Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33342e302f32342d3234203d3e20323639343235.roa
File:                     34352e3138362e33342e302f32342d3234203d3e20323639343235.roa (raw, json)
Hash identifier:          yc+jSkWEQuIjYc3YTjdnt+Y1ocHDSuBIvYHFW4fqrr8=
Subject key identifier:   8E:2D:1A:02:95:D9:FE:E0:DA:19:C5:E3:41:4C:BE:61:53:EA:C5:9F
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       4B63BAA137A3F65DDA409D80F2F18B86C356D0B3
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33342e302f32342d3234203d3e20323639343235.roa
Signing time:             Mon 19 Feb 2024 15:48:27 +0000
ROA not before:           Mon 19 Feb 2024 15:43:27 +0000
ROA not after:            Mon 17 Feb 2025 15:48:27 +0000
asID:                     269425
IP address blocks:        45.186.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Feb 2025 15:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:63:ba:a1:37:a3:f6:5d:da:40:9d:80:f2:f1:8b:86:c3:56:d0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Feb 19 15:43:27 2024 GMT
            Not After : Feb 17 15:48:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:5c:07:14:af:ff:ca:95:0d:33:69:7a:7b:
                    38:79:32:d9:ba:94:b5:04:ef:93:87:7b:c0:78:e4:
                    70:47:dc:16:b6:f6:eb:3f:d4:4f:19:7e:d4:32:6a:
                    80:d6:4e:61:5e:2c:35:82:93:e0:a3:af:5c:fb:08:
                    11:b7:a5:5c:70:c4:68:b7:06:d2:3d:63:10:75:b6:
                    31:f7:2b:3c:4e:06:00:fc:a8:0a:bc:06:54:71:a2:
                    a7:28:80:33:6b:f7:cd:b6:cc:60:c1:cd:76:8c:fa:
                    fa:2e:fe:90:e1:8e:bf:e7:52:b5:e7:28:87:6e:d2:
                    d1:89:14:1c:89:e7:aa:09:cc:9e:28:3d:cd:b6:b1:
                    00:e4:ad:98:80:56:d6:f6:5f:d8:29:ed:44:cd:82:
                    a8:5d:93:7c:fe:32:05:fd:d8:68:31:03:38:36:35:
                    6c:ea:a0:d6:60:04:ff:9e:e0:19:89:65:d4:47:99:
                    09:55:f1:24:38:72:59:7c:ee:41:30:c4:3f:f7:95:
                    ad:bd:78:c3:f4:56:4f:45:df:05:6e:32:d1:a9:54:
                    e5:cc:b3:fb:5a:8a:00:53:76:79:e2:a6:0e:79:d1:
                    98:6a:e3:9c:5a:a0:c6:5c:69:92:16:e8:1d:c1:ff:
                    82:64:a6:f0:29:e0:2b:5e:70:38:f4:46:4e:05:f4:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2D:1A:02:95:D9:FE:E0:DA:19:C5:E3:41:4C:BE:61:53:EA:C5:9F
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33342e302f32342d3234203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:7b:0e:a8:be:60:2e:79:0f:3b:a8:5b:88:68:6a:a1:c0:82:
         99:f9:38:eb:61:09:dc:40:57:cc:23:11:85:2e:82:2d:90:31:
         73:04:75:1c:45:d4:69:2e:8c:24:41:0f:bb:eb:77:b6:8b:23:
         54:09:6e:16:cb:31:e7:e0:3c:07:95:a7:b2:d9:a2:6a:2f:6a:
         8e:3b:99:c2:6a:63:d9:c4:b5:a3:95:84:84:ff:0b:b9:4f:63:
         9d:6f:8c:7b:ae:2b:ba:9f:0b:24:8d:95:bb:a2:37:37:76:0b:
         5c:29:0b:e3:3e:e5:0d:b1:34:51:5a:29:20:5b:7a:f1:a7:dd:
         9b:65:46:80:f3:46:b7:c6:65:e3:1e:9b:12:ce:fc:b5:a1:1f:
         ce:60:18:98:25:cf:1b:38:48:14:35:fc:83:23:3e:43:4e:0e:
         ff:7f:bb:8a:29:e0:bc:8c:0a:89:b7:1b:ed:32:62:7c:fb:b1:
         55:e7:45:49:5d:47:2b:a8:58:06:e6:04:4a:77:0e:c7:23:2c:
         71:a1:38:47:56:66:3a:19:66:00:62:b9:89:02:cc:5c:47:05:
         4c:02:5f:52:9c:58:06:2f:27:bd:45:21:ea:7d:87:f0:3f:a2:
         8b:1c:b8:9e:06:5a:39:4d:3b:1f:74:e4:b5:3f:4a:c2:6c:09:
         20:61:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 22:34:36 2024 by rpki-client on console-ams.rpki-client.org