Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/34352e3138322e3136382e302f32322d3232203d3e20323639323734.roa
File:                     34352e3138322e3136382e302f32322d3232203d3e20323639323734.roa (raw, json)
Hash identifier:          Y7x1pnOpmHqHU0AKoKogCzz+F7hI94F4XPl24730YLA=
Subject key identifier:   F6:27:7E:71:E4:D4:79:BE:0F:32:F6:3A:84:CA:67:51:27:C3:9B:1A
Certificate issuer:       /CN=9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70
Certificate serial:       494BD2E7F1200058F81A6ACF623BF550B41EB023
Authority key identifier: 9D:27:DD:9B:B1:31:EA:CC:88:E3:4E:6D:CC:56:50:B5:FE:44:FF:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/34352e3138322e3136382e302f32322d3232203d3e20323639323734.roa
Signing time:             Thu 27 Jun 2024 03:00:34 +0000
ROA not before:           Thu 27 Jun 2024 02:55:34 +0000
ROA not after:            Thu 26 Jun 2025 03:00:34 +0000
asID:                     269274
IP address blocks:        45.182.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 03:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4b:d2:e7:f1:20:00:58:f8:1a:6a:cf:62:3b:f5:50:b4:1e:b0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70
        Validity
            Not Before: Jun 27 02:55:34 2024 GMT
            Not After : Jun 26 03:00:34 2025 GMT
        Subject: CN=F6277E71E4D479BE0F32F63A84CA675127C39B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:84:a2:9a:07:99:cf:88:07:6d:0d:07:a2:
                    6f:4d:ee:c2:0a:06:d3:6a:a5:1b:d6:d8:59:4f:fb:
                    e7:94:81:3e:ec:9d:3f:f4:1d:9c:55:b2:f2:09:fe:
                    d4:ef:d1:86:67:6b:63:0b:71:16:90:9c:66:f4:5d:
                    3b:fa:c8:c6:a3:e7:dc:0e:e0:c1:c4:d1:6c:ab:33:
                    c3:c2:8a:6d:61:90:73:5e:97:97:cb:1e:e9:f7:1c:
                    7e:43:2d:ac:eb:db:09:03:ec:ba:eb:ba:11:f0:82:
                    3d:d1:88:7f:52:15:dc:17:14:12:4d:09:d9:68:18:
                    8e:87:7d:ec:b1:8f:55:1c:3c:ee:54:b0:e1:e2:23:
                    77:b1:f1:5a:58:e3:af:f8:af:1c:f3:09:ed:b1:74:
                    0b:04:3a:9e:8c:5e:86:11:fd:76:6a:a7:90:db:18:
                    e8:4c:49:f5:48:f6:1f:9a:81:f7:da:2f:aa:d8:43:
                    65:9d:bf:14:16:ac:1e:99:bf:8a:b2:9f:6d:d4:61:
                    00:57:ed:4d:a2:d0:b5:72:26:94:b2:85:3d:d1:10:
                    4e:3a:d6:35:e2:4a:97:01:04:77:3d:7e:af:24:e5:
                    54:bd:2b:60:e6:de:4a:a4:de:73:46:c9:b3:60:17:
                    1d:1c:86:8b:2c:da:08:c9:7f:15:f2:c6:1a:c5:64:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:27:7E:71:E4:D4:79:BE:0F:32:F6:3A:84:CA:67:51:27:C3:9B:1A
            X509v3 Authority Key Identifier:
                keyid:9D:27:DD:9B:B1:31:EA:CC:88:E3:4E:6D:CC:56:50:B5:FE:44:FF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/34352e3138322e3136382e302f32322d3232203d3e20323639323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:9a:4c:ef:0b:a0:fd:f9:77:5a:3b:d7:24:5d:07:b9:8d:
         83:32:20:b5:63:7f:b7:60:b2:3f:08:5e:86:34:db:15:3d:ec:
         4f:f9:dc:ad:8a:9c:99:4f:56:80:b4:e5:68:d4:60:c6:07:2f:
         f5:13:f8:07:7b:84:ee:44:a1:31:de:b9:47:0a:4a:72:81:fb:
         0f:da:45:87:08:a0:23:cc:19:9f:f3:e9:68:c4:10:4c:79:53:
         ef:32:ea:56:7d:df:54:b7:f5:4a:b3:23:32:09:b2:5d:8a:f7:
         24:1b:65:1f:f0:fa:3c:5c:eb:de:2a:4a:09:26:13:32:03:55:
         be:1c:9b:2f:8c:e5:66:97:5e:c0:a7:17:29:f9:a2:4c:a0:73:
         0e:0e:ac:71:b7:38:83:ee:3a:7b:b0:c1:7c:3d:2b:a8:80:c4:
         1c:32:2c:95:81:83:3d:97:8c:e8:eb:50:f7:79:28:77:c9:fb:
         d1:31:ef:a4:99:ea:62:3f:0d:3b:45:3e:cb:f0:75:5b:29:57:
         3d:f0:17:b6:1b:54:e8:ee:db:01:6b:5d:e3:66:5a:82:50:47:
         00:76:23:05:84:dd:66:a9:8c:f6:d5:05:32:d2:6b:ca:95:3a:
         4e:d9:54:cf:b7:c1:71:7f:2b:3f:6b:b0:e9:fe:0e:d8:25:57:
         35:48:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 04:45:28 2024 by rpki-client on console-ams.rpki-client.org