Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3232203d3e20323639353730.roa
File:                     34352e3138392e34302e302f32322d3232203d3e20323639353730.roa (raw, json)
Hash identifier:          QRshebJcfltpV9P1sywcwisosV6bwm5sHkYF/dwmomw=
Subject key identifier:   15:71:7F:03:EA:19:59:F4:00:40:A5:54:99:2C:7E:0A:59:D8:AE:36
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       1E663EBE477D16C8641B7D274A8C8F5D7189EF72
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3232203d3e20323639353730.roa
Signing time:             Tue 23 Apr 2024 13:18:04 +0000
ROA not before:           Tue 23 Apr 2024 13:13:04 +0000
ROA not after:            Tue 22 Apr 2025 13:18:04 +0000
asID:                     269570
IP address blocks:        45.189.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:66:3e:be:47:7d:16:c8:64:1b:7d:27:4a:8c:8f:5d:71:89:ef:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: Apr 23 13:13:04 2024 GMT
            Not After : Apr 22 13:18:04 2025 GMT
        Subject: CN=15717F03EA1959F40040A554992C7E0A59D8AE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:45:0b:0d:1c:87:59:2a:63:cb:67:b1:43:35:
                    fe:c8:44:84:ef:80:d3:93:53:9c:89:a2:49:d5:b7:
                    b6:31:5b:c8:a8:d6:3f:11:a6:f0:ed:4a:93:02:44:
                    a3:9c:a8:28:03:f6:ef:24:49:04:73:e5:dc:94:32:
                    3c:f7:d5:e4:66:ff:35:c3:50:ed:2b:29:4c:d6:a6:
                    26:bd:19:dd:dc:04:94:5d:69:1a:d4:0e:02:ac:c2:
                    b6:87:3b:ee:a3:da:02:f1:11:f7:49:99:56:93:42:
                    b3:5a:26:0f:ea:96:5b:77:52:78:30:81:c2:2c:e3:
                    4b:18:f5:85:13:af:33:e0:c7:e0:b5:b5:e8:f3:96:
                    97:ca:b8:5f:d7:92:ab:17:2c:b0:15:e2:4f:cc:11:
                    7d:bc:13:2d:71:4e:36:b2:93:72:32:e6:3e:b5:45:
                    52:87:de:55:e6:39:7c:f1:13:c4:67:bb:fd:4d:2a:
                    7c:17:71:c5:dc:bb:45:b8:c6:73:a8:22:25:ec:fd:
                    05:38:ae:e7:1b:15:46:d7:dd:fc:7a:75:3f:7c:72:
                    71:79:e1:14:cd:66:1e:64:21:ef:0e:51:f4:f2:9b:
                    11:85:a5:a1:0c:2c:9c:3b:aa:05:81:97:5f:08:7b:
                    36:64:00:87:1d:c9:52:f6:83:d7:a9:45:04:ee:36:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:7F:03:EA:19:59:F4:00:40:A5:54:99:2C:7E:0A:59:D8:AE:36
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3232203d3e20323639353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:07:03:66:d7:f8:47:35:d2:2f:1c:31:dd:53:68:ed:ab:6d:
         de:ec:5e:07:34:7d:84:6b:82:ea:02:5d:1e:c4:8f:7b:21:8a:
         af:cf:1e:18:cf:5d:2d:91:5d:c3:ef:37:08:61:d0:09:33:9f:
         a6:0a:da:16:02:10:bb:83:34:7c:a4:5c:1a:81:ad:f7:76:34:
         ad:87:d8:6f:61:36:50:e8:fe:0f:8d:60:e9:64:06:38:66:c1:
         19:77:80:ea:29:ea:b3:bd:57:de:1b:25:d2:93:73:b8:95:85:
         a7:38:04:58:a8:f0:97:3b:e7:e4:a6:07:ec:78:c7:60:28:1f:
         c3:b9:40:3d:58:1a:27:82:d5:20:68:65:ed:6d:56:f0:d3:21:
         04:29:90:34:50:68:a7:09:bf:6e:87:ec:7f:0d:fb:b7:c4:7f:
         98:18:0f:06:5c:3a:d2:e6:c7:82:70:4f:1d:be:3b:67:b4:3a:
         33:a4:fb:b3:34:f1:a5:be:78:89:47:de:c1:be:e3:3f:69:b2:
         bd:d5:cc:79:e4:23:60:66:10:81:a2:b2:0b:03:e7:91:32:ba:
         b9:84:20:b0:a6:f6:be:f6:58:7a:39:e0:7e:d6:49:47:af:1e:
         ba:d8:8d:bd:d5:29:37:f3:00:dd:bf:c6:03:f6:40:a1:ac:83:
         02:d3:77:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHmY+vkd9FshkG30nSoyPXXGJ73IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3MEEwM0VDOTU0RTE1MEEyMkJFNzhGQTk2NTE1Q0Iw
MTU4RjVDMTAeFw0yNDA0MjMxMzEzMDRaFw0yNTA0MjIxMzE4MDRaMDMxMTAvBgNV
BAMTKDE1NzE3RjAzRUExOTU5RjQwMDQwQTU1NDk5MkM3RTBBNTlEOEFFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYRQsNHIdZKmPLZ7FDNf7IRITv
gNOTU5yJoknVt7YxW8io1j8RpvDtSpMCRKOcqCgD9u8kSQRz5dyUMjz31eRm/zXD
UO0rKUzWpia9Gd3cBJRdaRrUDgKswraHO+6j2gLxEfdJmVaTQrNaJg/qllt3Ungw
gcIs40sY9YUTrzPgx+C1tejzlpfKuF/XkqsXLLAV4k/MEX28Ey1xTjayk3Iy5j61
RVKH3lXmOXzxE8Rnu/1NKnwXccXcu0W4xnOoIiXs/QU4rucbFUbX3fx6dT98cnF5
4RTNZh5kIe8OUfTymxGFpaEMLJw7qgWBl18IezZkAIcdyVL2g9epRQTuNuLLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFXF/A+oZWfQAQKVUmSx+ClnYrjYwHwYDVR0j
BBgwFoAUE3CgPslU4VCiK+ePqWUVywFY9cEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVn
TmovMC8xMzcwQTAzRUM5NTRFMTUwQTIyQkU3OEZBOTY1MTVDQjAxNThGNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNzBBMDNFQzk1NEUxNTBB
MjJCRTc4RkE5NjUxNUNCMDE1OEY1QzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLRGpDajFrTm14b0J0Q3EzNkRVZ25TYVFkQ2tzOXFkUGdmN1gxYmZ1Z05qLzAv
MzQzNTJlMzEzODM5MmUzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5
MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb0oMA0GCSqGSIb3DQEBCwUAA4IBAQBUBwNm1/hH
NdIvHDHdU2jtq23e7F4HNH2Ea4LqAl0exI97IYqvzx4Yz10tkV3D7zcIYdAJM5+m
CtoWAhC7gzR8pFwaga33djSth9hvYTZQ6P4PjWDpZAY4ZsEZd4DqKeqzvVfeGyXS
k3O4lYWnOARYqPCXO+fkpgfseMdgKB/DuUA9WBongtUgaGXtbVbw0yEEKZA0UGin
Cb9uh+x/Dfu3xH+YGA8GXDrS5seCcE8dvjtntDozpPuzNPGlvniJR97BvuM/abK9
1cx55CNgZhCBorILA+eRMrq5hCCwpva+9lh6OeB+1klHrx662I291Sk38wDdv8YD
9kChrIMC03dH
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org