Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32332d3233203d3e20323639353730.roa
File:                     34352e3138392e34302e302f32332d3233203d3e20323639353730.roa (raw, json)
Hash identifier:          eZjsHqA7EymQ3LlCvD4AgYh0Gam64S+rKZL9rvPvq7A=
Subject key identifier:   74:0C:40:3E:BF:F2:3B:06:8B:E8:F8:DD:D6:B0:6B:6C:9A:9A:78:81
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       5B610B458587FADB9D014B560730C3C196336875
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32332d3233203d3e20323639353730.roa
Signing time:             Tue 23 Apr 2024 13:18:06 +0000
ROA not before:           Tue 23 Apr 2024 13:13:06 +0000
ROA not after:            Tue 22 Apr 2025 13:18:06 +0000
asID:                     269570
IP address blocks:        45.189.40.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:61:0b:45:85:87:fa:db:9d:01:4b:56:07:30:c3:c1:96:33:68:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: Apr 23 13:13:06 2024 GMT
            Not After : Apr 22 13:18:06 2025 GMT
        Subject: CN=740C403EBFF23B068BE8F8DDD6B06B6C9A9A7881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:ae:d9:09:6e:38:ac:2c:10:d5:2f:df:47:
                    4f:6d:a3:64:c9:22:a8:3e:a7:8b:dd:e0:90:5d:af:
                    79:4a:d9:76:06:6b:fc:63:2e:bc:3a:58:02:23:9f:
                    80:7c:95:4a:de:58:11:f0:f3:06:b6:bf:c8:f1:ae:
                    67:45:51:ed:9d:0e:10:e3:44:be:ca:29:41:8b:34:
                    dc:92:6f:a6:b0:13:be:cb:46:94:19:61:b4:c1:cd:
                    b8:bd:d0:e1:18:2a:ac:8c:f6:c0:1b:c3:f5:47:7b:
                    1d:e2:c0:05:a1:37:6e:bf:3a:9a:5a:f6:38:8e:29:
                    db:e0:f4:ec:45:2f:85:56:ad:ec:4d:7e:c1:dc:9c:
                    d3:e0:5d:1f:87:36:68:aa:e8:1d:df:05:19:be:5d:
                    24:4c:fd:fd:2e:32:c1:ce:03:70:8b:2f:83:df:35:
                    00:ca:52:1c:22:be:0f:ff:41:45:cc:5d:2d:12:cc:
                    ed:c1:7d:fc:86:01:94:c2:31:b1:43:53:88:93:47:
                    12:86:2e:49:91:b1:22:8b:ba:c7:4e:ac:86:c3:ab:
                    5f:b0:10:06:88:65:f1:7a:67:72:30:fb:a0:b9:d3:
                    b0:00:64:33:da:9d:3e:fe:e6:22:67:cc:ad:f8:41:
                    99:7e:74:ff:27:62:50:fa:4d:ab:54:7d:76:4b:17:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0C:40:3E:BF:F2:3B:06:8B:E8:F8:DD:D6:B0:6B:6C:9A:9A:78:81
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32332d3233203d3e20323639353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:44:89:c3:08:b0:ae:b2:96:b7:45:84:75:b7:c1:25:3b:e5:
         5d:3f:32:56:e0:82:92:e5:20:4a:00:c8:14:ce:29:4a:13:33:
         13:42:14:e5:03:52:40:2b:70:e2:32:33:d4:32:4f:ae:c5:0d:
         cd:63:0f:5c:77:f0:a5:6d:34:c9:ff:a2:60:f5:b9:b5:b5:7c:
         f7:12:1a:00:0e:d6:df:a4:69:ea:8d:85:26:17:dc:2f:45:77:
         03:dc:56:49:16:b2:85:8f:5b:db:0a:0e:e9:dd:cd:e4:64:6d:
         dd:a4:65:32:6a:ac:e9:1f:c8:12:97:13:a4:6e:72:f3:21:c1:
         a7:e0:31:a6:e8:46:63:51:38:3c:63:02:1a:ed:77:35:80:b7:
         b4:0f:bb:5c:20:69:e3:67:b2:4a:48:98:e2:6c:c0:5f:c3:5f:
         07:a1:83:57:cd:14:da:24:2c:0b:60:32:9b:0f:ad:c7:0c:24:
         11:93:62:71:32:52:c6:4e:7a:fb:d7:8f:01:8e:33:8c:ba:d7:
         6b:42:17:23:5b:b4:7a:2e:6f:45:68:cf:3a:df:20:7b:1b:d1:
         d1:f5:95:f8:93:54:72:52:98:5e:d4:e9:7f:de:f2:21:6e:4e:
         b4:2b:2d:c8:c2:69:cd:e8:d5:a7:22:21:af:f7:f3:5e:2f:7e:
         d1:3b:83:a7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW2ELRYWH+tudAUtWBzDDwZYzaHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3MEEwM0VDOTU0RTE1MEEyMkJFNzhGQTk2NTE1Q0Iw
MTU4RjVDMTAeFw0yNDA0MjMxMzEzMDZaFw0yNTA0MjIxMzE4MDZaMDMxMTAvBgNV
BAMTKDc0MEM0MDNFQkZGMjNCMDY4QkU4RjhEREQ2QjA2QjZDOUE5QTc4ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYa7ZCW44rCwQ1S/fR09to2TJ
Iqg+p4vd4JBdr3lK2XYGa/xjLrw6WAIjn4B8lUreWBHw8wa2v8jxrmdFUe2dDhDj
RL7KKUGLNNySb6awE77LRpQZYbTBzbi90OEYKqyM9sAbw/VHex3iwAWhN26/Oppa
9jiOKdvg9OxFL4VWrexNfsHcnNPgXR+HNmiq6B3fBRm+XSRM/f0uMsHOA3CLL4Pf
NQDKUhwivg//QUXMXS0SzO3BffyGAZTCMbFDU4iTRxKGLkmRsSKLusdOrIbDq1+w
EAaIZfF6Z3Iw+6C507AAZDPanT7+5iJnzK34QZl+dP8nYlD6TatUfXZLF209AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdAxAPr/yOwaL6Pjd1rBrbJqaeIEwHwYDVR0j
BBgwFoAUE3CgPslU4VCiK+ePqWUVywFY9cEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVn
TmovMC8xMzcwQTAzRUM5NTRFMTUwQTIyQkU3OEZBOTY1MTVDQjAxNThGNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNzBBMDNFQzk1NEUxNTBB
MjJCRTc4RkE5NjUxNUNCMDE1OEY1QzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLRGpDajFrTm14b0J0Q3EzNkRVZ25TYVFkQ2tzOXFkUGdmN1gxYmZ1Z05qLzAv
MzQzNTJlMzEzODM5MmUzNDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLb0oMA0GCSqGSIb3DQEBCwUAA4IBAQCdRInDCLCu
spa3RYR1t8ElO+VdPzJW4IKS5SBKAMgUzilKEzMTQhTlA1JAK3DiMjPUMk+uxQ3N
Yw9cd/ClbTTJ/6Jg9bm1tXz3EhoADtbfpGnqjYUmF9wvRXcD3FZJFrKFj1vbCg7p
3c3kZG3dpGUyaqzpH8gSlxOkbnLzIcGn4DGm6EZjUTg8YwIa7Xc1gLe0D7tcIGnj
Z7JKSJjibMBfw18HoYNXzRTaJCwLYDKbD63HDCQRk2JxMlLGTnr7148BjjOMutdr
QhcjW7R6Lm9FaM863yB7G9HR9ZX4k1RyUphe1Ol/3vIhbk60Ky3IwmnN6NWnIiGv
9/NeL37RO4On
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org