Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3233332e3232302e302f32322d3232203d3e20323637333431.roa
File:                     34352e3233332e3232302e302f32322d3232203d3e20323637333431.roa (raw, json)
Hash identifier:          Gkt3cac0r4oMwCHlLNIx58xbEPFl6sK58kdHVVazS+4=
Subject key identifier:   71:D9:05:2C:13:0F:92:7F:57:80:41:22:A6:AD:A6:80:66:3A:AE:47
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       0FE3E879952A3C8B0BF2B842DBB27C028E8E664B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3233332e3232302e302f32322d3232203d3e20323637333431.roa
Signing time:             Thu 18 Apr 2024 18:03:36 +0000
ROA not before:           Thu 18 Apr 2024 17:58:36 +0000
ROA not after:            Thu 17 Apr 2025 18:03:36 +0000
asID:                     267341
IP address blocks:        45.233.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 12:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e3:e8:79:95:2a:3c:8b:0b:f2:b8:42:db:b2:7c:02:8e:8e:66:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:58:36 2024 GMT
            Not After : Apr 17 18:03:36 2025 GMT
        Subject: CN=71D9052C130F927F57804122A6ADA680663AAE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:87:84:fb:53:c7:f5:54:02:46:a7:6a:f4:
                    53:e7:f8:23:19:8d:50:04:7e:d9:51:46:b9:f5:f8:
                    f3:17:ae:6d:11:79:48:e8:bc:85:9f:75:79:d7:47:
                    82:b2:97:2a:a0:4a:ea:31:f7:65:ea:92:a7:0f:4f:
                    4c:84:84:ac:e3:7f:99:39:ea:94:90:e5:33:da:8d:
                    44:48:09:bb:96:4d:42:af:d3:d7:3d:bf:aa:4b:a8:
                    d9:e5:aa:b7:04:3c:39:12:a3:8e:73:53:5f:68:1c:
                    e5:a3:bb:65:ea:ec:bb:47:2e:37:9a:5c:0f:77:b8:
                    50:4b:8e:ed:96:c2:9b:3f:c0:fb:e4:0d:19:9b:c7:
                    f8:4e:ca:8f:88:ea:3e:13:df:7e:56:31:82:e5:59:
                    60:d8:57:60:07:65:5c:58:1f:e3:12:96:73:8d:d6:
                    2b:6b:a3:7c:b6:80:65:52:da:38:c9:a4:c3:c3:85:
                    3d:7d:6b:9b:8c:41:bc:42:23:c7:8a:98:5d:13:77:
                    db:45:ae:14:27:73:86:14:02:55:f3:bf:a8:40:df:
                    e8:bc:7e:ea:0a:98:e4:3d:9c:1f:0b:58:4c:38:14:
                    94:8b:0a:41:0c:28:5c:b4:4c:e3:0b:dd:61:eb:08:
                    ee:e2:14:80:8f:1e:e4:ae:d8:3e:43:79:bb:43:4e:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D9:05:2C:13:0F:92:7F:57:80:41:22:A6:AD:A6:80:66:3A:AE:47
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3233332e3232302e302f32322d3232203d3e20323637333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:f0:8c:35:89:53:7f:33:31:ea:76:9f:0d:14:f1:ed:44:a7:
         7a:02:a4:03:ba:ac:38:28:3f:ee:77:d8:fe:5d:a5:f4:02:93:
         59:43:c9:aa:a8:12:cb:39:23:55:3e:c4:a3:3e:02:f7:78:9d:
         14:e2:8a:03:08:16:1a:0a:2d:01:ff:85:61:5d:5b:a7:f7:6c:
         1e:f1:d8:0b:6d:e8:70:66:34:af:f8:dd:89:96:62:fe:b5:1d:
         c4:44:7f:c0:da:09:0a:9f:23:48:55:40:b9:a8:29:f7:31:9c:
         92:d4:79:7a:a5:dc:2a:ee:7d:dc:60:2d:21:f5:a4:ee:22:59:
         71:e5:60:71:bb:d5:76:bc:f0:3b:8f:b3:64:3a:69:0b:c0:2b:
         73:2d:b2:17:d5:3f:7f:82:5c:3f:c8:c0:de:d9:65:de:18:f5:
         33:b2:f3:9c:01:34:0b:ee:ef:f8:46:0b:f2:44:f1:ea:f5:87:
         98:36:c6:1d:7c:2f:f4:f1:4b:0a:b3:b2:42:e6:7e:61:aa:5c:
         77:ab:80:2b:92:ef:d9:a7:2f:69:25:86:6e:0a:cb:8e:3c:c2:
         fc:97:25:8a:06:9e:c7:52:1a:b5:c4:ff:c0:0a:1f:60:37:a9:
         99:26:37:93:1d:73:5e:a8:13:36:71:1c:db:fa:6a:ea:a5:5d:
         3b:19:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org