Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3233332e3232302e302f32322d3232203d3e20323733333039.roa
File:                     34352e3233332e3232302e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          EctB4BsG0FkEhmc3pNdHpcZpu6UTAnXN79XPzpKqSis=
Subject key identifier:   B7:ED:FE:D1:2F:0D:EF:FB:33:FD:8E:E0:E4:16:29:CE:2B:1F:46:2C
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       59BBAE55B3D087A4A17F2B98D6C7D0EDCEDC622B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3233332e3232302e302f32322d3232203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 12:08:52 +0000
ROA not before:           Thu 09 May 2024 12:03:52 +0000
ROA not after:            Thu 08 May 2025 12:08:52 +0000
asID:                     273309
IP address blocks:        45.233.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bb:ae:55:b3:d0:87:a4:a1:7f:2b:98:d6:c7:d0:ed:ce:dc:62:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 12:03:52 2024 GMT
            Not After : May  8 12:08:52 2025 GMT
        Subject: CN=B7EDFED12F0DEFFB33FD8EE0E41629CE2B1F462C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:a3:fc:83:e8:6c:9b:cc:29:70:76:cf:9c:
                    71:1b:ed:3a:62:63:32:9e:7b:aa:4b:49:89:8d:64:
                    83:56:be:36:77:0e:d4:c7:14:fb:65:fb:32:64:c8:
                    ed:ea:1e:26:af:4e:76:c2:61:e1:85:55:e2:4c:2a:
                    08:ec:e8:fd:97:89:dd:50:65:e3:e8:76:01:f4:aa:
                    14:80:fa:04:35:91:38:23:ed:19:c7:d1:c4:33:00:
                    33:9a:75:3b:55:37:d9:20:d8:e0:d4:aa:b2:63:16:
                    6d:20:ba:9f:e2:34:0a:41:35:a0:33:57:a1:21:7b:
                    67:65:cd:a0:31:13:9a:23:36:38:b0:c4:ac:fa:b8:
                    7a:90:69:c3:bc:3e:d4:e4:9b:cb:2b:ea:a7:17:8e:
                    63:ac:8b:b8:e9:1a:24:6c:f0:f5:f0:44:9b:da:51:
                    41:c6:f0:11:01:4d:e3:f7:70:2d:0a:16:63:e0:a6:
                    a8:04:40:ef:43:0d:cc:a7:bd:42:ae:d7:13:90:2a:
                    7a:1a:d5:01:93:93:4c:d7:0e:77:3f:0f:4b:53:ff:
                    02:90:da:ea:3c:14:df:87:90:5d:64:7a:8f:b4:5d:
                    26:3c:4b:a3:a2:0e:15:81:21:2a:6d:af:5f:dc:5b:
                    74:ae:b4:2a:8b:9b:60:c9:09:e0:49:20:11:5d:47:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:FE:D1:2F:0D:EF:FB:33:FD:8E:E0:E4:16:29:CE:2B:1F:46:2C
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3233332e3232302e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:44:e8:3e:65:dc:3d:8d:63:b2:66:7c:0e:a0:00:ca:97:e0:
         b1:01:d0:d6:9b:f2:88:48:da:63:8e:29:ca:22:bf:b4:e8:06:
         41:01:d2:1d:5f:c1:41:39:86:00:fc:08:88:a2:53:ce:d1:03:
         be:a2:d8:04:cc:94:da:18:a4:ff:74:8f:c2:ee:e8:35:da:a9:
         8e:55:c1:5b:8b:4e:49:82:24:21:bc:08:db:ac:22:36:c5:ac:
         26:01:b2:17:21:a8:04:d0:ed:15:30:a8:e2:fc:02:b5:34:00:
         0f:3d:fb:da:4c:74:95:47:23:c0:59:16:07:11:72:06:1a:e2:
         8c:f0:a4:5f:76:4c:2d:4c:eb:ea:11:52:f6:8f:97:50:1e:97:
         18:82:5f:ee:b5:e0:8a:59:e0:de:ac:6f:81:fa:d9:48:85:2e:
         b2:c6:50:cd:82:ea:ca:41:76:62:52:24:40:81:2c:b8:6a:67:
         69:51:ad:8c:9e:9b:c0:c5:46:03:90:58:de:fc:8d:40:33:f6:
         78:eb:8e:9d:75:74:fb:87:02:39:02:18:b0:b7:ce:70:d4:c7:
         0f:01:58:48:bb:aa:a6:74:b1:79:d0:6f:fd:91:2c:50:15:f7:
         27:36:af:a4:2f:c1:d9:d9:01:56:39:38:39:b9:4f:68:98:54:
         83:4a:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org