Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32342d3234203d3e20323637333435.roa
File:                     34352e3233342e38302e302f32342d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          UbyKYn4zcQF0RewST8/l6vN4844LtD+Q39SURl/hyT8=
Subject key identifier:   C8:62:36:03:2C:A2:E8:49:0B:7E:EC:A6:71:A4:8B:8C:52:92:A0:EE
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       44FD155861BEC92FF64799F40BDFDDC34B1785A6
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32342d3234203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        45.234.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fd:15:58:61:be:c9:2f:f6:47:99:f4:0b:df:dd:c3:4b:17:85:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject: CN=3082010A0282010100AB83D95577AAF0A28C09AA48FD1A6B1B6D857C1DBDB0DB6B5636BF6B713705D39CAAD4FD63FD72A48FB416FAD22A9EC7D28F9FE4043EE915D6914FD942B646D7B78E28B2220F0C6D5D5DC563A7E31070BD044B6C6E44F27BFA5FE0001D8F426AA6250347317F25715D8389846957087D6F45B52867F234F137158A84F6115111A8F6DAC9698ABF0DD8869A9800DE982DFAAE0759E0AED3C68D67722EF8A4BCDDBDD6E9EDE1C94DBBE97FDCB4513466A6B15B8D819938809C5A81E8D372B618AB766EBD80EC9CBF63A1F40356825DA643E60947BC69FE58775E9358D5A77A779AD24A829464496B07BD4881CEEB22B9A1B25D16980788674F2B17595B4ECD3E1F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:d9:55:77:aa:f0:a2:8c:09:aa:48:fd:1a:
                    6b:1b:6d:85:7c:1d:bd:b0:db:6b:56:36:bf:6b:71:
                    37:05:d3:9c:aa:d4:fd:63:fd:72:a4:8f:b4:16:fa:
                    d2:2a:9e:c7:d2:8f:9f:e4:04:3e:e9:15:d6:91:4f:
                    d9:42:b6:46:d7:b7:8e:28:b2:22:0f:0c:6d:5d:5d:
                    c5:63:a7:e3:10:70:bd:04:4b:6c:6e:44:f2:7b:fa:
                    5f:e0:00:1d:8f:42:6a:a6:25:03:47:31:7f:25:71:
                    5d:83:89:84:69:57:08:7d:6f:45:b5:28:67:f2:34:
                    f1:37:15:8a:84:f6:11:51:11:a8:f6:da:c9:69:8a:
                    bf:0d:d8:86:9a:98:00:de:98:2d:fa:ae:07:59:e0:
                    ae:d3:c6:8d:67:72:2e:f8:a4:bc:dd:bd:d6:e9:ed:
                    e1:c9:4d:bb:e9:7f:dc:b4:51:34:66:a6:b1:5b:8d:
                    81:99:38:80:9c:5a:81:e8:d3:72:b6:18:ab:76:6e:
                    bd:80:ec:9c:bf:63:a1:f4:03:56:82:5d:a6:43:e6:
                    09:47:bc:69:fe:58:77:5e:93:58:d5:a7:7a:77:9a:
                    d2:4a:82:94:64:49:6b:07:bd:48:81:ce:eb:22:b9:
                    a1:b2:5d:16:98:07:88:67:4f:2b:17:59:5b:4e:cd:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:62:36:03:2C:A2:E8:49:0B:7E:EC:A6:71:A4:8B:8C:52:92:A0:EE
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32342d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:24:5d:75:cc:26:39:0a:36:ec:f1:80:50:91:f7:df:21:e8:
         cc:d2:41:eb:38:a0:3a:e3:4d:aa:f0:8a:0a:65:61:7f:c3:4e:
         a6:54:19:03:a5:21:10:04:87:19:89:31:5f:92:a3:0c:7e:dd:
         28:c0:54:9c:39:ff:b8:ec:20:b6:cd:d0:89:a4:e9:1a:b1:08:
         32:93:dd:42:2a:60:a3:ed:41:94:e6:2d:be:6c:eb:b9:82:bb:
         e9:41:52:18:94:f6:d3:0e:c0:d7:04:7d:88:20:65:48:aa:fc:
         f5:47:30:1a:68:fa:4c:8f:e3:51:f1:99:dd:a3:51:16:7a:83:
         ee:6d:76:05:2f:2b:22:11:b0:ec:ff:9f:d4:3d:d0:9d:53:5c:
         b1:b7:69:26:4e:9c:28:ab:f9:ad:6f:c5:7f:92:0f:e4:f0:11:
         17:80:9c:46:75:c5:6b:cc:2e:63:c7:fe:30:f1:9f:d3:92:b6:
         cd:3c:f7:65:f9:01:b3:4e:5e:06:ae:0d:e4:1d:65:9a:df:4e:
         73:b1:93:0b:36:88:12:08:5d:ac:71:00:40:86:23:16:ac:b3:
         9c:16:e3:35:8c:b7:88:15:22:69:d9:43:85:b5:60:0f:31:e8:
         94:20:d9:c8:24:cd:71:47:fd:70:c2:59:83:f9:72:f9:24:ba:
         60:d6:49:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org