Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39342e302f32342d3234203d3e20323636393932.roa
File:                     34352e3232362e39342e302f32342d3234203d3e20323636393932.roa (raw, json)
Hash identifier:          BFqJniEPhjxMS5MjuqzpnXEBp220MV5LXNkZgAuklv8=
Subject key identifier:   7A:2D:56:7D:90:9B:9D:23:79:42:85:02:DA:91:93:BB:AA:92:59:07
Certificate issuer:       /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
Certificate serial:       15B8DD565F8D92A56602F4FAE277D5085F2AE65D
Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39342e302f32342d3234203d3e20323636393932.roa
Signing time:             Thu 18 Apr 2024 18:28:15 +0000
ROA not before:           Thu 18 Apr 2024 18:23:15 +0000
ROA not after:            Thu 17 Apr 2025 18:28:15 +0000
asID:                     266992
IP address blocks:        45.226.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b8:dd:56:5f:8d:92:a5:66:02:f4:fa:e2:77:d5:08:5f:2a:e6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
        Validity
            Not Before: Apr 18 18:23:15 2024 GMT
            Not After : Apr 17 18:28:15 2025 GMT
        Subject: CN=7A2D567D909B9D2379428502DA9193BBAA925907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ef:d6:0e:ba:6c:f8:4e:df:85:67:59:57:9f:
                    b8:23:49:5b:73:5e:06:54:8a:1f:7f:ea:27:26:50:
                    f9:1f:9d:e8:60:8a:3c:2b:93:a3:55:b5:4d:29:4f:
                    6c:c7:e3:71:50:6c:64:93:75:4f:82:e0:01:39:96:
                    9f:bb:61:88:24:81:f7:92:fa:21:60:c0:3c:81:a0:
                    fe:9c:4d:64:59:67:f4:9a:4a:f7:3c:f1:32:be:df:
                    e5:2c:7b:a9:f4:b5:eb:ef:1c:70:2f:78:81:17:02:
                    38:e0:35:e5:2c:51:07:aa:cc:16:24:c0:45:4b:44:
                    a7:57:cd:1e:a7:4c:ac:04:f6:5c:17:eb:19:40:d1:
                    ab:19:cf:d8:55:b0:f0:6c:d8:36:b9:f1:3d:92:17:
                    52:8a:34:fd:bd:37:4d:03:eb:ba:94:e0:51:e6:b5:
                    0a:67:43:3f:1d:da:2d:46:6a:87:21:84:4d:1f:75:
                    4f:c3:72:62:e7:c8:f9:17:29:90:c5:8c:bb:c0:65:
                    91:b6:90:40:d7:c8:18:72:4f:8e:c6:8b:a2:2a:f1:
                    dc:61:68:0a:73:c1:b4:66:2d:59:40:f5:70:57:97:
                    28:ff:4e:0e:f3:7a:0e:cc:c2:43:56:89:32:2e:13:
                    79:fa:87:d2:d8:95:5e:f5:52:7f:4a:c5:74:cd:3b:
                    e5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2D:56:7D:90:9B:9D:23:79:42:85:02:DA:91:93:BB:AA:92:59:07
            X509v3 Authority Key Identifier:
                keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39342e302f32342d3234203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:8c:79:af:25:e7:a8:0d:ad:a6:24:e6:76:30:1e:db:86:
         64:3c:94:b9:c1:9f:ac:1f:7e:88:00:ca:6f:2f:50:1b:e9:b6:
         d8:72:74:08:98:b7:16:ea:81:df:d7:1e:f9:64:53:7e:11:e0:
         77:a5:7d:3d:c7:51:1b:15:83:3a:c1:77:a3:a9:d7:90:f6:7b:
         fa:b6:81:0f:ed:08:39:75:27:e1:d9:ba:85:c2:1f:0b:48:b5:
         dc:59:81:d1:65:53:b1:a6:f0:05:fa:d0:3f:84:46:fc:8c:7f:
         22:96:71:e2:0e:03:4c:05:58:97:02:c4:89:1c:ca:2c:a8:23:
         69:6a:17:dc:22:ea:8d:35:c8:c9:6e:34:5d:31:8b:4d:a8:74:
         08:55:ee:70:de:29:26:75:af:59:e4:ef:1b:df:56:31:52:80:
         5b:1b:5f:50:8d:0a:3a:aa:db:23:97:7d:b0:55:cd:51:6c:d2:
         07:97:07:37:0b:7e:0d:8e:e8:25:dd:54:ed:b9:91:34:b5:4c:
         a1:f7:a6:17:cd:b8:80:c8:60:b4:4a:b2:d4:32:0d:a1:85:58:
         db:72:1a:9d:04:52:39:04:03:65:8c:32:23:1f:93:2a:c1:22:
         5b:6a:0a:f7:70:08:66:4b:6b:0a:9c:77:e1:d9:15:58:4d:10:
         4d:bf:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org