Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233382e302f32342d3234203d3e20323731373332.roa
File:                     34352e362e3233382e302f32342d3234203d3e20323731373332.roa (raw, json)
Hash identifier:          i+lBVvsa5Wdk9ATxiPzkw4ckO0RwmpdqW0S1PWZTHb4=
Subject key identifier:   AE:21:5E:C3:07:90:C4:12:58:5A:6F:D9:63:A6:3A:C1:03:42:D9:33
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       5D47D251153E02FB3AD70EB1C6BE153C8640604C
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233382e302f32342d3234203d3e20323731373332.roa
Signing time:             Wed 31 Jul 2024 11:39:28 +0000
ROA not before:           Wed 31 Jul 2024 11:34:28 +0000
ROA not after:            Wed 30 Jul 2025 11:39:28 +0000
asID:                     271732
IP address blocks:        45.6.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 13:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:47:d2:51:15:3e:02:fb:3a:d7:0e:b1:c6:be:15:3c:86:40:60:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: Jul 31 11:34:28 2024 GMT
            Not After : Jul 30 11:39:28 2025 GMT
        Subject: CN=AE215EC30790C412585A6FD963A63AC10342D933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:d6:b4:39:e2:9f:01:2c:78:1e:23:17:82:
                    e6:d6:da:c1:6e:cb:9f:e8:d6:dd:e7:3b:7a:16:cd:
                    0c:80:8c:79:b3:40:f0:e4:d8:e4:6e:a1:83:bb:c5:
                    a8:82:a4:ac:e0:0b:e9:db:69:b7:ec:60:62:0f:38:
                    fe:e3:80:09:e3:e8:4f:24:1c:c2:e3:99:f4:51:c4:
                    16:32:67:02:ae:02:86:9f:a9:ef:9e:15:f5:2e:f7:
                    ff:58:11:de:00:07:79:8e:d6:4d:04:cb:90:2f:e4:
                    0a:03:79:2a:14:c1:6e:04:72:88:aa:8a:26:b0:e1:
                    11:1e:c1:c2:27:9f:7f:21:d2:de:b3:e3:44:9d:03:
                    f1:3a:c6:c9:41:06:44:1e:29:5b:04:77:3e:69:18:
                    a5:88:48:c4:8a:8e:49:98:0d:d6:fe:09:85:61:02:
                    4c:56:64:8a:97:ab:1e:c3:18:9f:3d:22:2e:df:40:
                    3b:ce:65:e5:03:ca:48:2a:f2:13:c9:ed:ff:15:ec:
                    dd:80:39:86:e6:4d:0c:7a:01:46:42:2d:e1:da:2a:
                    75:69:13:97:e0:e5:db:10:9b:3b:87:b3:8c:6a:cc:
                    3e:ea:c2:e6:b3:12:cc:6f:d8:8a:60:fa:97:a0:b8:
                    fb:16:c2:2c:27:f3:c3:d3:ed:31:e7:50:ab:52:42:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:5E:C3:07:90:C4:12:58:5A:6F:D9:63:A6:3A:C1:03:42:D9:33
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233382e302f32342d3234203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:2f:11:e5:e6:04:c9:77:39:7f:53:36:4a:1e:47:e9:95:
         b9:b5:1d:16:58:29:72:db:19:28:b4:e4:2a:b1:e9:3b:7f:e5:
         5d:7a:84:20:06:eb:3f:ac:67:48:69:ec:7f:89:b0:08:c1:55:
         5b:2c:34:8b:b4:04:19:75:2c:12:d7:67:02:05:f0:75:1d:b0:
         f3:e9:a2:ed:db:d4:94:ff:32:4c:19:ea:ee:25:7e:33:99:96:
         f5:92:0f:f7:e9:45:47:8d:f5:81:30:04:06:34:6c:b8:7e:d9:
         d3:da:d2:c1:19:98:8b:b3:59:29:e3:ca:4e:08:96:db:6d:b9:
         0e:05:7f:94:54:e6:e2:c4:1c:65:56:d6:e6:44:29:db:5d:50:
         7f:77:0b:6b:5b:7f:5d:19:1d:71:20:af:9a:0e:1f:b0:c4:7a:
         27:f6:7c:7e:d7:38:46:4a:56:5e:93:ee:3c:20:0b:c5:0b:85:
         50:7e:fa:07:1d:6f:4e:42:44:7e:e3:5b:c9:58:64:23:54:11:
         1f:f6:0a:11:d2:85:85:41:e2:30:bc:e0:6b:df:3c:e6:a4:e9:
         f0:bf:8d:3d:2f:6b:7d:be:ea:cc:fa:e5:e1:48:cc:34:c4:8e:
         a6:8e:71:af:54:c8:fd:16:fd:24:e9:61:e4:57:7c:ef:ce:f4:
         d5:b7:86:31
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXUfSURU+Avs61w6xxr4VPIZAYEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ1NkM0OTMyQTU5RTEwMTdBNTQ3NzNENTZFQzgzMzhF
M0IyQzhCNzAeFw0yNDA3MzExMTM0MjhaFw0yNTA3MzAxMTM5MjhaMDMxMTAvBgNV
BAMTKEFFMjE1RUMzMDc5MEM0MTI1ODVBNkZEOTYzQTYzQUMxMDM0MkQ5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60Na0OeKfASx4HiMXgubW2sFu
y5/o1t3nO3oWzQyAjHmzQPDk2ORuoYO7xaiCpKzgC+nbabfsYGIPOP7jgAnj6E8k
HMLjmfRRxBYyZwKuAoafqe+eFfUu9/9YEd4AB3mO1k0Ey5Av5AoDeSoUwW4Ecoiq
iiaw4REewcInn38h0t6z40SdA/E6xslBBkQeKVsEdz5pGKWISMSKjkmYDdb+CYVh
AkxWZIqXqx7DGJ89Ii7fQDvOZeUDykgq8hPJ7f8V7N2AOYbmTQx6AUZCLeHaKnVp
E5fg5dsQmzuHs4xqzD7qwuazEsxv2Ipg+peguPsWwiwn88PT7THnUKtSQlYnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUriFewweQxBJYWm/ZY6Y6wQNC2TMwHwYDVR0j
BBgwFoAUDVbEkypZ4QF6VHc9VuyDOOOyyLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRllrRmZ0Y1R4c0NoTWlZOW5zSFREY0F5eG1yS1VrbmU1aXo3MzhzeTJ0
UmEvMC8wRDU2QzQ5MzJBNTlFMTAxN0E1NDc3M0Q1NkVDODMzOEUzQjJDOEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENTZDNDkzMkE1OUUxMDE3
QTU0NzczRDU2RUM4MzM4RTNCMkM4QjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZZa0ZmdGNUeHNDaE1pWTluc0hURGNBeXhtcktVa25lNWl6NzM4c3kydFJhLzAv
MzQzNTJlMzYyZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM3
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0G7jANBgkqhkiG9w0BAQsFAAOCAQEAcsovEeXmBMl3
OX9TNkoeR+mVubUdFlgpctsZKLTkKrHpO3/lXXqEIAbrP6xnSGnsf4mwCMFVWyw0
i7QEGXUsEtdnAgXwdR2w8+mi7dvUlP8yTBnq7iV+M5mW9ZIP9+lFR431gTAEBjRs
uH7Z09rSwRmYi7NZKePKTgiW2225DgV/lFTm4sQcZVbW5kQp211Qf3cLa1t/XRkd
cSCvmg4fsMR6J/Z8ftc4RkpWXpPuPCALxQuFUH76Bx1vTkJEfuNbyVhkI1QRH/YK
EdKFhUHiMLzga9885qTp8L+NPS9rfb7qzPrl4UjMNMSOpo5xr1TI/Rb9JOlh5Fd8
78701beGMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 31 16:56:12 2024 by rpki-client on console-ams.rpki-client.org