Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233392e302f32342d3234203d3e20323731373332.roa
File:                     34352e362e3233392e302f32342d3234203d3e20323731373332.roa (raw, json)
Hash identifier:          JGa2q4yO0r5YCFgO0g6Xn7plhlJNtm5WrQI1u76iZug=
Subject key identifier:   51:09:56:EF:DE:B2:95:69:0A:6F:5C:66:E4:FB:0F:A0:93:EB:96:1F
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       1A259CA8C5D38B8CF632E4F790B1241F902ADD1F
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233392e302f32342d3234203d3e20323731373332.roa
Signing time:             Wed 31 Jul 2024 11:39:33 +0000
ROA not before:           Wed 31 Jul 2024 11:34:33 +0000
ROA not after:            Wed 30 Jul 2025 11:39:33 +0000
asID:                     271732
IP address blocks:        45.6.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 13:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:25:9c:a8:c5:d3:8b:8c:f6:32:e4:f7:90:b1:24:1f:90:2a:dd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: Jul 31 11:34:33 2024 GMT
            Not After : Jul 30 11:39:33 2025 GMT
        Subject: CN=510956EFDEB295690A6F5C66E4FB0FA093EB961F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:fc:d0:ee:90:14:2f:03:2b:1c:29:b8:2a:
                    92:19:75:6a:df:8b:30:e6:4e:a0:90:db:2a:44:8a:
                    fa:43:ef:72:8e:95:5e:cb:fd:e4:02:e3:a5:e2:f2:
                    3a:ef:77:3f:34:30:ca:5e:3b:14:74:f3:d0:64:89:
                    2c:36:3f:3f:e9:81:c6:7b:8d:c8:1b:1a:be:2c:82:
                    d3:bc:bc:a5:00:1f:62:1c:e6:71:3d:ed:80:17:fd:
                    a3:61:35:03:3e:12:62:aa:45:b3:a1:76:4c:ae:d1:
                    6c:e6:dd:7f:53:b8:31:3d:d5:39:e1:d1:47:ee:ec:
                    97:12:c0:bc:5d:be:53:df:51:b1:93:dc:d3:80:06:
                    03:45:76:ee:20:e5:f4:b5:ea:10:70:85:3e:cf:39:
                    82:28:a6:d6:b3:5e:39:3c:41:4d:5a:a0:3a:8c:e4:
                    d2:e2:ca:06:6c:7f:49:0c:ed:cc:a9:7b:15:0a:3e:
                    e3:29:44:ff:f1:d8:db:f5:69:d9:b2:c9:83:77:84:
                    03:15:f3:a1:1b:85:13:a2:c6:71:f9:e3:de:23:50:
                    a0:2b:a0:dc:61:bf:f4:b3:69:02:72:d3:fc:ea:ad:
                    d7:a3:f1:ec:18:19:82:27:fd:11:02:80:b8:6f:0c:
                    af:d1:49:92:b8:e3:e8:e9:50:f5:58:bf:7d:33:37:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:56:EF:DE:B2:95:69:0A:6F:5C:66:E4:FB:0F:A0:93:EB:96:1F
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233392e302f32342d3234203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:03:cc:d3:b3:92:7c:f6:54:59:f4:96:c0:6b:99:b3:27:45:
         92:0e:98:41:18:e4:84:17:69:ac:f3:b4:ac:99:42:84:ae:37:
         80:c8:80:1a:c2:d7:8d:02:48:d1:e7:2b:73:d6:43:e7:60:ce:
         12:b3:9a:e7:13:a3:55:70:96:79:ca:93:32:73:32:00:eb:68:
         55:4e:2c:ea:53:55:7b:e2:73:5c:8a:5f:b4:68:c4:52:3d:b2:
         af:4e:31:e2:21:e4:c3:25:bd:07:96:52:1d:ed:e8:2d:12:97:
         43:c5:d8:6e:a9:53:9b:aa:8d:13:a3:fa:28:12:5c:c4:ac:9d:
         a5:da:93:76:3c:0b:3c:31:35:04:7d:0e:3c:c5:52:35:d5:d7:
         d4:a9:ab:dd:ce:08:26:c7:86:6b:67:4a:7a:fe:fe:60:cb:dc:
         a7:f8:4f:65:7d:0b:31:6c:fc:9f:20:86:6f:0a:ac:f6:d7:34:
         cf:09:dd:04:19:d3:bf:c6:51:cb:3a:d0:92:5c:af:6b:5f:5b:
         2e:f3:a8:e6:61:22:65:28:0d:75:8b:c8:39:9a:3f:2f:8e:58:
         b0:05:44:57:4c:ae:2c:a4:0b:bc:5c:ce:eb:e6:99:f7:0a:08:
         c4:cc:fb:bf:11:dd:72:25:71:d1:0e:65:56:ea:da:fc:3b:e6:
         82:bd:3c:95
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGiWcqMXTi4z2MuT3kLEkH5Aq3R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ1NkM0OTMyQTU5RTEwMTdBNTQ3NzNENTZFQzgzMzhF
M0IyQzhCNzAeFw0yNDA3MzExMTM0MzNaFw0yNTA3MzAxMTM5MzNaMDMxMTAvBgNV
BAMTKDUxMDk1NkVGREVCMjk1NjkwQTZGNUM2NkU0RkIwRkEwOTNFQjk2MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecPzQ7pAULwMrHCm4KpIZdWrf
izDmTqCQ2ypEivpD73KOlV7L/eQC46Xi8jrvdz80MMpeOxR089BkiSw2Pz/pgcZ7
jcgbGr4sgtO8vKUAH2Ic5nE97YAX/aNhNQM+EmKqRbOhdkyu0Wzm3X9TuDE91Tnh
0Ufu7JcSwLxdvlPfUbGT3NOABgNFdu4g5fS16hBwhT7POYIoptazXjk8QU1aoDqM
5NLiygZsf0kM7cypexUKPuMpRP/x2Nv1admyyYN3hAMV86EbhROixnH5494jUKAr
oNxhv/SzaQJy0/zqrdej8ewYGYIn/RECgLhvDK/RSZK44+jpUPVYv30zN9cVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUQlW796ylWkKb1xm5PsPoJPrlh8wHwYDVR0j
BBgwFoAUDVbEkypZ4QF6VHc9VuyDOOOyyLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRllrRmZ0Y1R4c0NoTWlZOW5zSFREY0F5eG1yS1VrbmU1aXo3MzhzeTJ0
UmEvMC8wRDU2QzQ5MzJBNTlFMTAxN0E1NDc3M0Q1NkVDODMzOEUzQjJDOEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENTZDNDkzMkE1OUUxMDE3
QTU0NzczRDU2RUM4MzM4RTNCMkM4QjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZZa0ZmdGNUeHNDaE1pWTluc0hURGNBeXhtcktVa25lNWl6NzM4c3kydFJhLzAv
MzQzNTJlMzYyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM3
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0G7zANBgkqhkiG9w0BAQsFAAOCAQEABwPM07OSfPZU
WfSWwGuZsydFkg6YQRjkhBdprPO0rJlChK43gMiAGsLXjQJI0ecrc9ZD52DOErOa
5xOjVXCWecqTMnMyAOtoVU4s6lNVe+JzXIpftGjEUj2yr04x4iHkwyW9B5ZSHe3o
LRKXQ8XYbqlTm6qNE6P6KBJcxKydpdqTdjwLPDE1BH0OPMVSNdXX1Kmr3c4IJseG
a2dKev7+YMvcp/hPZX0LMWz8nyCGbwqs9tc0zwndBBnTv8ZRyzrQklyva19bLvOo
5mEiZSgNdYvIOZo/L45YsAVEV0yuLKQLvFzO6+aZ9woIxMz7vxHdciVx0Q5lVura
/Dvmgr08lQ==
-----END CERTIFICATE-----
Generated at Wed Jul 31 16:48:18 2024 by rpki-client on console-fra.rpki-client.org