Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232302e302f32322d3332203d3e20323638383239.roa
File:                     34352e3137332e3232302e302f32322d3332203d3e20323638383239.roa (raw, json)
Hash identifier:          j1sGfhq8yUV5H9RjLubXHqzl0/Ys/u7q6ma8vdrbNUs=
Subject key identifier:   24:1D:14:E9:2A:F6:09:5A:41:C6:A2:BC:32:75:77:23:7C:9E:76:97
Certificate issuer:       /CN=39E85F0FE1363D1C06C587486EEDD5B362BE6AF8
Certificate serial:       11FA39363CB91E5539F3C47B9C05D161E5FF9C65
Authority key identifier: 39:E8:5F:0F:E1:36:3D:1C:06:C5:87:48:6E:ED:D5:B3:62:BE:6A:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232302e302f32322d3332203d3e20323638383239.roa
Signing time:             Thu 16 May 2024 14:49:12 +0000
ROA not before:           Thu 16 May 2024 14:44:12 +0000
ROA not after:            Thu 15 May 2025 14:49:12 +0000
asID:                     268829
IP address blocks:        45.173.220.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Thu 23 May 2024 13:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fa:39:36:3c:b9:1e:55:39:f3:c4:7b:9c:05:d1:61:e5:ff:9c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E85F0FE1363D1C06C587486EEDD5B362BE6AF8
        Validity
            Not Before: May 16 14:44:12 2024 GMT
            Not After : May 15 14:49:12 2025 GMT
        Subject: CN=241D14E92AF6095A41C6A2BC327577237C9E7697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:ff:95:15:57:8f:ed:ab:ec:c5:e0:d8:da:
                    87:14:25:e9:bb:0e:26:02:b7:59:b9:81:be:7d:ed:
                    9d:64:f7:4a:19:47:ed:09:82:55:2f:4e:7e:bd:a9:
                    12:63:a2:d5:df:86:52:d9:0c:c4:5c:ff:68:bc:6e:
                    dc:31:1c:08:2a:47:8d:90:91:7d:45:5b:a2:93:93:
                    3f:e5:a9:07:a7:e6:b0:6b:17:c5:58:bf:cc:49:35:
                    f8:56:2d:31:31:91:9f:f6:32:48:e8:cd:d8:2d:fc:
                    d4:e8:53:45:30:db:70:05:76:dc:d4:6d:07:cd:84:
                    7b:fa:8b:66:f7:7b:4e:ad:aa:49:0c:b2:75:b1:63:
                    95:29:c6:82:f9:3f:83:af:70:62:68:ab:2d:df:49:
                    15:72:fb:5a:8d:2b:37:80:fd:37:33:ac:60:7d:06:
                    8d:d5:f9:29:bb:42:28:d3:aa:6b:a0:c3:18:84:97:
                    c6:5b:ff:7b:a9:59:2c:c6:52:e7:63:f0:11:eb:df:
                    ad:0e:13:84:2a:aa:91:06:aa:09:2a:41:b5:a0:21:
                    fd:08:bf:62:e4:4c:46:8d:cc:e4:7c:dd:4a:7d:c6:
                    9b:05:ed:ee:ea:ea:df:87:da:e4:54:e3:fa:ac:e3:
                    d2:80:c9:b7:6c:90:a9:e2:49:79:00:1d:90:3b:9a:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1D:14:E9:2A:F6:09:5A:41:C6:A2:BC:32:75:77:23:7C:9E:76:97
            X509v3 Authority Key Identifier:
                keyid:39:E8:5F:0F:E1:36:3D:1C:06:C5:87:48:6E:ED:D5:B3:62:BE:6A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232302e302f32322d3332203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:e2:48:92:71:a6:9d:ad:5b:8b:f2:25:50:f4:6e:84:ea:00:
         e4:7a:a7:78:cb:7c:ff:6c:51:72:c5:5a:75:f0:8d:2e:fd:aa:
         f5:c0:f9:cd:24:18:c0:a4:ee:3c:9b:e4:5b:7e:aa:71:65:18:
         c1:38:58:f6:50:3b:db:93:06:e9:3c:20:68:6a:cd:d5:5f:9c:
         84:ef:27:c3:8f:c7:0d:5f:6d:c7:af:d1:9f:b8:71:5b:09:be:
         ea:7d:e8:52:4d:4d:9d:96:57:cf:a0:22:89:c7:97:30:89:ba:
         86:72:35:0e:3d:ee:8e:08:7d:91:f2:8f:21:01:e7:dc:b0:83:
         33:2d:01:3e:0f:a9:67:fe:b8:c0:11:73:45:f0:27:94:50:93:
         cb:b0:d3:2b:48:9a:21:d1:c5:da:51:88:86:bf:b9:70:81:af:
         b1:50:ce:d9:df:54:87:e6:3b:a0:ff:8e:9e:d7:9e:66:05:68:
         48:51:7d:fa:76:a6:38:e6:29:c9:16:b4:5c:77:bc:2b:a9:52:
         74:c5:2c:f6:8d:5b:8f:95:0f:2b:76:eb:b3:46:87:81:2b:88:
         ec:93:6a:05:c8:02:22:dc:bc:87:35:82:82:1f:fa:c1:d1:c0:
         fe:33:a9:ff:48:dd:35:80:01:e7:f3:d6:f0:b4:ea:21:31:af:
         02:14:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org