Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32322d3232203d3e20323733333039.roa
File:                     34352e3232372e38342e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          mcGPkZ4GSpoyE08/E1LrKDJU0SrsIyr2x+luC2w9dVU=
Subject key identifier:   F7:FE:F3:90:B4:62:39:49:23:21:22:17:41:EB:B0:1F:86:D3:3B:C0
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       76B2227B1045EC6F4C9C1B0F25278220D18C6A50
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32322d3232203d3e20323733333039.roa
Signing time:             Thu 18 Apr 2024 18:04:31 +0000
ROA not before:           Thu 18 Apr 2024 17:59:31 +0000
ROA not after:            Thu 17 Apr 2025 18:04:31 +0000
asID:                     273309
IP address blocks:        45.227.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b2:22:7b:10:45:ec:6f:4c:9c:1b:0f:25:27:82:20:d1:8c:6a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:59:31 2024 GMT
            Not After : Apr 17 18:04:31 2025 GMT
        Subject: CN=F7FEF390B46239492321221741EBB01F86D33BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:8c:7b:34:f7:f9:5c:59:70:8e:98:05:8d:
                    a0:0a:71:fd:94:9d:ba:ec:8a:14:6d:b9:6c:8f:63:
                    42:9b:1a:97:51:9c:c4:f1:fd:f4:a9:9c:9c:d4:a3:
                    8c:c1:74:2f:36:5d:8c:26:80:0a:31:ec:e8:02:11:
                    a2:ff:58:ad:21:41:03:b4:2b:be:1f:7a:88:5a:23:
                    e0:d5:68:a7:59:95:8b:5f:33:c1:80:56:9f:63:9f:
                    42:68:3e:33:f4:16:47:66:41:3f:ff:81:3d:6c:21:
                    97:06:8a:65:89:8c:5c:23:b8:09:d4:20:cd:22:c5:
                    62:96:a9:c8:57:31:7c:7f:12:1c:d4:a9:1e:05:f9:
                    17:7a:b1:1b:1a:64:d6:c9:f4:04:2b:10:e1:32:ea:
                    0c:36:3b:48:be:fa:bb:24:65:ff:ea:68:18:fb:05:
                    78:4f:06:9b:79:13:32:15:f1:b4:46:6a:4e:0b:50:
                    9c:1e:f2:cf:b0:83:88:17:e3:0d:95:31:16:ac:43:
                    51:d4:cb:6e:eb:bf:69:c1:a2:94:20:c8:45:4a:9d:
                    ed:d4:33:99:78:0f:e6:c1:e3:63:4f:84:c3:1f:73:
                    6b:9a:c1:56:1f:41:42:4e:e9:04:1f:52:03:8e:3f:
                    2f:83:a6:ea:ee:54:ed:68:52:1f:cf:e6:a7:60:51:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FE:F3:90:B4:62:39:49:23:21:22:17:41:EB:B0:1F:86:D3:3B:C0
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:ab:2b:b4:eb:9c:bc:2f:03:4c:fa:90:4c:62:ce:c8:ce:5d:
         b7:b4:3b:00:69:f0:e9:8e:76:80:e5:a4:c2:72:c6:44:66:b1:
         5b:8a:24:6c:47:a3:20:35:c7:2a:e2:0e:9c:d4:24:a2:ad:84:
         5c:ee:a2:c4:58:cf:f3:59:5f:83:04:c4:38:c9:01:bf:61:e5:
         6c:6b:55:90:9b:66:d2:48:57:41:88:3d:3a:34:cf:16:82:92:
         66:66:05:eb:ab:67:a9:a8:3e:18:a2:13:50:3c:bd:d2:7b:f3:
         8e:fc:b9:92:f6:9c:78:d4:7e:c1:5e:79:f6:5c:e9:ee:15:13:
         76:1c:3f:76:dc:d4:71:ba:6e:2e:5b:1a:98:a1:68:d4:b4:d0:
         2e:42:39:cd:61:d5:89:88:5c:ef:c9:e9:81:11:ac:e6:4f:1b:
         ed:da:90:c7:33:32:44:42:5a:3d:39:68:94:47:c0:89:19:b1:
         43:4a:13:20:f9:3f:c1:27:dc:79:08:9b:6e:19:cd:af:a6:c0:
         35:07:86:41:00:bc:ce:2d:e0:61:aa:71:a1:a3:98:42:b7:66:
         63:b0:3f:2f:c1:a8:55:a7:3e:bd:5d:35:5f:22:4b:df:a9:b7:
         51:54:12:08:34:12:64:af:3f:87:20:eb:0d:9d:1e:de:f4:12:
         8f:ed:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org