Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233362e302f32332d3233203d3e20323731373332.roa
File:                     34352e362e3233362e302f32332d3233203d3e20323731373332.roa (raw, json)
Hash identifier:          bWkD4K0FicYz8iDkut9H7kllruBE5hn9k1uasCsypgQ=
Subject key identifier:   55:5A:BE:DE:BB:84:5F:64:A2:44:E7:F5:15:8C:BE:B7:C9:A4:40:C2
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       0295FC1B1FBBA36F3281CD7D122AB9005A423B59
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233362e302f32332d3233203d3e20323731373332.roa
Signing time:             Tue 30 Jul 2024 19:29:33 +0000
ROA not before:           Tue 30 Jul 2024 19:24:33 +0000
ROA not after:            Tue 29 Jul 2025 19:29:33 +0000
asID:                     271732
IP address blocks:        45.6.236.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 13:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:95:fc:1b:1f:bb:a3:6f:32:81:cd:7d:12:2a:b9:00:5a:42:3b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: Jul 30 19:24:33 2024 GMT
            Not After : Jul 29 19:29:33 2025 GMT
        Subject: CN=555ABEDEBB845F64A244E7F5158CBEB7C9A440C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:94:69:c6:b4:a2:f7:df:69:11:a8:02:7d:
                    c0:b3:e8:ba:2e:5b:b5:4d:bd:da:73:34:59:a6:7b:
                    8b:c6:3d:34:71:0e:28:ce:fa:33:e3:cd:d8:3a:ff:
                    b2:f7:45:fa:9e:38:8e:9f:15:0f:7a:19:40:fa:e8:
                    a8:b0:c8:b3:ab:e9:f5:7f:b0:d9:a0:75:34:02:76:
                    e6:8b:e7:64:98:b6:2a:45:d8:0d:a8:41:69:12:dd:
                    19:14:00:6d:ce:34:bf:3e:26:2e:ea:3d:9b:3d:1a:
                    77:27:4c:76:6f:f5:63:87:d4:b6:61:4a:64:c8:fb:
                    d9:74:32:00:a1:63:3d:2a:9c:64:77:e0:5a:12:8b:
                    7f:b8:83:cd:9b:fd:e5:88:cf:97:a5:fc:bc:38:fd:
                    b0:65:38:a8:49:b2:c0:f4:b1:07:ad:40:ff:40:41:
                    90:a2:0d:ed:00:ad:ba:5e:67:a8:10:85:0e:61:9b:
                    89:b7:07:06:8d:8d:5d:f7:8d:3f:a7:27:18:21:ee:
                    92:e5:41:09:84:9e:b1:00:fd:82:7a:25:09:f2:47:
                    26:09:31:aa:87:9e:d8:90:da:ca:b7:db:5a:9c:9b:
                    eb:45:8d:da:c8:31:85:3d:53:65:82:fa:79:02:4a:
                    35:e7:c7:72:34:4d:b2:d3:57:8b:c9:f8:15:5f:42:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5A:BE:DE:BB:84:5F:64:A2:44:E7:F5:15:8C:BE:B7:C9:A4:40:C2
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233362e302f32332d3233203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:6e:74:48:69:56:42:2d:7d:18:06:7b:fd:f5:ab:46:72:
         0b:8a:42:54:de:21:45:15:1d:cd:23:84:13:41:85:ec:ee:23:
         22:55:ac:13:69:7c:2f:ed:0e:8f:40:33:dd:ec:ff:18:db:8c:
         11:9d:46:2b:70:af:e2:69:55:fe:be:f0:6f:82:b7:da:c9:e8:
         92:9e:9f:95:f0:2c:bd:fc:8e:97:54:d5:3b:5d:73:d5:e2:6a:
         f0:06:4b:af:f5:ef:cb:4f:1e:98:a4:97:a6:b8:57:55:8d:33:
         e8:0b:53:4d:2f:4d:a5:40:b1:96:c5:6c:4a:b9:4e:d0:19:27:
         51:a7:65:fb:29:39:25:3d:30:a5:25:b1:0a:4a:e8:07:18:3b:
         6a:06:9d:18:47:aa:0a:92:3d:f8:ed:75:72:be:07:e4:37:6a:
         fa:f3:52:47:00:df:b7:d7:be:e6:77:3b:76:b2:85:11:d2:97:
         bf:73:e5:ce:d9:05:f4:6e:55:85:78:09:90:fa:57:f2:22:13:
         0a:c1:49:c9:5c:66:7e:81:25:98:38:e1:64:47:d0:02:78:62:
         00:ff:ea:02:f9:9e:5b:f7:50:49:b1:dc:fe:27:4a:1d:dc:7d:
         72:07:78:04:3a:74:2b:de:e9:d6:f1:0a:1c:91:0e:1b:17:e9:
         04:a4:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 16:56:12 2024 by rpki-client on console-ams.rpki-client.org