Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32322d3232203d3e20323637333435.roa
File:                     34352e3233342e38302e302f32322d3232203d3e20323637333435.roa (raw, json)
Hash identifier:          E5nRTTlZsQ0TE8IA/W1MhHHDSli8PZGmY9VU2cwBexI=
Subject key identifier:   15:DB:14:FB:D0:48:FD:78:43:D4:5E:12:7B:78:11:B0:33:11:C0:C4
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       68820D35C157B101C3FFF95AC8B77B294CA7ABBF
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32322d3232203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        45.234.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:82:0d:35:c1:57:b1:01:c3:ff:f9:5a:c8:b7:7b:29:4c:a7:ab:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:be:66:87:84:72:38:1f:d6:f8:61:bc:ce:
                    d4:7d:d9:bc:24:ca:ff:70:df:00:c5:63:13:ef:6c:
                    e8:88:1f:28:5e:c3:52:02:16:fa:95:17:ea:8b:b4:
                    c5:c5:d6:8c:67:15:f3:3a:6d:81:40:74:20:d3:08:
                    03:18:be:6f:49:cd:21:e8:8f:75:49:9c:b4:81:92:
                    12:18:11:f7:90:8a:f6:4a:58:1b:bf:49:64:1f:2d:
                    e8:71:80:b3:bb:57:a9:a5:d2:64:61:ed:ae:4c:e4:
                    b8:9a:77:c7:7f:12:d4:25:5e:45:e6:a3:ee:97:be:
                    54:4b:60:3a:6d:d1:6b:78:06:9a:4f:f3:d5:df:36:
                    13:83:d1:9d:da:a3:9d:6b:92:01:82:24:cf:09:44:
                    9b:2c:6c:28:ac:d5:70:67:cb:aa:1a:c7:fd:13:d4:
                    bc:0a:bb:d7:ec:6e:65:98:ab:ed:d4:27:37:ca:cc:
                    2d:b8:bd:0c:42:05:ca:e9:09:ca:3a:53:92:7e:84:
                    50:cc:4d:c6:86:48:ee:78:92:26:64:5f:93:35:39:
                    39:58:a6:90:26:a5:81:7c:41:1a:3a:cc:b5:7e:19:
                    15:2e:8f:79:f2:ed:4b:c2:e9:f9:aa:ca:19:bd:02:
                    6c:d8:73:6e:55:90:2a:f7:2b:a5:07:a8:c0:ef:3e:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:14:FB:D0:48:FD:78:43:D4:5E:12:7B:78:11:B0:33:11:C0:C4
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32322d3232203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:64:67:2f:b7:48:1d:12:c1:f3:c4:19:07:c0:7b:ac:69:
         75:a1:c1:18:7d:d3:a2:19:f3:b1:5d:e4:75:d4:b4:49:fc:21:
         53:85:7a:c5:d4:4f:a4:2b:81:ed:13:e1:79:55:62:0d:7d:5c:
         72:4a:99:13:39:44:7d:fd:82:7a:d1:ee:03:eb:30:32:8b:df:
         b2:2d:d7:52:82:a8:14:37:f6:a3:65:b3:38:ec:87:56:91:79:
         a6:21:3d:30:fa:60:2e:9b:18:29:d7:94:4c:19:09:f9:12:a9:
         e1:fd:0a:9c:e4:b4:15:e0:fa:84:9b:f8:11:13:e4:75:d0:81:
         c1:17:44:81:ee:63:67:e4:b7:72:94:9f:cc:b9:16:b8:72:5c:
         62:0c:85:99:a2:2c:c5:c7:c8:ae:3e:b7:ef:f8:65:a1:9a:b1:
         e3:f1:bf:76:96:41:46:fa:03:71:af:07:2f:5d:1d:3e:0e:56:
         44:64:32:92:bc:49:95:93:68:2f:8b:dc:c9:41:3f:31:da:83:
         6c:91:10:97:f5:76:1a:6b:66:39:85:ab:26:f2:dd:a7:78:bf:
         4a:62:ec:a3:28:99:21:33:27:6e:b9:d6:75:72:25:f0:18:ca:
         ac:03:ef:fa:b8:69:ce:ae:05:03:94:e5:56:ac:ca:76:4f:60:
         21:99:fc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org