Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3234203d3e20323733343439.roa
File:                     34352e3138362e35352e302f32342d3234203d3e20323733343439.roa (raw, json)
Hash identifier:          xKspRyvPMRlFTFuObM8G6qH8JExfgmh5q1EZxPB37w0=
Subject key identifier:   41:75:6F:67:14:F9:4B:53:2F:6E:5F:77:BD:39:1C:A1:96:EB:5C:CF
Certificate issuer:       /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial:       755B8C70EB4986C546F7D780F778295E8DCF1444
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3234203d3e20323733343439.roa
Signing time:             Thu 23 May 2024 02:11:16 +0000
ROA not before:           Thu 23 May 2024 02:06:16 +0000
ROA not after:            Thu 22 May 2025 02:11:16 +0000
asID:                     273449
IP address blocks:        45.186.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 May 2024 02:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5b:8c:70:eb:49:86:c5:46:f7:d7:80:f7:78:29:5e:8d:cf:14:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
        Validity
            Not Before: May 23 02:06:16 2024 GMT
            Not After : May 22 02:11:16 2025 GMT
        Subject: CN=41756F6714F94B532F6E5F77BD391CA196EB5CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:df:5f:aa:bc:95:bc:0e:7b:f0:3b:75:41:28:
                    88:9c:8a:d7:cc:24:7b:c3:0f:58:71:35:71:5c:68:
                    76:89:0a:32:ed:63:fe:09:46:a2:1b:d6:b7:be:ae:
                    d4:90:7e:51:1b:7a:7f:0b:a1:32:e6:08:d9:27:bd:
                    6c:a8:18:43:38:04:da:90:20:3e:2c:28:a5:0e:05:
                    fb:b1:78:10:2d:b3:83:ae:d7:ea:25:57:02:15:8b:
                    72:00:1b:52:da:13:2f:b2:22:f3:87:c6:3a:d1:1c:
                    c7:7b:9c:e5:75:7a:dc:b4:79:40:fc:90:22:ac:ec:
                    03:d4:23:ac:5f:32:4d:1d:02:2b:a4:42:83:7d:06:
                    01:4e:15:6a:7f:45:e4:a9:82:0c:7f:7c:84:e9:7d:
                    0e:9d:b6:8c:42:57:9e:d1:c2:63:83:01:9c:04:63:
                    5f:7d:38:76:2e:3e:d5:15:f6:4a:b5:9c:a1:fb:3e:
                    65:52:19:1c:27:07:c6:9f:e7:40:8e:e9:e9:18:82:
                    7a:51:2e:28:f1:85:b9:6c:0f:b3:fe:a2:51:3f:bf:
                    d3:b5:60:7f:e5:ea:21:0d:e1:40:93:71:27:da:25:
                    8b:5d:7b:e6:3f:62:c3:be:ee:e3:e1:d7:5c:e1:e5:
                    bb:d6:ea:09:7b:c8:d1:4e:a8:56:2a:11:89:bf:7d:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:75:6F:67:14:F9:4B:53:2F:6E:5F:77:BD:39:1C:A1:96:EB:5C:CF
            X509v3 Authority Key Identifier:
                keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3234203d3e20323733343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:76:c5:0c:ee:98:c3:f8:6d:d5:26:7e:99:7d:3b:88:94:
         c1:15:f7:30:8c:d5:c2:58:66:65:c5:1c:80:e4:5a:00:ab:15:
         90:91:d1:ee:64:e2:c9:e7:8a:d2:c1:e9:00:b8:a1:7c:fc:ab:
         39:df:80:e5:3a:4a:7b:2e:55:de:8e:af:e5:27:55:97:5e:ca:
         a2:1e:f5:c3:6f:6c:a9:25:cd:60:33:d6:e0:41:78:f4:6c:f2:
         6d:83:08:62:4c:d0:cb:0f:76:56:1b:be:45:5c:fd:2f:5f:b6:
         d1:e6:b1:44:4a:4c:98:77:f7:ce:70:ca:71:d8:65:50:eb:a5:
         7b:6c:65:95:dc:9c:d2:b2:5e:47:46:ec:c8:aa:61:00:02:19:
         6c:92:9e:c6:97:99:ab:aa:3e:93:ec:0f:3f:a9:1a:b6:15:66:
         57:d8:2d:94:07:b2:f3:ff:28:62:c4:7f:cb:a3:8c:67:cc:90:
         1b:e9:a5:b5:fa:de:78:88:8c:0a:b4:c4:e9:ca:e9:f2:fb:25:
         bf:7a:5b:f4:a4:6a:d4:20:44:2a:af:80:a6:ff:5e:f4:43:d5:
         45:aa:70:fe:66:21:7a:86:ef:7f:a9:9b:76:05:1c:22:d2:ed:
         2e:08:f8:ee:cd:a0:87:b0:5c:f5:8c:8f:22:44:22:24:84:ae:
         54:a4:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org