Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32342d3234203d3e20323639353730.roa
File:                     34352e3138392e34302e302f32342d3234203d3e20323639353730.roa (raw, json)
Hash identifier:          L5rJ2EdvfmHV4DeGIxtEnTtwrg/kPczTZrZTpxbEsAE=
Subject key identifier:   0D:F9:AF:9F:6E:7B:AB:69:CE:3F:4F:8A:25:BE:CB:0F:0D:C3:15:97
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       318BFF606EB8ED7348F5E94E100EE19F182F6DEF
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32342d3234203d3e20323639353730.roa
Signing time:             Tue 23 Apr 2024 13:18:09 +0000
ROA not before:           Tue 23 Apr 2024 13:13:09 +0000
ROA not after:            Tue 22 Apr 2025 13:18:09 +0000
asID:                     269570
IP address blocks:        45.189.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8b:ff:60:6e:b8:ed:73:48:f5:e9:4e:10:0e:e1:9f:18:2f:6d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: Apr 23 13:13:09 2024 GMT
            Not After : Apr 22 13:18:09 2025 GMT
        Subject: CN=0DF9AF9F6E7BAB69CE3F4F8A25BECB0F0DC31597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:da:60:54:b7:eb:4c:4a:8b:b9:01:a0:2e:
                    b0:f1:67:8c:6a:38:3f:b4:ae:c2:9d:52:12:72:09:
                    4a:ab:6e:da:7f:fa:be:34:b0:96:3e:97:b2:d1:f9:
                    f8:5f:8d:9a:93:f1:84:a0:1e:e8:07:b5:a3:89:7d:
                    cc:06:9e:27:36:a9:d8:df:8d:20:eb:3a:d6:31:ae:
                    b9:d0:3b:a1:92:87:b2:c2:7a:de:e4:dc:75:50:d6:
                    12:8d:81:36:39:24:ca:48:49:fd:7c:bf:57:70:49:
                    61:46:01:be:dd:f0:b8:1c:ad:d6:05:06:a3:0c:6e:
                    b8:81:fd:58:fd:12:17:6d:fa:b4:71:25:d4:17:a4:
                    eb:db:aa:99:6f:5c:d4:1b:37:28:d6:62:be:97:b9:
                    b7:2d:77:09:d9:70:97:5d:b0:56:c8:0a:10:e1:06:
                    49:de:45:d0:d3:d0:48:e6:7b:55:61:f1:b7:51:0c:
                    e3:b7:2c:d0:99:71:71:d0:1c:ee:7f:d7:8a:55:6b:
                    68:1c:0f:7a:7b:32:d6:51:91:fa:23:b4:2d:22:d6:
                    bb:d7:f9:6e:1e:00:64:dd:c7:e3:75:92:44:30:5e:
                    07:e2:ad:ca:ff:86:6d:5f:82:3c:2f:bd:a1:9d:c3:
                    44:bf:bc:c0:c7:52:b3:6a:46:d6:bb:07:69:72:9a:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F9:AF:9F:6E:7B:AB:69:CE:3F:4F:8A:25:BE:CB:0F:0D:C3:15:97
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32342d3234203d3e20323639353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:f4:d7:53:62:fd:00:92:9c:7a:84:ae:fa:e1:f0:8a:8f:
         85:a0:51:62:27:88:0f:43:39:79:e8:ae:cf:67:2e:46:2e:34:
         42:7a:28:77:cd:3b:b7:17:63:4d:48:4a:69:46:a1:5f:48:9d:
         cd:08:a6:4a:a7:f5:7e:a0:5d:20:cc:52:4b:50:cc:33:63:f7:
         4a:bc:1a:d2:24:db:23:ab:56:d8:59:84:48:8d:a8:5c:52:01:
         ce:a5:9a:28:c8:b5:36:92:dd:e9:01:8a:0c:61:a4:fd:a9:34:
         00:23:00:7f:bb:a7:9d:01:91:3a:fe:54:3c:ea:6f:e7:62:90:
         03:16:ff:e2:fd:74:ad:6a:d4:65:3c:ba:b2:eb:88:80:24:73:
         07:15:08:39:35:b1:e4:84:e0:69:70:8f:b9:10:3f:cb:33:49:
         88:ba:c7:5b:1e:63:b5:92:4a:55:f0:27:2e:71:c8:b2:04:43:
         0f:4e:cb:00:6d:e8:97:ff:79:87:e7:69:e6:24:ec:a4:47:0f:
         14:49:0c:ad:37:e8:71:50:f0:03:41:23:ac:68:6c:fa:3a:1d:
         ed:6a:9e:be:39:85:fb:eb:17:2d:46:92:66:7f:a9:0d:8d:d5:
         87:31:00:45:53:5a:4a:29:5f:26:e3:41:73:2e:41:85:48:b0:
         29:16:86:65
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMYv/YG647XNI9elOEA7hnxgvbe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3MEEwM0VDOTU0RTE1MEEyMkJFNzhGQTk2NTE1Q0Iw
MTU4RjVDMTAeFw0yNDA0MjMxMzEzMDlaFw0yNTA0MjIxMzE4MDlaMDMxMTAvBgNV
BAMTKDBERjlBRjlGNkU3QkFCNjlDRTNGNEY4QTI1QkVDQjBGMERDMzE1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXtpgVLfrTEqLuQGgLrDxZ4xq
OD+0rsKdUhJyCUqrbtp/+r40sJY+l7LR+fhfjZqT8YSgHugHtaOJfcwGnic2qdjf
jSDrOtYxrrnQO6GSh7LCet7k3HVQ1hKNgTY5JMpISf18v1dwSWFGAb7d8LgcrdYF
BqMMbriB/Vj9Ehdt+rRxJdQXpOvbqplvXNQbNyjWYr6XubctdwnZcJddsFbIChDh
BkneRdDT0Ejme1Vh8bdRDOO3LNCZcXHQHO5/14pVa2gcD3p7MtZRkfojtC0i1rvX
+W4eAGTdx+N1kkQwXgfircr/hm1fgjwvvaGdw0S/vMDHUrNqRta7B2lympRRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDfmvn257q2nOP0+KJb7LDw3DFZcwHwYDVR0j
BBgwFoAUE3CgPslU4VCiK+ePqWUVywFY9cEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVn
TmovMC8xMzcwQTAzRUM5NTRFMTUwQTIyQkU3OEZBOTY1MTVDQjAxNThGNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNzBBMDNFQzk1NEUxNTBB
MjJCRTc4RkE5NjUxNUNCMDE1OEY1QzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLRGpDajFrTm14b0J0Q3EzNkRVZ25TYVFkQ2tzOXFkUGdmN1gxYmZ1Z05qLzAv
MzQzNTJlMzEzODM5MmUzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb0oMA0GCSqGSIb3DQEBCwUAA4IBAQCEavTXU2L9
AJKceoSu+uHwio+FoFFiJ4gPQzl56K7PZy5GLjRCeih3zTu3F2NNSEppRqFfSJ3N
CKZKp/V+oF0gzFJLUMwzY/dKvBrSJNsjq1bYWYRIjahcUgHOpZooyLU2kt3pAYoM
YaT9qTQAIwB/u6edAZE6/lQ86m/nYpADFv/i/XStatRlPLqy64iAJHMHFQg5NbHk
hOBpcI+5ED/LM0mIusdbHmO1kkpV8CcucciyBEMPTssAbeiX/3mH52nmJOykRw8U
SQytN+hxUPADQSOsaGz6Oh3tap6+OYX76xctRpJmf6kNjdWHMQBFU1pKKV8m40Fz
LkGFSLApFoZl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org