Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/34352e3138322e3137302e302f32332d3233203d3e20323639323734.roa
File:                     34352e3138322e3137302e302f32332d3233203d3e20323639323734.roa (raw, json)
Hash identifier:          QoR4Jb2D++OnBtBCaGqvMsXJ+vjOz8HaJrgDF23n6vc=
Subject key identifier:   F2:45:39:9D:41:41:8C:AE:C0:F7:3D:66:C9:A3:2F:7E:9E:1F:D8:04
Certificate issuer:       /CN=9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70
Certificate serial:       7456D0129D80216203FF932E3F6AFDFAAC021E88
Authority key identifier: 9D:27:DD:9B:B1:31:EA:CC:88:E3:4E:6D:CC:56:50:B5:FE:44:FF:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/34352e3138322e3137302e302f32332d3233203d3e20323639323734.roa
Signing time:             Thu 27 Jun 2024 03:00:41 +0000
ROA not before:           Thu 27 Jun 2024 02:55:41 +0000
ROA not after:            Thu 26 Jun 2025 03:00:41 +0000
asID:                     269274
IP address blocks:        45.182.170.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 03:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:56:d0:12:9d:80:21:62:03:ff:93:2e:3f:6a:fd:fa:ac:02:1e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70
        Validity
            Not Before: Jun 27 02:55:41 2024 GMT
            Not After : Jun 26 03:00:41 2025 GMT
        Subject: CN=F245399D41418CAEC0F73D66C9A32F7E9E1FD804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:f1:d9:af:fb:81:60:d8:ab:e2:dd:88:10:
                    70:79:7c:76:d6:2d:a1:70:40:0e:3d:e6:0f:fc:0d:
                    ee:58:55:1b:29:10:d9:9f:13:f2:7c:2c:c6:f7:6f:
                    af:94:dc:27:90:98:4b:25:9b:9f:63:6a:8c:92:11:
                    9d:37:af:df:4c:12:a7:c0:58:7a:e0:98:46:65:5e:
                    b7:bd:4c:f9:32:b6:7c:d3:51:6e:43:d0:d5:3b:31:
                    9d:e7:fb:11:50:11:56:75:52:1e:88:b4:93:2b:f4:
                    ee:02:b9:02:8a:02:92:e1:e4:45:fe:b7:6a:9b:bd:
                    33:42:da:d3:e5:7a:e6:5e:67:7d:27:68:a8:1b:94:
                    1f:92:53:67:5f:dd:54:45:9a:17:65:ca:10:1e:2f:
                    c0:91:00:02:80:66:e1:fc:47:38:8e:d5:a9:7e:bf:
                    b8:53:fd:5f:59:7a:41:fc:7e:c6:44:1d:a0:f7:33:
                    54:55:cb:fd:e9:56:9f:31:43:cc:27:b1:6d:71:07:
                    cf:48:32:96:d1:fe:b6:40:82:f0:9f:fe:58:7f:77:
                    b8:1f:fe:10:c1:31:09:c7:e1:1a:57:4c:76:96:e2:
                    70:e8:4e:c2:7d:a1:2b:2e:23:df:05:02:14:54:bd:
                    77:12:24:12:44:92:e9:6d:d3:29:c0:ae:da:71:4e:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:45:39:9D:41:41:8C:AE:C0:F7:3D:66:C9:A3:2F:7E:9E:1F:D8:04
            X509v3 Authority Key Identifier:
                keyid:9D:27:DD:9B:B1:31:EA:CC:88:E3:4E:6D:CC:56:50:B5:FE:44:FF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/34352e3138322e3137302e302f32332d3233203d3e20323639323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:a0:ea:f4:18:e2:f0:4b:7c:f7:6a:7b:f5:ad:f8:cd:d6:aa:
         26:03:3a:75:5a:a5:ac:9f:6e:9d:11:c0:86:0c:b5:4d:ad:c6:
         00:89:d3:a2:43:4e:61:ca:82:ea:ad:7a:42:a4:ff:fa:89:45:
         23:1e:2b:d4:29:af:1c:c4:ef:79:f1:46:82:7e:a4:29:21:88:
         7a:f9:46:70:8d:52:5c:43:bd:a7:5d:56:15:11:c8:27:7d:a9:
         fb:05:30:ec:bc:71:cf:b6:5a:28:d1:a2:96:41:2e:93:7f:2d:
         ea:01:4b:b3:a9:e2:1c:06:53:25:16:b2:58:b1:bb:75:07:7d:
         19:86:b5:63:ef:8f:2f:be:bd:19:89:30:65:20:fc:60:d9:f4:
         e4:22:d7:19:6f:8b:2f:02:35:a4:4f:d2:4e:b0:2c:2a:14:0f:
         40:7e:7f:93:7b:e3:f8:ee:9d:e5:93:db:05:cc:a3:65:0a:a9:
         02:cc:78:b8:6f:ea:fb:6e:13:70:d1:41:d2:62:77:42:bf:65:
         6e:5d:5e:02:10:53:76:ef:58:cd:39:6a:cc:82:8a:e2:3f:e2:
         f4:12:ef:a1:46:6e:dd:60:03:3a:e7:57:18:0f:5d:6b:36:cf:
         5f:7f:70:1d:43:bc:7b:5c:1b:9f:86:09:b7:64:a3:2f:87:79:
         86:0e:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 04:52:19 2024 by rpki-client on console-fra.rpki-client.org