Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
File:                     34352e36352e3133302e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier:          tb6d1gOU9hZllRzH0VaL9Zc1heWc6SIC77913d/UdgI=
Subject key identifier:   26:74:EF:B1:9D:61:37:6D:F2:F4:09:CF:FD:9A:14:65:F0:4F:2A:B7
Certificate issuer:       /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial:       692DC439997807966F883DE67FBB2BB54E0B88BF
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
Signing time:             Thu 04 Apr 2024 09:29:33 +0000
ROA not before:           Thu 04 Apr 2024 09:24:33 +0000
ROA not after:            Thu 03 Apr 2025 09:29:33 +0000
asID:                     266528
IP address blocks:        45.65.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 01:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2d:c4:39:99:78:07:96:6f:88:3d:e6:7f:bb:2b:b5:4e:0b:88:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
        Validity
            Not Before: Apr  4 09:24:33 2024 GMT
            Not After : Apr  3 09:29:33 2025 GMT
        Subject: CN=2674EFB19D61376DF2F409CFFD9A1465F04F2AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:37:31:5f:e6:d8:00:51:ea:d4:ce:02:c6:
                    3d:f2:17:16:2d:6b:b3:25:6b:a4:7c:9d:0b:93:14:
                    29:19:ae:61:ce:11:36:45:e6:f8:ac:ec:db:1f:61:
                    96:ae:e6:7a:b5:de:b0:c1:cd:1a:15:dd:a9:f8:c0:
                    99:d8:8b:c9:bc:fd:7c:cb:0b:be:52:35:29:26:8f:
                    52:aa:62:5b:a5:db:9f:64:a9:26:6b:63:4d:2c:63:
                    8d:f9:cb:20:34:5a:12:39:8f:30:ce:bf:c9:37:8a:
                    26:ab:15:12:bf:92:e0:2b:1a:8f:6d:05:cb:d8:5a:
                    b0:7e:a8:27:97:4f:34:c7:28:cd:2b:df:b1:3c:b3:
                    7e:30:37:f2:cb:dd:ea:76:d3:2c:3b:57:d7:5a:33:
                    6a:e3:6b:0c:c8:64:2e:54:b8:fe:d7:84:c0:bd:f1:
                    76:2e:11:9d:f2:eb:46:a5:97:8f:22:24:32:ca:09:
                    07:29:5d:f1:07:74:2f:96:9c:44:7e:b8:2b:1e:05:
                    4e:01:1b:6d:25:ee:3d:bd:23:61:18:26:3c:25:da:
                    75:5c:ab:de:f6:85:7c:50:da:0d:71:8c:27:81:57:
                    68:1c:8f:74:43:73:3a:fe:9c:4e:40:ad:65:ea:a0:
                    3e:85:88:d3:6e:f7:ea:4f:24:51:6a:24:7f:f6:cf:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:74:EF:B1:9D:61:37:6D:F2:F4:09:CF:FD:9A:14:65:F0:4F:2A:B7
            X509v3 Authority Key Identifier:
                keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:54:e0:0e:bf:c2:25:d2:0f:70:35:6c:1d:c0:5c:f1:4a:c8:
         96:9a:0b:ea:48:74:ac:1c:e9:81:8b:df:a3:82:23:f0:5e:f2:
         69:ce:41:be:59:b9:69:37:8f:88:27:4f:4b:e1:97:bc:87:d6:
         42:1f:ce:73:b8:da:87:bd:00:08:a1:38:fc:4d:37:fb:d5:7a:
         15:10:a5:05:b9:83:93:02:4a:04:4e:dc:30:e4:ea:0e:d8:d0:
         a5:1e:da:24:3d:bd:f1:ea:20:67:9d:ae:ba:58:10:dc:e2:b7:
         6e:03:40:cc:3e:dc:27:0a:e4:be:29:c5:a5:f5:87:29:45:75:
         31:bc:fb:56:e3:04:1f:2d:22:b0:d7:b1:3f:94:b1:2d:7f:92:
         ce:82:04:f4:5f:49:33:86:0a:f0:da:73:be:f5:17:9d:50:94:
         45:f1:64:ee:f2:7c:00:7e:e3:c5:35:fd:08:85:00:b0:c3:b0:
         fa:c4:0c:12:c6:f7:a1:8e:a8:b8:2f:c1:be:78:2f:54:66:72:
         4b:8e:84:78:4f:cf:45:cd:b9:48:22:c6:75:e1:86:a5:42:eb:
         42:c8:0d:fc:03:b7:0c:1d:12:d4:07:d1:55:28:f5:1e:df:1e:
         61:c3:17:b3:b7:16:e2:a5:3c:c4:00:61:73:68:ed:fe:3d:8f:
         43:85:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org