Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39322e302f32332d3233203d3e20323636393932.roa
File:                     34352e3232362e39322e302f32332d3233203d3e20323636393932.roa (raw, json)
Hash identifier:          aeFdtb5mnitcxJw47XgfI71g5yUh03+dNUNirPdDNMA=
Subject key identifier:   1F:A7:86:FA:25:8C:E8:43:B6:5E:E5:BC:2C:20:63:B4:EE:E5:5A:62
Certificate issuer:       /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
Certificate serial:       53EF0702760523F3FC4FDBCA7B01EEAE14AF6E2F
Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39322e302f32332d3233203d3e20323636393932.roa
Signing time:             Thu 18 Apr 2024 18:28:04 +0000
ROA not before:           Thu 18 Apr 2024 18:23:04 +0000
ROA not after:            Thu 17 Apr 2025 18:28:04 +0000
asID:                     266992
IP address blocks:        45.226.92.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ef:07:02:76:05:23:f3:fc:4f:db:ca:7b:01:ee:ae:14:af:6e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
        Validity
            Not Before: Apr 18 18:23:04 2024 GMT
            Not After : Apr 17 18:28:04 2025 GMT
        Subject: CN=1FA786FA258CE843B65EE5BC2C2063B4EEE55A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:9c:c6:ce:53:83:fb:e0:7c:7f:75:21:de:
                    1b:30:61:54:13:7c:b4:51:1f:26:a5:92:e2:b7:98:
                    6d:df:30:d4:58:37:95:29:72:84:91:2a:d2:76:6e:
                    21:c5:6c:7e:0f:9d:86:bf:3a:bd:cc:8e:4a:20:58:
                    70:e8:31:4a:00:b4:81:c5:0f:76:ae:28:97:8f:b1:
                    b9:26:a7:61:67:7b:fc:16:63:88:6a:cc:52:30:a8:
                    ab:5f:07:89:68:ba:33:1a:42:68:09:96:f9:60:f3:
                    00:a1:16:78:c9:e3:d5:98:4c:28:95:c6:c2:f6:c6:
                    bd:cb:19:68:0d:2c:a5:1d:07:8c:85:e4:6e:e9:ba:
                    60:7c:0b:f9:3f:48:9d:e7:0e:fe:27:46:2d:80:7a:
                    1b:a9:ba:2e:39:3c:c8:a2:e0:d2:26:38:88:ac:a9:
                    30:47:d4:66:ac:75:f2:07:ad:b0:e2:bb:d9:fb:7f:
                    e1:95:fb:02:9d:61:3a:8a:6c:e6:32:c7:42:13:66:
                    6d:c1:64:b1:44:61:9d:4b:d5:ac:b3:68:6e:b1:ea:
                    49:c5:d5:6e:25:bc:04:9e:d1:f0:70:1b:49:34:82:
                    1e:49:78:32:31:6c:66:9c:67:0a:ed:3e:e7:b3:df:
                    e2:df:e1:74:25:e2:8b:0b:d3:33:90:aa:2c:f9:b4:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A7:86:FA:25:8C:E8:43:B6:5E:E5:BC:2C:20:63:B4:EE:E5:5A:62
            X509v3 Authority Key Identifier:
                keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39322e302f32332d3233203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:6b:79:70:91:31:4f:a0:c3:10:54:a7:fe:7c:a9:76:c3:
         eb:a0:9f:2d:b4:25:69:f7:73:70:5f:2d:8a:af:9a:8a:2a:69:
         73:d2:35:ea:0e:82:73:b8:d0:4b:f0:9b:a4:e5:2b:f2:7d:46:
         50:1d:c3:dc:11:dc:eb:47:71:12:f5:86:32:79:b5:76:aa:0b:
         dd:24:84:cf:13:e6:78:c2:b6:98:67:1b:3f:cb:40:50:dd:7c:
         3e:83:63:90:c5:4a:03:10:71:6b:6f:40:d6:29:00:65:78:c1:
         e9:44:b8:1c:9a:e8:80:3e:9e:5e:1f:4c:12:21:4f:a5:ec:70:
         d5:cf:79:73:7a:18:bb:b6:f7:30:98:5c:03:18:7c:50:51:4f:
         04:fa:b7:71:9c:fe:38:a3:19:b3:3c:51:3e:b2:75:7b:89:c7:
         b6:ca:71:71:d9:09:b4:ac:55:4c:b3:f2:8a:c5:84:4b:52:88:
         bf:8a:6c:77:96:1d:d6:bb:3a:38:f4:48:18:39:51:09:54:03:
         27:36:7f:3a:60:48:2e:0b:49:5c:a6:69:3d:ff:84:59:7e:ee:
         a2:1c:c9:5a:5d:36:b3:5e:d0:1d:aa:bf:3a:61:01:a8:fb:73:
         b4:53:1b:0b:cc:56:4d:30:ba:0a:1d:f0:a9:45:0e:b8:3e:44:
         c1:09:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:26 2024 by rpki-client on console-fra.rpki-client.org