Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233382e302f32332d3233203d3e20323731373332.roa
File:                     34352e362e3233382e302f32332d3233203d3e20323731373332.roa (raw, json)
Hash identifier:          HC5Ji5edF49Lix4D+3oJ67g2HpFtc761AutEbK0bXrc=
Subject key identifier:   72:03:BE:B3:C7:9C:1D:C1:2F:47:56:B6:DF:BD:66:3C:D5:E6:84:FD
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       2302D372772F10844895F0EBD59F4E3400450ED7
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233382e302f32332d3233203d3e20323731373332.roa
Signing time:             Wed 31 Jul 2024 11:39:24 +0000
ROA not before:           Wed 31 Jul 2024 11:34:24 +0000
ROA not after:            Wed 30 Jul 2025 11:39:24 +0000
asID:                     271732
IP address blocks:        45.6.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 13:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:02:d3:72:77:2f:10:84:48:95:f0:eb:d5:9f:4e:34:00:45:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: Jul 31 11:34:24 2024 GMT
            Not After : Jul 30 11:39:24 2025 GMT
        Subject: CN=7203BEB3C79C1DC12F4756B6DFBD663CD5E684FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:00:d2:8e:ce:26:a4:62:6a:64:08:4c:6f:
                    6b:a5:09:ee:d4:82:48:cd:58:25:85:6d:85:e3:4f:
                    9e:0f:7a:77:f5:e0:bf:12:62:14:4a:ef:1c:7c:32:
                    65:dd:74:34:16:47:4b:4f:c7:6d:54:51:40:b8:75:
                    cc:a3:7e:08:6b:22:7e:ef:87:30:c8:0d:78:75:82:
                    e1:aa:9b:08:cf:be:c9:2c:2a:69:bf:20:80:55:a5:
                    2c:01:0b:87:e5:ae:bd:36:a1:f5:5c:bb:f5:a0:61:
                    ae:e8:10:5f:79:d4:4d:2d:60:e6:a3:7d:69:b5:a1:
                    4d:8d:dc:78:65:2b:7e:3d:0a:4e:16:b8:c0:06:ba:
                    a1:53:81:b5:7d:5a:f0:8e:71:ea:85:ef:81:e9:23:
                    a3:d0:29:fc:23:8f:59:d1:6c:fa:ee:59:e5:07:c9:
                    0a:61:de:c2:7a:95:ab:e5:50:00:e5:c8:ca:cb:90:
                    e1:d7:ea:f0:36:a1:0b:63:72:91:ea:d7:52:1f:6c:
                    cb:39:f6:d6:f9:58:14:1f:98:94:6f:89:fd:14:ce:
                    6b:ee:32:1e:5e:48:3a:c4:62:e5:f3:5e:4e:3d:02:
                    4a:bc:5f:5c:8a:55:6b:29:87:11:3b:3e:8f:a4:29:
                    f8:2a:56:34:4f:8c:ce:4f:c9:6f:c8:03:67:4d:da:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:03:BE:B3:C7:9C:1D:C1:2F:47:56:B6:DF:BD:66:3C:D5:E6:84:FD
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233382e302f32332d3233203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:07:b7:4b:da:94:2c:7d:48:6b:c8:3f:4e:b2:2b:19:34:
         96:73:0f:62:7c:95:9e:7e:f7:a6:5b:c1:83:8a:e4:62:15:e8:
         73:f1:c9:56:9c:be:85:2b:49:11:7d:01:bc:7b:85:ef:c6:a9:
         f8:65:d3:61:a3:f5:d4:06:91:1c:09:69:ec:2e:c5:54:ca:9d:
         1d:59:49:eb:f8:03:42:28:6a:f5:92:9d:a2:d4:f9:89:54:94:
         70:af:89:a3:bb:66:a6:58:34:11:f1:15:8e:32:9e:ba:cf:e9:
         cb:d0:ba:98:3d:4f:49:45:37:79:31:68:e2:a9:5d:cb:0e:05:
         b2:66:d2:15:25:b4:0d:eb:1c:c4:bc:e1:b6:f7:c7:b8:fc:f8:
         98:69:37:36:91:c4:b8:b1:78:df:02:eb:c4:02:52:7f:a4:d9:
         80:a5:40:fb:76:7d:03:f6:53:e2:c9:c0:ec:99:1f:06:6f:a1:
         a0:55:19:1a:84:37:ba:a5:68:bc:d1:d3:80:c9:99:a1:10:d5:
         f6:0b:38:b9:48:ed:67:18:78:03:98:1c:17:b9:f4:44:8c:82:
         67:8f:68:94:93:a3:0d:5d:00:30:a3:1f:2f:7c:86:b5:d7:8c:
         22:68:50:28:d3:b9:41:b9:d2:13:62:3a:f8:2c:54:62:20:b9:
         f8:47:8c:0f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIwLTcncvEIRIlfDr1Z9ONABFDtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ1NkM0OTMyQTU5RTEwMTdBNTQ3NzNENTZFQzgzMzhF
M0IyQzhCNzAeFw0yNDA3MzExMTM0MjRaFw0yNTA3MzAxMTM5MjRaMDMxMTAvBgNV
BAMTKDcyMDNCRUIzQzc5QzFEQzEyRjQ3NTZCNkRGQkQ2NjNDRDVFNjg0RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zgDSjs4mpGJqZAhMb2ulCe7U
gkjNWCWFbYXjT54Penf14L8SYhRK7xx8MmXddDQWR0tPx21UUUC4dcyjfghrIn7v
hzDIDXh1guGqmwjPvsksKmm/IIBVpSwBC4flrr02ofVcu/WgYa7oEF951E0tYOaj
fWm1oU2N3HhlK349Ck4WuMAGuqFTgbV9WvCOceqF74HpI6PQKfwjj1nRbPruWeUH
yQph3sJ6lavlUADlyMrLkOHX6vA2oQtjcpHq11IfbMs59tb5WBQfmJRvif0Uzmvu
Mh5eSDrEYuXzXk49Akq8X1yKVWsphxE7Po+kKfgqVjRPjM5PyW/IA2dN2urLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcgO+s8ecHcEvR1a2371mPNXmhP0wHwYDVR0j
BBgwFoAUDVbEkypZ4QF6VHc9VuyDOOOyyLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRllrRmZ0Y1R4c0NoTWlZOW5zSFREY0F5eG1yS1VrbmU1aXo3MzhzeTJ0
UmEvMC8wRDU2QzQ5MzJBNTlFMTAxN0E1NDc3M0Q1NkVDODMzOEUzQjJDOEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENTZDNDkzMkE1OUUxMDE3
QTU0NzczRDU2RUM4MzM4RTNCMkM4QjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZZa0ZmdGNUeHNDaE1pWTluc0hURGNBeXhtcktVa25lNWl6NzM4c3kydFJhLzAv
MzQzNTJlMzYyZTMyMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMTM3
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0G7jANBgkqhkiG9w0BAQsFAAOCAQEAPRgHt0valCx9
SGvIP06yKxk0lnMPYnyVnn73plvBg4rkYhXoc/HJVpy+hStJEX0BvHuF78ap+GXT
YaP11AaRHAlp7C7FVMqdHVlJ6/gDQihq9ZKdotT5iVSUcK+Jo7tmplg0EfEVjjKe
us/py9C6mD1PSUU3eTFo4qldyw4FsmbSFSW0DescxLzhtvfHuPz4mGk3NpHEuLF4
3wLrxAJSf6TZgKVA+3Z9A/ZT4snA7JkfBm+hoFUZGoQ3uqVovNHTgMmZoRDV9gs4
uUjtZxh4A5gcF7n0RIyCZ49olJOjDV0AMKMfL3yGtdeMImhQKNO5QbnSE2I6+CxU
YiC5+EeMDw==
-----END CERTIFICATE-----
Generated at Wed Jul 31 16:48:18 2024 by rpki-client on console-fra.rpki-client.org