Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3332203d3e20323733343439.roa
File:                     34352e3138362e35352e302f32342d3332203d3e20323733343439.roa (raw, json)
Hash identifier:          z83T2sJ9VqrFInv5tYFj+JKZ+U4HontdQWEar/2fo9s=
Subject key identifier:   D4:D0:A9:85:0E:20:16:9E:54:1F:1F:E6:0A:87:90:7A:2A:14:F9:EE
Certificate issuer:       /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial:       135788A6563B84329EAB5BAD09CC60D1F9C04611
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3332203d3e20323733343439.roa
Signing time:             Thu 23 May 2024 02:13:23 +0000
ROA not before:           Thu 23 May 2024 02:08:23 +0000
ROA not after:            Thu 22 May 2025 02:13:23 +0000
asID:                     273449
IP address blocks:        45.186.55.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 16:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:57:88:a6:56:3b:84:32:9e:ab:5b:ad:09:cc:60:d1:f9:c0:46:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
        Validity
            Not Before: May 23 02:08:23 2024 GMT
            Not After : May 22 02:13:23 2025 GMT
        Subject: CN=D4D0A9850E20169E541F1FE60A87907A2A14F9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:6e:dd:da:d8:6d:35:90:24:e9:83:ef:52:
                    8e:64:14:6f:38:52:74:79:17:58:f0:5a:fd:f4:80:
                    8d:60:9c:4e:9b:f7:13:cd:05:73:04:cd:60:e5:31:
                    21:ca:f0:f3:04:5b:7d:94:b5:d9:41:db:6f:c1:a5:
                    6c:a2:5b:c0:2c:82:47:27:cd:9b:38:46:2d:9f:33:
                    f2:86:5f:cc:f9:4d:00:fa:8c:18:82:da:4a:23:4d:
                    7a:43:1f:84:d1:44:27:f5:f5:bb:c4:e5:46:7e:39:
                    eb:62:b3:68:40:c9:ad:3c:df:cd:c0:d2:08:38:68:
                    b1:17:65:af:59:2e:d7:0b:21:2e:76:33:57:de:d8:
                    34:54:5e:6f:05:73:fd:7e:7c:41:b6:a6:13:fb:66:
                    ed:34:a9:48:36:9b:f9:cf:42:d8:a1:c9:61:b2:56:
                    fc:dd:7c:e6:02:2c:1d:23:36:0d:b7:93:ed:fc:65:
                    22:e3:82:36:fe:66:0c:3c:22:34:ea:26:bc:5b:e3:
                    c3:09:ad:e7:f2:f4:9f:15:84:00:0e:88:69:3c:1f:
                    61:aa:d6:f2:dc:13:c5:bf:4c:f3:fd:10:78:29:ad:
                    8a:44:66:65:1b:03:d4:8d:00:db:e0:ff:3f:e7:7d:
                    a6:4c:62:82:37:56:bd:c9:9f:3e:1c:ec:e4:36:8d:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D0:A9:85:0E:20:16:9E:54:1F:1F:E6:0A:87:90:7A:2A:14:F9:EE
            X509v3 Authority Key Identifier:
                keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3332203d3e20323733343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:55:b1:06:4e:46:64:8d:4b:80:58:1a:21:6e:f1:b7:a0:b1:
         b9:8a:e0:4b:34:ba:2d:9f:f9:b7:9b:e8:93:95:21:8d:03:58:
         3d:43:71:4f:41:cd:64:ad:91:7f:46:21:a2:bb:4e:89:a3:91:
         87:f0:06:db:c8:f0:e5:16:92:64:a2:8e:cb:32:ef:27:23:3e:
         73:59:a4:bf:79:d1:5e:b1:db:6d:c0:94:86:90:16:36:44:b2:
         a9:86:fc:f7:ac:9c:2a:a5:03:fa:ae:cb:a5:42:dd:bb:d2:81:
         94:41:81:57:30:ac:ae:aa:1a:6f:8f:ca:30:12:20:ad:a1:df:
         b9:55:6c:f1:d7:70:da:ae:3b:82:6d:8d:d8:e0:69:f2:1e:d8:
         9c:ba:6e:fd:26:41:31:b9:1a:11:cf:ff:77:e3:eb:59:0b:72:
         31:12:b1:bb:d0:fc:06:b9:90:88:38:4a:27:f1:58:2c:ef:4a:
         27:ba:cd:7b:75:8f:68:c7:82:b4:e7:c2:ce:29:bd:82:11:f9:
         be:f7:7b:93:19:e6:a8:9d:b4:5b:d0:2a:e9:f8:36:12:11:31:
         a7:05:8e:cf:c8:31:ad:8f:a6:c2:36:1d:b0:c0:a8:08:88:4d:
         c3:88:3b:1c:93:c5:02:96:9b:ee:2a:33:a3:b6:49:6c:23:7c:
         4c:56:53:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE1eIplY7hDKeq1utCcxg0fnARhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAxRkIxQUNEQTJBNzI1QzU3RTJGMjI5Njc4QzQ1RTZG
MEI2NkJBOTAeFw0yNDA1MjMwMjA4MjNaFw0yNTA1MjIwMjEzMjNaMDMxMTAvBgNV
BAMTKEQ0RDBBOTg1MEUyMDE2OUU1NDFGMUZFNjBBODc5MDdBMkExNEY5RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIT27d2thtNZAk6YPvUo5kFG84
UnR5F1jwWv30gI1gnE6b9xPNBXMEzWDlMSHK8PMEW32UtdlB22/BpWyiW8Asgkcn
zZs4Ri2fM/KGX8z5TQD6jBiC2kojTXpDH4TRRCf19bvE5UZ+Oetis2hAya08383A
0gg4aLEXZa9ZLtcLIS52M1fe2DRUXm8Fc/1+fEG2phP7Zu00qUg2m/nPQtihyWGy
VvzdfOYCLB0jNg23k+38ZSLjgjb+Zgw8IjTqJrxb48MJrefy9J8VhAAOiGk8H2Gq
1vLcE8W/TPP9EHgprYpEZmUbA9SNANvg/z/nfaZMYoI3Vr3Jnz4c7OQ2jS7lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1NCphQ4gFp5UHx/mCoeQeioU+e4wHwYDVR0j
BBgwFoAUcB+xrNoqclxX4vIpZ4xF5vC2a6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMS83MDFGQjFBQ0RBMkE3MjVDNTdFMkYyMjk2NzhDNDVFNkYwQjY2QkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMUZCMUFDREEyQTcyNUM1
N0UyRjIyOTY3OEM0NUU2RjBCNjZCQTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzEv
MzQzNTJlMzEzODM2MmUzNTM1MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNzMz
MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbo3MA0GCSqGSIb3DQEBCwUAA4IBAQC5VbEGTkZk
jUuAWBohbvG3oLG5iuBLNLotn/m3m+iTlSGNA1g9Q3FPQc1krZF/RiGiu06Jo5GH
8AbbyPDlFpJkoo7LMu8nIz5zWaS/edFesdttwJSGkBY2RLKphvz3rJwqpQP6rsul
Qt270oGUQYFXMKyuqhpvj8owEiCtod+5VWzx13DarjuCbY3Y4GnyHticum79JkEx
uRoRz/934+tZC3IxErG70PwGuZCIOEon8Vgs70onus17dY9ox4K058LOKb2CEfm+
93uTGeaonbRb0Crp+DYSETGnBY7PyDGtj6bCNh2wwKgIiE3DiDsck8UClpvuKjOj
tklsI3xMVlP6
-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:43 2024 by rpki-client on console-ams.rpki-client.org