Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38312e302f32342d3234203d3e20323637333435.roa
File:                     34352e3233342e38312e302f32342d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          a4odNxt36LZpDwzYog25rvA51KKSZz7OvRy0Z0HrI5Q=
Subject key identifier:   2B:7D:7D:73:0D:74:DD:32:0E:BC:E4:26:CC:87:A9:84:43:8E:7E:D1
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       5DD485B0E16DBCA93D02264624F5CB903E83D209
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38312e302f32342d3234203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        45.234.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d4:85:b0:e1:6d:bc:a9:3d:02:26:46:24:f5:cb:90:3e:83:d2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:77:4f:c4:66:6a:72:58:96:8e:dd:8e:7c:
                    b3:f2:fd:ad:b7:a0:b9:6d:02:70:f9:82:01:dc:1e:
                    17:0b:7f:90:15:4e:45:a8:69:83:87:8a:43:3b:62:
                    dc:f2:bf:57:1f:3e:f1:b7:28:c4:df:77:60:30:cd:
                    af:9a:d2:f4:5e:18:15:34:25:f2:c7:91:cd:52:71:
                    87:70:2a:cc:20:73:5b:ec:be:74:d9:5f:69:44:41:
                    16:f1:07:3a:73:53:9d:26:c2:54:e9:5e:d5:9b:29:
                    91:6d:9e:ff:0f:ea:6f:8c:0a:39:d7:46:12:8a:b7:
                    a3:ed:54:6d:cf:3f:2a:d2:d8:d7:bc:df:1a:ed:06:
                    8a:e6:96:1d:24:39:f9:fe:0e:04:7a:15:b0:88:6f:
                    1f:27:ad:ca:b2:5b:7e:76:52:44:ee:59:80:0e:e5:
                    09:ef:9c:5e:49:b6:4b:bd:fc:4d:26:2a:e6:90:e9:
                    84:0f:fe:3d:11:e6:80:ef:ff:c4:eb:31:fd:2a:3b:
                    c3:82:8d:fc:cb:3f:75:61:65:53:47:2e:3d:8c:ec:
                    c7:47:9a:85:87:08:cb:d2:26:6b:28:39:22:47:66:
                    5b:13:62:d6:67:ab:d6:75:c0:fc:cd:ba:1d:cd:b6:
                    80:0a:db:d6:bf:b4:97:08:78:80:44:de:ee:66:eb:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7D:7D:73:0D:74:DD:32:0E:BC:E4:26:CC:87:A9:84:43:8E:7E:D1
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38312e302f32342d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:31:58:5f:4f:68:d8:7e:7c:e3:51:5b:37:d2:51:59:96:fc:
         22:82:3d:ec:1e:86:50:33:8a:2a:37:ec:26:46:80:5b:73:cd:
         48:bf:a0:ca:b3:b9:a3:a8:0c:c2:53:39:a0:46:b4:e6:b5:b1:
         13:41:ba:f1:8a:0c:a4:e6:04:07:2d:fc:08:27:6f:e0:12:1e:
         19:59:4c:f9:e5:24:c1:b2:cc:29:07:b4:b1:57:ef:e7:92:89:
         89:d6:31:b8:6e:36:54:d0:45:9d:44:c2:b2:60:70:65:46:8c:
         ed:f9:b4:25:cf:b2:76:c2:3d:41:e8:f8:54:2c:88:ab:ca:2d:
         f2:eb:f1:40:c3:8c:cd:d6:7e:3e:e7:18:c2:10:c5:01:f4:cc:
         5b:64:33:c3:99:0b:15:7a:3e:98:b6:fe:98:8e:41:0b:7e:94:
         89:c3:d5:4b:09:c4:c5:c0:75:c0:7d:e8:cd:43:5b:26:70:17:
         e6:69:1c:4f:da:88:d5:8f:6a:68:cc:f3:08:c5:b2:23:c4:14:
         f0:53:96:6c:09:ab:7a:39:bd:49:3c:c7:6e:75:35:3b:fb:c4:
         2a:46:70:b3:42:d7:e1:4a:f4:44:d4:10:9b:b1:3f:31:47:26:
         22:e4:29:34:1d:3f:75:ab:4a:53:89:31:78:6e:bc:15:4b:38:
         ab:bc:d6:0b
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUXdSFsOFtvKk9AiZGJPXLkD6D0gkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwRDYyNkVBRTBDNENDMkZEQzY3NjdDNjJBQTQ3NEM1
ODZCOUQwNTAeFw0yNDA0MDMxODI2MjdaFw0yNTA0MDIxODMxMjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0MyMjc3NEZDNDY2NkE3MjU4
OTY4RUREOEU3Q0IzRjJGREFEQjdBMEI5NkQwMjcwRjk4MjAxREMxRTE3MEI3Rjkw
MTU0RTQ1QTg2OTgzODc4QTQzM0I2MkRDRjJCRjU3MUYzRUYxQjcyOEM0REY3NzYw
MzBDREFGOUFEMkY0NUUxODE1MzQyNUYyQzc5MUNENTI3MTg3NzAyQUNDMjA3MzVC
RUNCRTc0RDk1RjY5NDQ0MTE2RjEwNzNBNzM1MzlEMjZDMjU0RTk1RUQ1OUIyOTkx
NkQ5RUZGMEZFQTZGOEMwQTM5RDc0NjEyOEFCN0EzRUQ1NDZEQ0YzRjJBRDJEOEQ3
QkNERjFBRUQwNjhBRTY5NjFEMjQzOUY5RkUwRTA0N0ExNUIwODg2RjFGMjdBRENB
QjI1QjdFNzY1MjQ0RUU1OTgwMEVFNTA5RUY5QzVFNDlCNjRCQkRGQzREMjYyQUU2
OTBFOTg0MEZGRTNEMTFFNjgwRUZGRkM0RUIzMUZEMkEzQkMzODI4REZDQ0IzRjc1
NjE2NTUzNDcyRTNEOENFQ0M3NDc5QTg1ODcwOENCRDIyNjZCMjgzOTIyNDc2NjVC
MTM2MkQ2NjdBQkQ2NzVDMEZDQ0RCQTFEQ0RCNjgwMEFEQkQ2QkZCNDk3MDg3ODgw
NDRERUVFNjZFQjY5MTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzCJ3T8RmanJYlo7djnyz8v2tt6C5bQJw+YIB3B4XC3+QFU5FqGmD
h4pDO2Lc8r9XHz7xtyjE33dgMM2vmtL0XhgVNCXyx5HNUnGHcCrMIHNb7L502V9p
REEW8Qc6c1OdJsJU6V7VmymRbZ7/D+pvjAo510YSirej7VRtzz8q0tjXvN8a7QaK
5pYdJDn5/g4EehWwiG8fJ63Kslt+dlJE7lmADuUJ75xeSbZLvfxNJirmkOmED/49
EeaA7//E6zH9KjvDgo38yz91YWVTRy49jOzHR5qFhwjL0iZrKDkiR2ZbE2LWZ6vW
dcD8zbodzbaACtvWv7SXCHiARN7uZutpEwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCt9fXMNdN0yDrzkJsyHqYRDjn7RMB8GA1UdIwQYMBaAFGkNYm6uDEzC/cZ2fGKq
R0xYa50FMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzEvNjkwRDYyNkVBRTBDNEND
MkZEQzY3NjdDNjJBQTQ3NEM1ODZCOUQwNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82OTBENjI2RUFFMEM0Q0MyRkRDNjc2N0M2MkFBNDc0QzU4NkI5
RDA1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8xLzM0MzUyZTMyMzMzNDJlMzgzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzMzMzQzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3q
UTANBgkqhkiG9w0BAQsFAAOCAQEAXzFYX09o2H5841FbN9JRWZb8IoI97B6GUDOK
KjfsJkaAW3PNSL+gyrO5o6gMwlM5oEa05rWxE0G68YoMpOYEBy38CCdv4BIeGVlM
+eUkwbLMKQe0sVfv55KJidYxuG42VNBFnUTCsmBwZUaM7fm0Jc+ydsI9Qej4VCyI
q8ot8uvxQMOMzdZ+PucYwhDFAfTMW2Qzw5kLFXo+mLb+mI5BC36UicPVSwnExcB1
wH3ozUNbJnAX5mkcT9qI1Y9qaMzzCMWyI8QU8FOWbAmrejm9STzHbnU1O/vEKkZw
s0LX4Ur0RNQQm7E/MUcmIuQpNB0/datKU4kxeG68FUs4q7zWCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org