc:7e:26:4f:00:66:61:82:db:78:82:df:23:
                    1e:1f:d0:b6:0e:e0:52:13:f0:51:44:9c:20:82:7e:
                    27:1d:82:16:2c:57:2f:ac:4f:ec:d4:1e:85:a8:f3:
                    0e:fe:46:46:81:be:62:8a:44:5a:3a:a6:00:d2:cf:
                    1c:e9:e6:31:ea:da:60:6c:a3:bc:a2:c7:1e:3a:30:
                    33:d3:34:76:96:a0:34:76:99:b2:77:b6:5a:e6:94:
                    29:15:30:bd:bc:b6:5f:6d:b3:9b:65:9a:87:72:f0:
                    46:da:d4:67:20:76:c9:1c:83:9c:08:ff:8d:a7:ed:
                    3e:35:41:fb:09:6c:db:85:08:30:62:73:1a:ae:1f:
                    b7:d7:06:2a:f8:4f:0d:e2:62:c4:a7:55:4f:21:77:
                    7d:42:dc:6d:fb:29:8a:19:b1:57:ba:96:8f:13:b5:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:57:C5:89:D7:C2:E3:2E:E1:98:B2:9E:8A:68:9E:24:60:E2:6E:00
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32342d3234203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d1:76:ce:ee:f3:3d:d8:8f:be:db:32:a2:be:5f:fb:94:ee:
         41:93:3a:02:9d:a1:0d:f8:57:92:11:72:48:13:72:a9:23:5d:
         de:c4:48:a5:8b:14:26:ad:32:70:92:95:7a:cb:38:7e:03:82:
         9d:59:35:cc:4d:2e:c0:4b:6b:a5:ec:58:10:f7:d2:05:2c:8b:
         1a:c6:24:90:9b:1e:3c:39:73:93:10:f3:0a:78:df:29:5d:c9:
         ae:2e:91:34:e3:8e:15:26:09:11:25:70:22:58:16:cd:70:b4:
         ab:1a:42:2e:8e:37:6b:ce:65:96:f3:78:24:8b:21:10:e9:ae:
         2a:7d:95:af:df:51:f4:b0:fc:d6:24:e5:a8:dd:e4:7b:3b:ae:
         52:b4:a8:1c:15:0a:f8:3b:eb:9c:d9:d4:eb:35:5b:33:5a:81:
         be:31:92:73:a6:8c:9f:2d:90:7d:58:3b:87:60:41:e7:da:c0:
         42:f3:4f:56:47:27:88:d0:a6:4e:7b:94:0a:fe:93:ae:88:d4:
         83:eb:45:8a:d8:bb:ec:ac:41:8e:6a:0d:07:d1:25:b8:ad:ad:
         5a:de:8e:91:32:8a:5a:32:e2:f9:a6:c6:d9:84:79:21:f4:15:
         28:c4:5c:60:2c:f9:40:00:37:24:8d:12:a3:71:99:8e:3c:59:
         aa:07:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 18:20:01 2024 by rpki-client on console-fra.rpki-client.org