Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38322e302f32332d3233203d3e20323637333435.roa
File:                     34352e3233342e38322e302f32332d3233203d3e20323637333435.roa (raw, json)
Hash identifier:          lBjab8TK3CwQI478zfhhOlqZoZTB9kBQSvfFQWwuJfI=
Subject key identifier:   DA:70:D8:F8:43:26:37:1E:C8:04:92:61:03:52:4A:2B:8F:A0:52:E2
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       08CF89E6F06186FC1E078C52611424FC924CE2F8
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38322e302f32332d3233203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        45.234.82.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cf:89:e6:f0:61:86:fc:1e:07:8c:52:61:14:24:fc:92:4c:e2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject: CN=3082010A0282010100D7CA22BFD4F8EDFC4E773083F7A7F15D0C796672818D3B0EAC05F7A4A0EFC2B11827878837C8FF6B6CF4679FA0607C401E7BA08D70CB750911DFDBF18D5EAE8F98C212A6A31543E8E7A2D6C2B10982B1EA7A158403D8F60EBA18D3CBC1C24CD944B629D7D5BD000C0987898509ADE73AE9FAFED0B055CED459DA2C82E8ECBFBC2D03B657F5CBBE7F9EA521BB2645DDDF7B4C8D91C6FE1DC1F73D913C9EAE773D48B95C03EBA90B20D4FE2A296FA46D306C0C20DE6607FB75AE2532B6E0435B3103C24E42F1745FFBE268AF644E268C67D733962CDA423D883FDA1554AA7E361A3372F502D845DF996E08FFE2379CFDB19DBE3549F38B00A9FBB7750E1870E2E10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:22:bf:d4:f8:ed:fc:4e:77:30:83:f7:a7:
                    f1:5d:0c:79:66:72:81:8d:3b:0e:ac:05:f7:a4:a0:
                    ef:c2:b1:18:27:87:88:37:c8:ff:6b:6c:f4:67:9f:
                    a0:60:7c:40:1e:7b:a0:8d:70:cb:75:09:11:df:db:
                    f1:8d:5e:ae:8f:98:c2:12:a6:a3:15:43:e8:e7:a2:
                    d6:c2:b1:09:82:b1:ea:7a:15:84:03:d8:f6:0e:ba:
                    18:d3:cb:c1:c2:4c:d9:44:b6:29:d7:d5:bd:00:0c:
                    09:87:89:85:09:ad:e7:3a:e9:fa:fe:d0:b0:55:ce:
                    d4:59:da:2c:82:e8:ec:bf:bc:2d:03:b6:57:f5:cb:
                    be:7f:9e:a5:21:bb:26:45:dd:df:7b:4c:8d:91:c6:
                    fe:1d:c1:f7:3d:91:3c:9e:ae:77:3d:48:b9:5c:03:
                    eb:a9:0b:20:d4:fe:2a:29:6f:a4:6d:30:6c:0c:20:
                    de:66:07:fb:75:ae:25:32:b6:e0:43:5b:31:03:c2:
                    4e:42:f1:74:5f:fb:e2:68:af:64:4e:26:8c:67:d7:
                    33:96:2c:da:42:3d:88:3f:da:15:54:aa:7e:36:1a:
                    33:72:f5:02:d8:45:df:99:6e:08:ff:e2:37:9c:fd:
                    b1:9d:be:35:49:f3:8b:00:a9:fb:b7:75:0e:18:70:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:70:D8:F8:43:26:37:1E:C8:04:92:61:03:52:4A:2B:8F:A0:52:E2
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38322e302f32332d3233203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:10:32:6d:11:e8:bd:72:af:03:26:f3:25:ac:a1:46:5d:e3:
         e8:9c:7e:3c:40:aa:42:5d:9b:7d:37:33:f7:8e:78:b0:09:33:
         22:7a:90:d2:87:8a:a5:87:c4:6d:50:16:43:67:a6:c3:f9:61:
         7c:b9:ed:ad:35:df:eb:ab:93:fc:90:88:9f:f4:1d:e4:68:f7:
         ad:a8:e5:1f:1b:5a:d5:3a:1d:65:0b:26:b4:59:9b:44:00:54:
         47:fa:69:8a:0d:c2:fa:5c:c9:bf:88:b1:98:77:fb:e3:eb:6d:
         4d:02:d3:37:a8:34:4d:77:f5:89:f9:87:64:51:d8:26:3e:0f:
         4e:0d:80:7a:a4:d1:4d:35:9b:cd:65:db:b8:e7:80:b5:d1:ac:
         32:58:24:80:f9:92:c2:b2:a0:32:dc:90:8c:fe:a6:07:76:0f:
         37:f0:b6:54:ce:f0:e6:2c:d5:e8:77:0d:57:2c:82:7b:de:48:
         8f:f5:1d:80:f4:39:a9:b5:6d:bd:52:20:d9:cc:69:da:15:e4:
         d6:ff:22:30:b7:2c:75:5c:83:14:c6:d8:bc:7b:0e:1f:5d:f5:
         dd:c4:05:1c:f7:0f:9a:12:aa:07:13:40:de:88:7f:1b:aa:e3:
         b4:f0:8f:a8:a2:35:42:a4:1e:d1:5e:5f:d2:05:df:3b:0d:70:
         c6:db:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org