Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39382e302f32342d3234203d3e20323637313932.roa
File:                     34352e3233312e39382e302f32342d3234203d3e20323637313932.roa (raw, json)
Hash identifier:          InX0iLPccS/37kMmgrtPN52N1fVeYvHxZpeBxzvlvLM=
Subject key identifier:   02:77:24:95:11:D0:CB:13:E4:23:43:90:92:95:BA:17:94:4D:17:F7
Certificate issuer:       /CN=59D79079ECD031F0A1D0E88BA326755415EE0813
Certificate serial:       498F445D917615539F54AAA1BF3359C0EDB96AC2
Authority key identifier: 59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39382e302f32342d3234203d3e20323637313932.roa
Signing time:             Thu 25 Apr 2024 12:19:27 +0000
ROA not before:           Thu 25 Apr 2024 12:14:27 +0000
ROA not after:            Thu 24 Apr 2025 12:19:27 +0000
asID:                     267192
IP address blocks:        45.231.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8f:44:5d:91:76:15:53:9f:54:aa:a1:bf:33:59:c0:ed:b9:6a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D79079ECD031F0A1D0E88BA326755415EE0813
        Validity
            Not Before: Apr 25 12:14:27 2024 GMT
            Not After : Apr 24 12:19:27 2025 GMT
        Subject: CN=0277249511D0CB13E42343909295BA17944D17F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:bd:42:d3:79:bb:8a:70:40:d2:f1:19:83:
                    5c:3e:9c:07:6c:48:6e:54:87:8c:8e:21:62:d0:d5:
                    2a:41:60:2f:2f:a1:bb:07:12:bc:60:b9:33:07:26:
                    ea:27:3a:00:e2:51:dc:70:3f:3a:f2:93:22:56:e1:
                    e4:60:96:1e:bc:09:01:6f:57:4a:6a:b1:97:df:9d:
                    71:48:02:d2:eb:68:9b:a2:37:9f:9c:74:0d:4c:ba:
                    ce:fb:d6:88:95:01:c3:a1:1a:95:83:3e:24:56:64:
                    86:75:1f:f4:6a:da:21:e6:a0:70:6b:c6:90:3b:0d:
                    2e:ff:d8:1b:c2:f4:c6:c9:e3:e1:48:2a:ae:0a:5c:
                    55:34:fa:ac:37:ea:85:79:89:43:d6:c1:ce:db:e4:
                    6c:8e:6b:b7:d3:c9:9d:63:66:85:2d:79:57:76:f6:
                    4f:8a:3d:a1:36:32:af:6f:19:cb:f7:fe:c0:15:3d:
                    5a:4e:64:30:30:32:14:4f:48:03:81:44:c2:75:f9:
                    4f:f0:6d:09:33:19:7e:0d:51:cc:a5:a5:2a:ae:82:
                    fb:88:5a:8a:0f:c7:8c:61:4b:de:67:87:d0:3b:25:
                    51:5a:9b:6f:79:00:0d:0b:f6:6a:13:7d:2f:4b:9f:
                    87:57:4e:bb:45:cd:0f:f9:aa:b3:cd:3b:aa:59:b9:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:77:24:95:11:D0:CB:13:E4:23:43:90:92:95:BA:17:94:4D:17:F7
            X509v3 Authority Key Identifier:
                keyid:59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39382e302f32342d3234203d3e20323637313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e0:c1:ef:9a:56:0a:f9:19:fd:f5:56:40:8f:4b:a1:ff:ca:
         db:38:6f:94:94:c1:b8:d2:61:68:f2:06:a2:71:7c:1f:a4:b8:
         31:7a:51:41:d7:df:c3:c2:fc:ef:1c:e5:8f:20:df:64:0f:31:
         69:28:52:7a:76:c7:2f:54:9b:62:a5:fe:e7:4a:e1:18:b9:35:
         bf:bb:7b:1a:6a:26:77:58:8f:83:67:70:d6:17:56:2d:70:39:
         b1:6c:cb:50:ab:63:50:4a:94:58:d4:01:b1:cb:94:f3:31:4d:
         2c:f4:69:b4:cc:d7:72:d8:a4:9d:3d:ff:6f:6b:51:59:04:58:
         83:41:01:ea:aa:4b:e0:b9:45:21:f4:f7:6d:c8:8b:f3:f0:6d:
         99:7c:d8:3a:a7:5e:1e:db:bd:32:c4:ea:d1:93:82:d6:f9:da:
         3b:33:aa:bc:0d:43:4f:61:74:33:82:3c:ea:90:6e:9c:d0:7d:
         74:64:05:59:f4:70:fb:21:bf:80:41:41:22:23:ac:8d:58:b6:
         79:49:4c:81:ea:ff:cc:15:23:0f:18:fb:b1:0d:8d:a0:77:2f:
         2b:46:f8:bf:e4:62:69:cf:d5:d2:43:5c:cc:25:1d:cb:af:d6:
         3a:5e:74:b8:20:0f:24:42:0c:b0:82:20:70:de:fc:56:39:09:
         31:27:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org