Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134392e302f32342d3234203d3e20323637393633.roa
File:                     34352e3136362e3134392e302f32342d3234203d3e20323637393633.roa (raw, json)
Hash identifier:          DSLGPQb7N1RtCMGGTs8HDH6t9A7KTnuvgI/0tb4P2Tw=
Subject key identifier:   3B:01:89:C1:4B:D1:B1:D6:F3:8F:F3:17:A0:38:90:9F:8B:F5:01:8E
Certificate issuer:       /CN=20635662A8A5867029EC359E96E65DF88B91AA83
Certificate serial:       4C8E59677533955BC7FB684D47BE25E928607D54
Authority key identifier: 20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134392e302f32342d3234203d3e20323637393633.roa
Signing time:             Thu 15 Aug 2024 16:45:10 +0000
ROA not before:           Thu 15 Aug 2024 16:40:10 +0000
ROA not after:            Thu 14 Aug 2025 16:45:10 +0000
asID:                     267963
IP address blocks:        45.166.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 17:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8e:59:67:75:33:95:5b:c7:fb:68:4d:47:be:25:e9:28:60:7d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20635662A8A5867029EC359E96E65DF88B91AA83
        Validity
            Not Before: Aug 15 16:40:10 2024 GMT
            Not After : Aug 14 16:45:10 2025 GMT
        Subject: CN=3B0189C14BD1B1D6F38FF317A038909F8BF5018E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:ca:ec:e1:da:e4:c3:58:79:41:fe:dc:b7:
                    b3:4b:61:47:9e:c9:bb:36:b4:f3:4a:22:2c:f3:27:
                    1d:22:3d:4b:18:78:c3:ee:3e:c1:66:1e:19:9d:c5:
                    1e:64:71:7b:be:97:50:a7:40:21:c2:f5:96:da:29:
                    3c:f2:c5:67:6b:d6:d2:cc:f1:36:1e:f5:b9:ab:ef:
                    43:14:f6:bf:01:4e:36:f5:7c:19:85:4c:6a:c7:b6:
                    ee:f8:4c:92:e7:9c:7c:95:ca:fd:95:4d:38:d8:52:
                    58:16:40:39:28:b6:68:46:9b:77:00:10:9c:dd:6c:
                    45:ae:cd:18:56:0f:e4:be:e3:82:bc:75:f1:4d:e5:
                    8a:1a:7a:62:a7:7a:8f:36:05:78:06:da:44:09:2a:
                    d2:cd:89:c0:a6:b3:d1:33:1e:79:c4:b1:c7:55:88:
                    49:bd:da:05:37:84:72:7c:91:27:bf:20:6a:6d:97:
                    77:a5:47:bf:98:3d:6f:a6:6d:16:d9:e2:24:5e:4c:
                    17:15:46:dd:fd:4a:34:a3:ff:73:9a:b9:bc:a4:1a:
                    9e:2b:26:ed:4c:c1:0c:3a:d4:36:f6:5c:18:6d:a9:
                    d5:0b:df:32:11:7a:27:1c:a1:c8:8d:af:21:33:3c:
                    94:44:20:60:e7:dd:06:1a:57:47:07:cd:07:b1:fb:
                    13:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:01:89:C1:4B:D1:B1:D6:F3:8F:F3:17:A0:38:90:9F:8B:F5:01:8E
            X509v3 Authority Key Identifier:
                keyid:20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134392e302f32342d3234203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:a0:96:4d:31:3d:9c:ac:4b:8f:40:e1:cb:32:7a:3d:5a:dd:
         51:ed:bb:ec:8e:be:33:60:f8:90:8d:3a:36:b3:5d:b7:8d:cd:
         61:2d:ce:bf:5c:92:38:cc:b1:ad:6e:68:c8:11:ed:4f:63:18:
         37:ca:4c:84:07:48:70:95:12:bb:58:34:da:4a:de:f9:4e:62:
         74:2d:60:42:be:e7:f3:db:17:c6:62:3a:0a:f0:40:a2:38:4d:
         94:db:c2:e1:39:98:07:b5:e5:35:ad:2c:93:fc:41:19:9d:01:
         e6:7f:d5:90:f0:97:e2:e6:9d:04:1f:a3:cf:e0:13:a7:70:8e:
         65:0f:c1:a9:1a:5c:2f:5b:80:52:c6:82:5e:9f:70:56:5f:16:
         6b:46:8f:37:55:94:b9:71:be:1f:0b:71:d0:e4:a5:41:1a:b8:
         59:38:4c:f7:50:3e:9f:7e:fc:b3:32:40:6d:96:82:2b:5f:b9:
         f5:8b:c7:87:bd:7b:ab:0c:af:c1:c2:d3:2d:ae:3d:a5:0a:12:
         2c:ad:7c:83:5a:9b:dd:45:a7:3e:1c:cd:ff:fc:af:3f:fd:59:
         73:3c:9b:84:ee:2f:8d:4d:d7:00:79:b7:fe:23:ee:6e:71:4c:
         70:9b:97:3e:a8:76:1e:69:61:26:62:60:4d:6c:66:28:d4:56:
         6c:0f:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org