Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39322e302f32322d3232203d3e20323636393932.roa
File:                     34352e3232362e39322e302f32322d3232203d3e20323636393932.roa (raw, json)
Hash identifier:          +1QZT+yznmsQO37KFqi+kXZ8oDtCQYlwYW6g3hL5Ui0=
Subject key identifier:   60:EA:B5:71:87:85:EE:35:F6:AF:43:5C:31:58:91:33:DB:F3:7B:0D
Certificate issuer:       /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
Certificate serial:       5ACE59F3779A07A641A91FF5C80771B8AA6487A8
Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39322e302f32322d3232203d3e20323636393932.roa
Signing time:             Thu 18 Apr 2024 18:28:02 +0000
ROA not before:           Thu 18 Apr 2024 18:23:02 +0000
ROA not after:            Thu 17 Apr 2025 18:28:02 +0000
asID:                     266992
IP address blocks:        45.226.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ce:59:f3:77:9a:07:a6:41:a9:1f:f5:c8:07:71:b8:aa:64:87:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
        Validity
            Not Before: Apr 18 18:23:02 2024 GMT
            Not After : Apr 17 18:28:02 2025 GMT
        Subject: CN=60EAB5718785EE35F6AF435C31589133DBF37B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:17:2d:67:12:06:25:e6:2b:f8:b3:48:3f:
                    04:5b:54:fa:41:d9:3a:67:c5:54:4b:67:9f:e0:c9:
                    97:2f:c5:6b:6f:95:df:dd:8c:4f:9a:66:05:57:99:
                    92:f0:44:0e:f2:1d:2b:0a:d9:0b:44:d6:09:8a:87:
                    b6:34:6a:69:80:ac:9f:92:d3:e4:7e:e0:13:dc:20:
                    bf:12:77:b3:ef:76:49:b3:8f:e8:a5:0e:bc:b9:f0:
                    b0:7d:f6:c2:ef:d9:4b:ec:8a:5c:d7:dd:09:81:b9:
                    0f:68:fe:22:ca:5f:e8:8a:c1:9a:e6:83:6c:13:fd:
                    0b:05:b5:b4:28:9b:84:7c:81:b7:7a:67:3a:8a:14:
                    10:df:3b:52:03:4c:1a:8f:78:01:60:16:60:3c:f4:
                    01:5a:53:d1:56:e4:01:ab:e1:5c:fd:55:10:aa:10:
                    d2:19:1b:98:e7:13:69:06:24:7b:c0:23:f9:21:c1:
                    0c:52:fe:e8:7d:ad:22:20:40:48:29:78:48:0c:6f:
                    7a:5d:57:8a:6b:e4:96:6e:46:c2:8a:23:c3:3a:3d:
                    55:44:d8:f1:2e:f2:ff:0a:54:e5:85:c7:53:ba:48:
                    38:c9:84:31:f1:09:5c:bd:e2:68:9c:19:cf:b7:b1:
                    c0:73:2f:71:2e:ac:38:26:93:5b:49:a0:b1:ed:a1:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EA:B5:71:87:85:EE:35:F6:AF:43:5C:31:58:91:33:DB:F3:7B:0D
            X509v3 Authority Key Identifier:
                keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39322e302f32322d3232203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:ca:5e:77:b9:7b:bb:52:55:cd:c1:b5:46:b5:3e:c9:60:c8:
         c4:7e:53:94:25:a4:44:ef:78:c7:14:35:5c:e9:0f:e1:ca:ff:
         bf:d4:93:5f:ae:31:d5:16:57:8a:41:2c:e6:e6:49:26:7c:0e:
         f7:d1:44:e9:0b:45:cf:c6:49:59:19:77:5e:e5:c4:b8:38:a7:
         80:c5:a9:0b:ee:4d:dd:71:14:fe:2b:a3:98:17:65:d1:ab:88:
         29:5e:e0:e7:37:6c:7e:df:a3:ae:0e:d5:e4:14:a0:35:d3:2d:
         df:9d:89:77:aa:f9:d1:fb:a1:35:f6:1f:58:3f:97:04:aa:63:
         ab:a8:92:2a:ff:d4:05:93:14:03:a0:75:9f:fa:49:e6:64:50:
         84:f1:93:fe:b3:06:9a:d8:6b:54:af:86:8c:28:2c:46:6e:d7:
         f6:99:da:1b:4d:da:cd:c5:cd:d0:f8:d3:fe:96:fd:63:f0:ff:
         83:69:58:a2:2f:c9:0e:db:90:be:30:1c:d1:0b:ad:d7:c1:a9:
         34:1f:f2:ea:22:21:79:d2:2f:f9:6d:04:ae:67:2b:bf:31:bf:
         60:79:60:c1:2c:a7:af:34:cc:31:a9:1b:1a:79:03:1e:5e:1f:
         67:4c:fe:3f:5d:1e:f5:a4:8a:8b:cb:30:31:63:87:47:68:05:
         dc:4d:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org