Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39352e302f32342d3234203d3e20323636393932.roa
File:                     34352e3232362e39352e302f32342d3234203d3e20323636393932.roa (raw, json)
Hash identifier:          GhSmXfWFxG8KPByU4VJQGmbpt3366hyM3nNdv+5E3I8=
Subject key identifier:   51:3A:9A:59:76:AB:23:30:E6:17:A9:F8:5D:E0:20:75:5B:04:82:80
Certificate issuer:       /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
Certificate serial:       692E83289249C1B77889326476FD934F22FF554C
Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39352e302f32342d3234203d3e20323636393932.roa
Signing time:             Thu 18 Apr 2024 18:28:17 +0000
ROA not before:           Thu 18 Apr 2024 18:23:17 +0000
ROA not after:            Thu 17 Apr 2025 18:28:17 +0000
asID:                     266992
IP address blocks:        45.226.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2e:83:28:92:49:c1:b7:78:89:32:64:76:fd:93:4f:22:ff:55:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
        Validity
            Not Before: Apr 18 18:23:17 2024 GMT
            Not After : Apr 17 18:28:17 2025 GMT
        Subject: CN=513A9A5976AB2330E617A9F85DE020755B048280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:e1:09:8e:e9:94:5a:ec:9b:b1:7e:c9:00:
                    42:22:06:06:0f:ab:cc:29:fa:f8:3f:5c:e2:b2:d3:
                    b7:62:82:72:65:0d:94:a1:f8:58:b8:dc:31:44:9b:
                    b7:c6:da:bf:c5:eb:de:1c:d2:e8:36:38:65:02:10:
                    6b:1f:23:18:bf:f6:ec:87:1a:88:a5:64:08:db:18:
                    bb:f7:34:24:66:dc:db:bd:9a:d7:ae:2b:cc:7a:a6:
                    d4:3d:11:76:1b:aa:d4:31:02:e0:92:fd:8f:ec:93:
                    5b:f3:11:75:64:11:b9:7f:27:e0:25:7f:ed:26:47:
                    e8:20:4e:0c:cc:3b:5b:87:27:36:d1:26:8b:48:b4:
                    37:9a:07:e8:30:fc:90:52:b7:7f:d1:ce:6b:f2:f2:
                    00:7f:f2:2d:23:34:30:2c:e6:92:c7:1e:1e:7e:c3:
                    fc:6a:3d:82:d6:ec:47:de:16:2b:0f:d2:2b:b6:c0:
                    ff:e2:9e:03:c4:49:e6:6e:43:d5:8f:bc:18:4e:88:
                    96:80:4a:29:7e:d3:eb:32:1e:94:05:f2:14:7b:e2:
                    e2:b1:9e:af:c3:8b:30:f9:62:43:34:40:a7:f3:6f:
                    c2:89:cf:74:82:d0:9d:39:26:a6:8c:61:be:40:d1:
                    cc:4c:09:54:2b:34:7b:5a:17:1e:c7:c7:11:c8:83:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3A:9A:59:76:AB:23:30:E6:17:A9:F8:5D:E0:20:75:5B:04:82:80
            X509v3 Authority Key Identifier:
                keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/34352e3232362e39352e302f32342d3234203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:09:52:40:2d:af:8b:6f:2b:41:51:50:2f:c8:bb:f6:a1:70:
         46:b2:84:b4:d4:d0:a8:cd:77:e9:fd:1a:67:c1:29:e0:42:ed:
         4a:9e:5e:11:d2:1a:f4:44:a4:19:99:46:80:a6:a9:49:2a:eb:
         dd:13:f3:9f:24:8d:b5:18:a0:b7:43:ae:b8:83:de:ef:bc:d5:
         c4:60:ed:81:9f:a9:7c:b1:0c:e4:78:b7:a9:11:b4:ba:d6:e5:
         a5:b3:1d:04:26:97:8e:8c:7f:33:44:d9:8f:94:3c:84:6e:4f:
         52:18:d2:fd:b6:2e:de:e2:65:7e:fb:30:2e:39:9f:9a:73:28:
         ab:4e:fc:d4:1c:58:fa:e6:7e:46:ca:6c:d5:5f:d2:5f:67:1c:
         b9:93:23:04:a5:38:a8:99:ea:6d:5d:d8:f2:5e:ad:90:44:9a:
         bb:9b:90:6c:25:89:48:26:72:78:cb:3e:90:40:64:2f:1b:f9:
         e1:cc:14:37:20:4b:e5:80:db:7f:1c:4c:69:5c:94:f7:f3:c8:
         3a:8b:8a:8b:db:70:07:dd:28:a5:cf:07:b1:a8:79:e9:8c:06:
         21:c5:e6:9c:42:99:c9:fe:fe:36:24:6e:06:4d:56:65:00:72:
         35:06:b0:3c:1d:ba:87:58:27:9c:10:62:fb:07:46:d5:89:5c:
         46:53:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org