Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3232203d3e20323636393634.roa
File:                     34352e3232352e3233322e302f32322d3232203d3e20323636393634.roa (raw, json)
Hash identifier:          //Ba1FCWc/RnOeYXTNQRIzWpjFGl52zDekQMNGT2QV8=
Subject key identifier:   22:D6:6F:FE:A8:E2:9B:86:3C:2C:E7:6B:39:79:4D:F5:31:DF:0B:71
Certificate issuer:       /CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
Certificate serial:       6DFEECAA41DEE1734B331743852361FCD65AF36D
Authority key identifier: 1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3232203d3e20323636393634.roa
Signing time:             Thu 04 Apr 2024 12:33:05 +0000
ROA not before:           Thu 04 Apr 2024 12:28:05 +0000
ROA not after:            Thu 03 Apr 2025 12:33:05 +0000
asID:                     266964
IP address blocks:        45.225.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 18:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fe:ec:aa:41:de:e1:73:4b:33:17:43:85:23:61:fc:d6:5a:f3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
        Validity
            Not Before: Apr  4 12:28:05 2024 GMT
            Not After : Apr  3 12:33:05 2025 GMT
        Subject: CN=22D66FFEA8E29B863C2CE76B39794DF531DF0B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:07:d4:a3:82:a2:66:b0:c4:12:79:47:66:
                    39:e4:9f:09:44:e5:26:49:78:66:3f:12:fa:c2:dc:
                    87:a7:0e:1e:16:c8:5d:ea:3e:10:2b:25:0e:57:73:
                    7a:8b:85:26:04:49:f2:00:1b:73:87:9c:80:39:97:
                    4e:31:3a:d1:d0:c6:2c:cf:7b:a3:6d:5b:cb:69:55:
                    07:09:f4:69:ec:9a:29:08:b9:38:b3:69:f3:d9:09:
                    b8:74:d3:fc:ae:55:8e:57:eb:0d:e5:4e:e5:20:77:
                    06:9a:47:73:5c:f2:64:1e:a8:37:4e:7d:2c:80:6a:
                    a4:a3:ef:1d:bd:9b:dd:eb:3e:c0:4b:dc:75:2b:86:
                    9b:5a:77:73:f1:b2:e5:30:2b:8d:d2:d8:88:47:42:
                    a7:0c:97:b1:8c:5d:dd:c2:5e:e7:b9:e8:31:91:08:
                    ba:6a:e1:1a:29:ab:e9:0b:09:ae:a0:a4:a6:fd:bc:
                    bc:75:38:81:90:85:c9:12:1d:c8:f5:34:e9:1f:78:
                    00:ac:4d:e4:c5:59:73:61:30:0a:cd:12:df:bf:67:
                    f6:14:7c:5f:3d:43:c9:c1:3e:03:e0:63:b5:ae:a5:
                    8c:23:32:a1:82:41:d9:df:03:6c:4b:4f:21:d6:b7:
                    35:15:b1:38:e8:e5:37:d3:7e:00:58:1a:3a:28:c6:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D6:6F:FE:A8:E2:9B:86:3C:2C:E7:6B:39:79:4D:F5:31:DF:0B:71
            X509v3 Authority Key Identifier:
                keyid:1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3232203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:63:bc:c3:c2:4c:73:50:b3:cb:67:02:50:94:02:fb:b1:55:
         e4:02:cf:68:78:ec:78:98:76:ec:90:e9:a6:30:d9:2e:5c:52:
         5b:48:3a:15:ec:e7:84:3d:ff:f2:e8:b1:78:ba:2d:20:68:96:
         b3:9d:4b:fe:d8:52:31:64:38:eb:46:9d:f4:10:6b:a8:7e:16:
         20:9f:11:a4:30:49:ac:7a:d7:54:68:db:b8:70:cf:eb:08:b5:
         26:40:53:3e:a1:80:23:2d:d4:0a:26:5e:0e:39:9d:ee:74:ea:
         c0:5b:d8:8a:7c:ea:64:22:5c:e0:08:bd:1c:ea:3a:1f:c4:46:
         49:ed:87:0a:fd:9b:d4:16:69:31:75:29:e5:01:58:9e:15:82:
         ed:85:2b:cc:28:cf:15:1d:37:29:21:2e:92:9c:0d:0d:83:95:
         9b:7b:ae:ed:39:fd:de:aa:4c:df:77:fe:ec:06:a6:01:17:8b:
         0a:71:8f:7b:1b:79:21:8e:1c:df:4d:32:37:33:89:41:6a:e5:
         07:c5:64:ca:12:10:fd:99:b2:31:43:eb:4d:41:23:21:9b:b2:
         3b:1f:e9:b8:99:bd:7a:52:b8:0d:e7:74:de:80:d8:55:84:6c:
         7b:e8:b0:72:83:79:23:19:45:0c:73:05:d2:99:c5:e3:7d:cb:
         39:cd:6c:64
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbf7sqkHe4XNLMxdDhSNh/NZa820wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM3MzIzOEVGNDhDNkNGNkJDRTBDOUQ3NUIzMzg3RkVE
QUEwNzVDNTAeFw0yNDA0MDQxMjI4MDVaFw0yNTA0MDMxMjMzMDVaMDMxMTAvBgNV
BAMTKDIyRDY2RkZFQThFMjlCODYzQzJDRTc2QjM5Nzk0REY1MzFERjBCNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQAfUo4KiZrDEEnlHZjnknwlE
5SZJeGY/EvrC3IenDh4WyF3qPhArJQ5Xc3qLhSYESfIAG3OHnIA5l04xOtHQxizP
e6NtW8tpVQcJ9GnsmikIuTizafPZCbh00/yuVY5X6w3lTuUgdwaaR3Nc8mQeqDdO
fSyAaqSj7x29m93rPsBL3HUrhptad3PxsuUwK43S2IhHQqcMl7GMXd3CXue56DGR
CLpq4Ropq+kLCa6gpKb9vLx1OIGQhckSHcj1NOkfeACsTeTFWXNhMArNEt+/Z/YU
fF89Q8nBPgPgY7WupYwjMqGCQdnfA2xLTyHWtzUVsTjo5TfTfgBYGjooxm7zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUItZv/qjim4Y8LOdrOXlN9THfC3EwHwYDVR0j
BBgwFoAUHHMjjvSMbPa84MnXWzOH/tqgdcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWl5bXRUTUYyblNGV1FOMnJtNXNtQ1Axd3YyQXpiS0dWdTFoeVphaVBT
REEvMS8xQzczMjM4RUY0OEM2Q0Y2QkNFMEM5RDc1QjMzODdGRURBQTA3NUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNzMyMzhFRjQ4QzZDRjZC
Q0UwQzlENzVCMzM4N0ZFREFBMDc1QzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpeW10VE1GMm5TRldRTjJybTVzbUNQMXd2MkF6YktHVnUxaHlaYWlQU0RBLzEv
MzQzNTJlMzIzMjM1MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzOTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4egwDQYJKoZIhvcNAQELBQADggEBAIFjvMPC
THNQs8tnAlCUAvuxVeQCz2h47HiYduyQ6aYw2S5cUltIOhXs54Q9//LosXi6LSBo
lrOdS/7YUjFkOOtGnfQQa6h+FiCfEaQwSax611Ro27hwz+sItSZAUz6hgCMt1Aom
Xg45ne506sBb2Ip86mQiXOAIvRzqOh/ERknthwr9m9QWaTF1KeUBWJ4Vgu2FK8wo
zxUdNykhLpKcDQ2DlZt7ru05/d6qTN93/uwGpgEXiwpxj3sbeSGOHN9NMjcziUFq
5QfFZMoSEP2ZsjFD601BIyGbsjsf6biZvXpSuA3ndN6A2FWEbHvosHKDeSMZRQxz
BdKZxeN9yznNbGQ=
-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:30 2024 by rpki-client on console-fra.rpki-client.org