Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e312e302f32342d3234203d3e203132363739.roa
File:                     34352e3138362e312e302f32342d3234203d3e203132363739.roa (raw, json)
Hash identifier:          qVq4GkErFaY3mNE0WUAaMNGOQqCDDlWvMy5ybCSbfB8=
Subject key identifier:   AD:42:D4:BD:DA:C0:FE:6D:8C:34:F3:BA:B8:B4:2E:F5:CD:A8:39:85
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       3D354A177CE553DBBB9542A4A872F8CA7AA32C6C
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e312e302f32342d3234203d3e203132363739.roa
Signing time:             Fri 07 Apr 2023 15:41:25 +0000
ROA not before:           Fri 07 Apr 2023 15:36:25 +0000
ROA not after:            Fri 05 Apr 2024 15:41:25 +0000
asID:                     12679
IP address blocks:        45.186.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:35:4a:17:7c:e5:53:db:bb:95:42:a4:a8:72:f8:ca:7a:a3:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Apr  7 15:36:25 2023 GMT
            Not After : Apr  5 15:41:25 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:5e:9a:1f:1f:df:d0:25:ea:a7:90:60:21:
                    7d:07:93:c7:f5:5b:a6:b1:40:c5:cd:c1:00:2f:0a:
                    ca:40:1d:cb:58:3e:0b:d0:9a:a2:c5:89:44:57:82:
                    4d:42:ad:21:aa:bd:cf:c1:34:1f:80:2e:58:7d:1b:
                    e5:9e:7c:22:1c:8b:ae:ef:78:23:bf:01:71:9b:98:
                    af:c6:10:54:b7:40:ea:f9:d5:d6:91:09:28:cf:18:
                    b1:36:d4:43:57:dd:03:1a:97:f5:ac:d6:fe:2e:ed:
                    ab:85:57:c6:50:49:2e:f7:e4:fb:72:1e:7c:ae:92:
                    78:1e:af:59:8b:04:08:e6:25:50:e9:84:e2:15:df:
                    d4:a4:bb:3d:6d:29:2d:00:5e:0f:8f:df:f5:19:ed:
                    a1:1d:a6:68:ed:a5:82:68:84:09:cb:a1:fd:96:e4:
                    db:f2:42:1b:34:d7:75:6c:c2:d8:8d:8c:90:d0:43:
                    bc:15:59:27:0f:63:a5:2b:ed:c8:ef:8b:f5:fa:11:
                    78:52:0d:56:e3:35:11:f4:84:c3:13:2b:a9:23:d6:
                    17:83:17:60:75:ec:fa:1f:8e:61:f5:70:a3:e4:49:
                    48:8b:30:a6:a3:05:b4:a9:83:62:c9:13:be:ee:d5:
                    c2:37:0f:39:2e:90:d2:f6:b1:e4:9c:be:00:f3:14:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:D4:BD:DA:C0:FE:6D:8C:34:F3:BA:B8:B4:2E:F5:CD:A8:39:85
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e312e302f32342d3234203d3e203132363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:90:2d:07:de:11:40:cb:e3:87:94:4f:94:97:3e:21:95:d8:
         b8:40:a9:2f:1f:73:f0:c5:a4:52:9c:49:40:ed:4a:ea:e2:76:
         fc:5f:13:ad:26:35:ee:3d:fe:bf:92:d7:14:5e:73:9a:3a:e7:
         04:dd:6f:87:e5:d3:06:74:e7:42:d5:d0:d0:1e:a7:d4:07:29:
         a2:fd:92:85:00:0d:d6:74:59:20:37:a3:4a:e7:76:65:cd:14:
         a6:49:d8:81:f0:51:22:79:54:4c:dc:d1:59:8c:b8:4f:41:99:
         21:f8:5f:db:b6:f7:0d:51:72:29:aa:29:78:e0:34:8e:88:0f:
         05:ea:0f:88:04:f4:91:f4:1c:68:f2:7b:f0:25:09:97:d3:4e:
         8a:0c:e3:f2:8c:b5:db:67:d9:89:2e:15:2e:5a:72:cd:5b:2a:
         93:5e:05:b3:f7:20:08:a5:75:05:72:a5:68:09:8e:db:35:f2:
         99:37:42:b4:c3:30:8b:dd:97:78:65:aa:a0:3a:64:e2:65:f1:
         b3:40:f2:22:44:ab:e4:db:c4:aa:41:86:3e:ff:f1:8a:82:f7:
         8f:cb:55:de:f5:f2:f8:6b:bb:d1:d6:fb:c0:56:fa:03:42:66:
         80:77:b5:c0:27:44:a7:77:4e:05:28:af:19:18:5e:c8:7e:32:
         f8:a1:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:57 2023 by rpki-client on console-ams.rpki-client.org