Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa
File:                     34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa (raw, json)
Hash identifier:          /RGpFf1e7hPnmhjLI92/zrLT/2QMeDmOBzF+Ni2dibg=
Subject key identifier:   DA:8E:FC:3E:92:87:11:F9:8B:22:D3:06:4B:88:4D:F6:D7:64:05:C2
Certificate issuer:       /CN=20635662A8A5867029EC359E96E65DF88B91AA83
Certificate serial:       7CD2BB5675B5FE9C4A86DE27515F93453C92A46A
Authority key identifier: 20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa
Signing time:             Thu 15 Aug 2024 16:44:48 +0000
ROA not before:           Thu 15 Aug 2024 16:39:48 +0000
ROA not after:            Thu 14 Aug 2025 16:44:48 +0000
asID:                     267963
IP address blocks:        45.166.150.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 17:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d2:bb:56:75:b5:fe:9c:4a:86:de:27:51:5f:93:45:3c:92:a4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20635662A8A5867029EC359E96E65DF88B91AA83
        Validity
            Not Before: Aug 15 16:39:48 2024 GMT
            Not After : Aug 14 16:44:48 2025 GMT
        Subject: CN=DA8EFC3E928711F98B22D3064B884DF6D76405C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:87:74:75:eb:e2:bd:08:9c:86:bb:87:05:
                    5c:98:ee:9c:4a:8c:ad:c1:8a:fa:63:03:16:93:c3:
                    ea:f6:2f:6c:56:c8:4f:fe:0e:f8:35:fb:24:4b:72:
                    a0:b3:42:9e:8a:62:22:72:28:a9:16:b8:8d:29:cb:
                    7d:3b:93:cf:cd:e7:08:80:d8:77:dc:71:22:85:c4:
                    fb:93:91:9f:b2:cb:78:9e:7e:03:07:d3:fb:80:64:
                    bf:1b:6e:57:8e:35:d0:3c:ac:b5:30:da:92:c9:6f:
                    63:87:98:0a:dd:56:3c:eb:c0:06:77:31:29:85:49:
                    c3:a4:72:83:e0:86:38:58:1e:f2:12:f9:64:b0:0d:
                    2a:99:4f:1a:98:11:67:63:c5:60:1a:4c:8d:f7:3a:
                    53:35:bb:be:b0:c2:92:90:ff:34:30:7c:56:21:18:
                    5d:dd:08:80:b3:3d:de:99:89:f9:16:5f:b3:81:47:
                    92:b2:53:02:b0:35:01:b0:d0:3c:b4:e0:51:fb:61:
                    20:9c:93:6f:2f:5b:f9:e0:e3:95:0c:af:a7:21:bf:
                    a7:14:21:aa:59:c0:0d:3c:e9:3f:04:ae:4d:83:fd:
                    b4:54:38:f9:ce:1e:4f:a1:0e:7b:dd:53:98:3d:78:
                    72:ba:c5:75:7e:ac:46:11:25:a2:44:62:a1:d6:02:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8E:FC:3E:92:87:11:F9:8B:22:D3:06:4B:88:4D:F6:D7:64:05:C2
            X509v3 Authority Key Identifier:
                keyid:20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:b7:8b:56:35:bd:22:b0:b2:d9:02:a7:93:a6:37:bf:79:
         e2:f3:8a:da:d6:69:a3:92:06:6c:3a:ce:3a:c4:7a:fd:c2:d2:
         3c:5a:23:6a:34:fe:56:db:20:03:73:d6:3c:5b:02:ae:80:35:
         56:33:5c:8f:d0:68:5b:0e:c9:34:2b:22:37:23:03:5d:72:e5:
         4c:99:57:80:93:62:b9:9f:c5:cb:32:5d:bc:5e:df:cf:7e:da:
         e1:8e:e9:2f:82:f4:15:65:40:92:f9:3b:10:3c:35:54:ad:50:
         8d:eb:fd:72:bf:ff:4c:aa:25:37:86:82:cd:ea:0f:4b:91:71:
         6a:1a:9b:33:e0:b5:32:5b:d5:56:ee:8d:37:a6:e3:92:62:67:
         2b:3e:a0:cb:d3:65:77:b1:cb:e3:8a:f1:09:11:4d:2d:2c:1d:
         66:70:08:0e:ae:d5:15:f0:37:33:61:31:06:4d:d7:13:f4:00:
         33:5f:46:a0:e4:ed:96:d3:26:c5:54:5a:11:d1:61:dc:d7:02:
         0d:2b:82:f1:cd:30:e8:c6:d8:67:98:52:06:01:43:27:bb:bd:
         4d:83:ac:7f:ba:2d:be:75:6a:64:95:9c:25:16:2a:31:6a:44:
         83:d7:8d:df:11:09:e1:d5:51:57:4b:5a:61:02:36:fc:c0:c9:
         84:0b:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org