Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34322e302f32332d3233203d3e20323639353730.roa
File:                     34352e3138392e34322e302f32332d3233203d3e20323639353730.roa (raw, json)
Hash identifier:          EHRyzlatEdd0+Yn1H07MGd7KplOHXxU1pHyA9cr0HHU=
Subject key identifier:   9A:ED:57:21:3E:AA:55:97:D6:79:29:26:C1:AF:BA:27:BE:6E:7A:1C
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       0C137D7A4B64BA205D92A9AE84EF4ACD9E444314
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34322e302f32332d3233203d3e20323639353730.roa
Signing time:             Tue 23 Apr 2024 13:18:14 +0000
ROA not before:           Tue 23 Apr 2024 13:13:14 +0000
ROA not after:            Tue 22 Apr 2025 13:18:14 +0000
asID:                     269570
IP address blocks:        45.189.42.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:13:7d:7a:4b:64:ba:20:5d:92:a9:ae:84:ef:4a:cd:9e:44:43:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: Apr 23 13:13:14 2024 GMT
            Not After : Apr 22 13:18:14 2025 GMT
        Subject: CN=9AED57213EAA5597D6792926C1AFBA27BE6E7A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:be:67:1c:39:54:c6:ca:9d:45:b3:35:a9:87:
                    3a:58:28:59:6a:cc:28:9e:8a:81:f6:b5:d2:7b:45:
                    67:fc:a2:58:ae:7d:5e:ba:24:2f:6f:07:20:77:7f:
                    d0:44:5a:eb:c2:25:14:62:5b:5c:07:a4:c6:59:b2:
                    a2:8f:08:2e:e0:85:b8:70:b9:15:ed:c4:33:09:a1:
                    9d:03:35:c9:b3:2d:da:19:ec:73:b7:e0:ff:c0:0c:
                    9c:f0:c8:99:c3:8a:a5:79:92:64:de:52:f4:24:8b:
                    41:91:90:75:52:28:3e:f3:ba:1f:59:90:74:9a:56:
                    f7:80:82:ed:71:43:93:90:15:b0:6c:64:3b:da:f4:
                    b9:41:03:30:fe:15:63:79:91:a2:16:0b:c6:c6:82:
                    5b:9c:7c:b0:f3:db:5c:f0:9f:7a:59:1a:d0:2b:af:
                    c0:38:0d:29:3b:be:2a:f6:8a:69:bf:65:ce:6c:df:
                    5b:08:33:98:e4:a6:0e:0e:c0:83:f3:2a:7c:58:ed:
                    80:48:85:f5:09:7a:df:61:fc:e7:cb:18:8f:22:6d:
                    27:a6:41:c1:57:b0:af:4b:ce:cc:e9:d8:19:78:11:
                    bb:21:7b:85:b4:89:20:94:12:92:a7:7b:76:4e:fd:
                    7d:d6:86:a8:c7:d6:59:36:6c:21:c0:58:ad:1e:18:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:ED:57:21:3E:AA:55:97:D6:79:29:26:C1:AF:BA:27:BE:6E:7A:1C
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34322e302f32332d3233203d3e20323639353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:97:24:31:a3:6a:26:b8:6d:f2:6a:65:ae:01:0a:5e:b4:
         7a:4e:55:9f:b4:dd:c4:93:85:80:fe:d0:ac:ee:64:86:40:be:
         09:11:43:73:7d:aa:e1:ae:08:a3:ca:f9:3d:fd:66:ae:a2:e3:
         a6:b3:31:d5:69:4e:c0:c2:a3:e9:b2:09:73:4a:0b:64:54:ab:
         5a:e7:b7:b0:64:1d:29:fe:15:fa:e1:fc:ba:9b:2d:a1:ba:5e:
         c2:d1:75:42:81:50:d9:bc:3b:7b:b2:80:da:44:d9:e4:ad:5b:
         d3:9d:2b:a6:06:ad:dd:f7:25:e4:5f:55:4a:7a:d2:bc:9c:7f:
         7f:77:40:d7:11:c4:f3:27:fb:0a:a4:9f:a9:8b:65:6f:4d:e3:
         6b:5b:8d:3d:72:f0:95:ee:30:03:42:f6:16:52:0f:cb:60:e5:
         85:6c:43:3a:d4:52:cb:13:e3:d5:27:0c:cb:40:8d:cd:a2:04:
         5d:3c:f8:c7:3b:5e:a7:7f:65:9f:13:7f:dc:22:22:ef:cb:02:
         9d:4b:10:fd:6b:91:28:91:30:93:27:16:9c:9c:83:40:94:d0:
         97:b1:86:37:85:b8:53:c1:ca:60:14:96:c0:85:32:e2:2a:ee:
         d7:be:59:2a:5d:dc:ca:eb:ae:86:98:dc:fe:96:42:15:aa:5c:
         24:47:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org