Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32332d3233203d3e20323639313238.roa
File:                     34352e3138302e39382e302f32332d3233203d3e20323639313238.roa (raw, json)
Hash identifier:          O1O0w66ylRNEdGr5Kzkjfqpguj6WmOMs088t4fqlYyQ=
Subject key identifier:   EA:DD:6E:D8:42:C5:E5:1B:CF:D7:C7:D4:7B:64:2C:1A:D4:4D:42:3A
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       3F20AEB900DED0A7FEB743E57F745401A5E4CA45
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32332d3233203d3e20323639313238.roa
Signing time:             Thu 04 Apr 2024 08:00:45 +0000
ROA not before:           Thu 04 Apr 2024 07:55:45 +0000
ROA not after:            Thu 03 Apr 2025 08:00:45 +0000
asID:                     269128
IP address blocks:        45.180.98.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 16:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:20:ae:b9:00:de:d0:a7:fe:b7:43:e5:7f:74:54:01:a5:e4:ca:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Apr  4 07:55:45 2024 GMT
            Not After : Apr  3 08:00:45 2025 GMT
        Subject: CN=EADD6ED842C5E51BCFD7C7D47B642C1AD44D423A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:ee:a1:69:ae:7c:eb:66:f0:51:64:3d:7f:
                    94:7f:4e:54:7d:c3:59:8d:97:4e:84:c7:ca:6f:b8:
                    eb:d1:2e:a2:d0:1d:97:9d:c6:49:6d:69:06:c5:4e:
                    fb:17:42:21:93:69:9b:fa:d8:b2:ce:27:65:1b:1b:
                    57:1f:2e:2a:9c:1d:fe:1c:37:f1:79:67:22:8f:af:
                    63:a3:6e:fd:50:d9:90:a1:b4:79:d2:19:a6:9b:cf:
                    0b:d6:db:74:bb:2d:86:20:7b:30:5c:e1:20:63:57:
                    29:83:e4:a1:bf:81:d7:8d:c1:53:df:82:f7:c9:75:
                    06:cd:e0:ca:77:b4:1d:e5:31:8c:19:2b:a0:06:75:
                    b1:0f:ab:83:41:4f:f2:3e:29:b6:de:63:44:2e:93:
                    a9:0a:0b:c7:f5:22:41:7a:ac:63:3f:c6:31:92:39:
                    0c:b5:27:50:c7:21:c0:5b:c2:88:3a:84:e9:68:82:
                    66:53:46:eb:4e:01:69:ba:a2:ef:f6:72:b0:c4:87:
                    20:bf:de:3d:0c:38:9a:cd:5d:e9:74:36:1a:d7:ed:
                    19:92:12:dd:28:aa:fa:f8:7d:23:44:6b:a7:5f:92:
                    f2:9b:05:4a:cd:89:eb:3f:f2:d2:ea:fc:6d:e8:e3:
                    ba:a7:96:e7:bf:3b:d0:89:42:00:dd:d2:6e:61:51:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:6E:D8:42:C5:E5:1B:CF:D7:C7:D4:7B:64:2C:1A:D4:4D:42:3A
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32332d3233203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:64:11:5c:3d:87:04:6a:52:84:d3:79:6a:9c:46:3f:ef:12:
         3d:bc:8f:e6:6e:8d:41:13:ac:77:38:dc:e5:5a:27:57:e1:52:
         9c:7e:3f:ca:75:85:e6:98:22:23:d4:fd:8a:6d:0f:dc:fd:15:
         c7:61:54:66:ea:03:31:a7:28:e5:2f:6a:bc:15:f4:53:0c:46:
         2a:3e:0c:54:cb:ba:f1:be:19:71:f1:6a:0d:01:60:10:7a:56:
         c6:d5:88:bd:23:21:ca:81:bb:84:de:f3:09:75:9b:c2:be:0f:
         85:2b:0f:b8:ba:af:eb:0b:3f:fb:7a:89:ba:f7:6b:47:4f:8c:
         42:49:03:77:ed:4c:34:4f:03:d2:06:23:e9:af:7b:f3:00:1d:
         3e:31:f2:65:82:9f:e5:e1:36:32:45:c5:5a:ce:3e:2a:53:9f:
         aa:5d:78:57:d7:ae:68:a9:68:c0:28:85:d3:3d:3b:b3:9f:a5:
         5b:5d:41:80:da:0a:27:fe:54:7f:47:05:4e:32:d5:73:98:e2:
         e0:a7:57:7f:15:be:fa:07:18:b9:51:6d:ee:05:12:dd:bd:64:
         3a:90:b4:82:c8:cb:20:0e:d8:1e:a2:22:e3:42:67:74:30:d2:
         e1:47:b2:14:4e:6d:92:b9:c1:6d:98:96:9a:b9:2e:b9:5c:83:
         ae:63:1d:1c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPyCuuQDe0Kf+t0Plf3RUAaXkykUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDRTg5M0U5ODc0MzcyOTMyRDYwNTRGN0FGREQ5RkJC
RDAyMTk3NDAeFw0yNDA0MDQwNzU1NDVaFw0yNTA0MDMwODAwNDVaMDMxMTAvBgNV
BAMTKEVBREQ2RUQ4NDJDNUU1MUJDRkQ3QzdENDdCNjQyQzFBRDQ0RDQyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PO6haa5862bwUWQ9f5R/TlR9
w1mNl06Ex8pvuOvRLqLQHZedxkltaQbFTvsXQiGTaZv62LLOJ2UbG1cfLiqcHf4c
N/F5ZyKPr2Ojbv1Q2ZChtHnSGaabzwvW23S7LYYgezBc4SBjVymD5KG/gdeNwVPf
gvfJdQbN4Mp3tB3lMYwZK6AGdbEPq4NBT/I+KbbeY0Quk6kKC8f1IkF6rGM/xjGS
OQy1J1DHIcBbwog6hOlogmZTRutOAWm6ou/2crDEhyC/3j0MOJrNXel0NhrX7RmS
Et0oqvr4fSNEa6dfkvKbBUrNies/8tLq/G3o47qnlue/O9CJQgDd0m5hUUXnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6t1u2ELF5RvP18fUe2QsGtRNQjowHwYDVR0j
BBgwFoAU9M6JPph0Nyky1gVPev3Z+70CGXQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWR2amg3YVhGM1ZMbjY4NHByWHhaRzFjcTRnUXc2Skpwc2FndXdLMUdq
a3EvMS9GNENFODkzRTk4NzQzNzI5MzJENjA1NEY3QUZERDlGQkJEMDIxOTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0Q0U4OTNFOTg3NDM3Mjkz
MkQ2MDU0RjdBRkREOUZCQkQwMjE5NzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkdmpoN2FYRjNWTG42ODRwclh4WkcxY3E0Z1F3NkpKcHNhZ3V3SzFHamtxLzEv
MzQzNTJlMzEzODMwMmUzOTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbRiMA0GCSqGSIb3DQEBCwUAA4IBAQAzZBFcPYcE
alKE03lqnEY/7xI9vI/mbo1BE6x3ONzlWidX4VKcfj/KdYXmmCIj1P2KbQ/c/RXH
YVRm6gMxpyjlL2q8FfRTDEYqPgxUy7rxvhlx8WoNAWAQelbG1Yi9IyHKgbuE3vMJ
dZvCvg+FKw+4uq/rCz/7eom692tHT4xCSQN37Uw0TwPSBiPpr3vzAB0+MfJlgp/l
4TYyRcVazj4qU5+qXXhX165oqWjAKIXTPTuzn6VbXUGA2gon/lR/RwVOMtVzmOLg
p1d/Fb76Bxi5UW3uBRLdvWQ6kLSCyMsgDtgeoiLjQmd0MNLhR7IUTm2SucFtmJaa
uS65XIOuYx0c
-----END CERTIFICATE-----
Generated at Sat Sep 21 21:00:10 2024 by rpki-client on console-ams.rpki-client.org