Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33342e302f32332d3233203d3e20323639343235.roa
File:                     34352e3138362e33342e302f32332d3233203d3e20323639343235.roa (raw, json)
Hash identifier:          WeUAIuGb6FFBBCmPgWQeK7JsmC6cA37mnLmKZEjlVRU=
Subject key identifier:   D4:32:F9:E4:EE:AA:53:90:9D:F2:FC:E0:FA:16:5C:0B:58:E8:1F:4A
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       2E14D54E96B2BDEBFCCC2F5FF071B470AF0F2D52
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33342e302f32332d3233203d3e20323639343235.roa
Signing time:             Mon 19 Feb 2024 15:48:28 +0000
ROA not before:           Mon 19 Feb 2024 15:43:28 +0000
ROA not after:            Mon 17 Feb 2025 15:48:28 +0000
asID:                     269425
IP address blocks:        45.186.34.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 17 Feb 2025 15:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:14:d5:4e:96:b2:bd:eb:fc:cc:2f:5f:f0:71:b4:70:af:0f:2d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Feb 19 15:43:28 2024 GMT
            Not After : Feb 17 15:48:28 2025 GMT
        Subject: CN=3082010A0282010100A8DB5AD9680948DDA48030FF56C8808C6488B12F52113A27992D7344E78A1979783463C8611A6CB9EAEB6262431E4662D759E2D72AD1C45E81297A26FAD54A4744918B35B797BE25ADC41F982E170C0CCEB4D5251BFC3E00FA2CEAB79F9EDF707764098616F9B1DF040FB83712EAEFEB58219ADBF0BA90FF67FF8C0204703870768A6F68BB8180180E9B454DE1EFD4A217030AFC8953EC496436FE348203903D92C53889D1D82DF07E3E81431CF2B2B488C8846453DB81AF6E350239B69C7AC3F6E2D2CDAF6BE54D3A9E53B95633B32442BBABC9BB0A356B608624149CA44EFF0DAF1AC6C6B503A915ACD1B0F147062D64FA2447C27026181841BB972C7880B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:5a:d9:68:09:48:dd:a4:80:30:ff:56:c8:
                    80:8c:64:88:b1:2f:52:11:3a:27:99:2d:73:44:e7:
                    8a:19:79:78:34:63:c8:61:1a:6c:b9:ea:eb:62:62:
                    43:1e:46:62:d7:59:e2:d7:2a:d1:c4:5e:81:29:7a:
                    26:fa:d5:4a:47:44:91:8b:35:b7:97:be:25:ad:c4:
                    1f:98:2e:17:0c:0c:ce:b4:d5:25:1b:fc:3e:00:fa:
                    2c:ea:b7:9f:9e:df:70:77:64:09:86:16:f9:b1:df:
                    04:0f:b8:37:12:ea:ef:eb:58:21:9a:db:f0:ba:90:
                    ff:67:ff:8c:02:04:70:38:70:76:8a:6f:68:bb:81:
                    80:18:0e:9b:45:4d:e1:ef:d4:a2:17:03:0a:fc:89:
                    53:ec:49:64:36:fe:34:82:03:90:3d:92:c5:38:89:
                    d1:d8:2d:f0:7e:3e:81:43:1c:f2:b2:b4:88:c8:84:
                    64:53:db:81:af:6e:35:02:39:b6:9c:7a:c3:f6:e2:
                    d2:cd:af:6b:e5:4d:3a:9e:53:b9:56:33:b3:24:42:
                    bb:ab:c9:bb:0a:35:6b:60:86:24:14:9c:a4:4e:ff:
                    0d:af:1a:c6:c6:b5:03:a9:15:ac:d1:b0:f1:47:06:
                    2d:64:fa:24:47:c2:70:26:18:18:41:bb:97:2c:78:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:32:F9:E4:EE:AA:53:90:9D:F2:FC:E0:FA:16:5C:0B:58:E8:1F:4A
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33342e302f32332d3233203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:e6:b0:52:7a:85:5d:aa:ed:c2:64:a5:34:cc:06:e7:f5:af:
         30:f7:19:19:c8:14:42:80:e1:16:54:8e:1e:d1:79:a1:db:9e:
         98:68:c3:28:8d:ff:e4:4c:6e:0f:c5:ef:6c:bb:ac:84:33:d3:
         ea:4c:6b:be:50:59:f9:36:3e:ef:5e:8e:60:04:09:c9:fb:1f:
         4b:9a:ba:84:87:1a:55:55:23:47:bc:c6:27:b1:5d:44:ba:1f:
         cc:1d:3b:1c:a4:2a:90:39:1d:7f:15:21:96:89:8c:1c:9d:95:
         7a:51:58:8d:2a:33:18:13:23:5d:40:3a:0f:d8:a4:12:c6:f1:
         7c:4c:20:8e:33:9d:a5:9b:9e:02:6f:e8:11:be:53:72:07:25:
         18:0b:1d:78:1f:21:fa:17:3f:e3:1d:fa:d8:5f:7d:e1:7e:0d:
         8f:84:8e:f7:34:eb:33:15:d4:41:b3:5b:82:04:bc:d7:1e:52:
         22:41:aa:28:20:4e:3e:88:25:d5:64:34:31:2e:ce:47:bf:45:
         4c:da:7b:0e:3b:bc:63:e9:da:3f:11:d1:f2:e1:fd:65:2d:25:
         41:12:a2:a3:09:d6:fd:b7:b1:5e:b1:32:5a:91:39:e6:6d:93:
         45:10:39:63:0b:2b:b4:5a:f9:12:f8:07:f2:11:d8:77:dd:da:
         3c:e6:53:c1
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULhTVTpayvev8zC9f8HG0cK8PLVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUyRjQxNkU3REUxNzk4MUZCNzMzNEI1MUM5MUZENTgz
NzQ2RTEyRTAeFw0yNDAyMTkxNTQzMjhaFw0yNTAyMTcxNTQ4MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQThEQjVBRDk2ODA5NDhEREE0
ODAzMEZGNTZDODgwOEM2NDg4QjEyRjUyMTEzQTI3OTkyRDczNDRFNzhBMTk3OTc4
MzQ2M0M4NjExQTZDQjlFQUVCNjI2MjQzMUU0NjYyRDc1OUUyRDcyQUQxQzQ1RTgx
Mjk3QTI2RkFENTRBNDc0NDkxOEIzNUI3OTdCRTI1QURDNDFGOTgyRTE3MEMwQ0NF
QjRENTI1MUJGQzNFMDBGQTJDRUFCNzlGOUVERjcwNzc2NDA5ODYxNkY5QjFERjA0
MEZCODM3MTJFQUVGRUI1ODIxOUFEQkYwQkE5MEZGNjdGRjhDMDIwNDcwMzg3MDc2
OEE2RjY4QkI4MTgwMTgwRTlCNDU0REUxRUZENEEyMTcwMzBBRkM4OTUzRUM0OTY0
MzZGRTM0ODIwMzkwM0Q5MkM1Mzg4OUQxRDgyREYwN0UzRTgxNDMxQ0YyQjJCNDg4
Qzg4NDY0NTNEQjgxQUY2RTM1MDIzOUI2OUM3QUMzRjZFMkQyQ0RBRjZCRTU0RDNB
OUU1M0I5NTYzM0IzMjQ0MkJCQUJDOUJCMEEzNTZCNjA4NjI0MTQ5Q0E0NEVGRjBE
QUYxQUM2QzZCNTAzQTkxNUFDRDFCMEYxNDcwNjJENjRGQTI0NDdDMjcwMjYxODE4
NDFCQjk3MkM3ODgwQjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqNta2WgJSN2kgDD/VsiAjGSIsS9SETonmS1zROeKGXl4NGPIYRps
uerrYmJDHkZi11ni1yrRxF6BKXom+tVKR0SRizW3l74lrcQfmC4XDAzOtNUlG/w+
APos6refnt9wd2QJhhb5sd8ED7g3Eurv61ghmtvwupD/Z/+MAgRwOHB2im9ou4GA
GA6bRU3h79SiFwMK/IlT7ElkNv40ggOQPZLFOInR2C3wfj6BQxzysrSIyIRkU9uB
r241Ajm2nHrD9uLSza9r5U06nlO5VjOzJEK7q8m7CjVrYIYkFJykTv8NrxrGxrUD
qRWs0bDxRwYtZPokR8JwJhgYQbuXLHiAsQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FNQy+eTuqlOQnfL84PoWXAtY6B9KMB8GA1UdIwQYMBaAFKUvQW594XmB+3M0tRyR
/Vg3RuEuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JicFFQakw2eUhzZmVl
Z0piQUt3N2ZEM2g3WHpXTnFMdjNLampjSkRkTEdOLzAvQTUyRjQxNkU3REUxNzk4
MUZCNzMzNEI1MUM5MUZENTgzNzQ2RTEyRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNTJGNDE2RTdERTE3OTgxRkI3MzM0QjUxQzkxRkQ1ODM3NDZF
MTJFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CYnBRUGpMNnlIc2ZlZWdKYkFL
dzdmRDNoN1h6V05xTHYzS2pqY0pEZExHTi8wLzM0MzUyZTMxMzgzNjJlMzMzNDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzOTM0MzIzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS26
IjANBgkqhkiG9w0BAQsFAAOCAQEAuOawUnqFXartwmSlNMwG5/WvMPcZGcgUQoDh
FlSOHtF5oduemGjDKI3/5ExuD8XvbLushDPT6kxrvlBZ+TY+716OYAQJyfsfS5q6
hIcaVVUjR7zGJ7FdRLofzB07HKQqkDkdfxUhlomMHJ2VelFYjSozGBMjXUA6D9ik
EsbxfEwgjjOdpZueAm/oEb5TcgclGAsdeB8h+hc/4x362F994X4Nj4SO9zTrMxXU
QbNbggS81x5SIkGqKCBOPogl1WQ0MS7OR79FTNp7Dju8Y+naPxHR8uH9ZS0lQRKi
ownW/bexXrEyWpE55m2TRRA5YwsrtFr5EvgH8hHYd93aPOZTwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 12 22:34:36 2024 by rpki-client on console-ams.rpki-client.org