Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38322e302f32342d3234203d3e20323637333435.roa
File:                     34352e3233342e38322e302f32342d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          AIZDLc9u+wuJaH8ZzOJyBMzpVVkHrNe0o3JQApT3s7s=
Subject key identifier:   C2:71:25:00:FB:A7:37:87:12:8F:66:46:2A:E5:17:21:FA:C5:FD:6A
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       40AE14F5C70F57FA9253D1559EE600D238415D8F
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38322e302f32342d3234203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        45.234.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ae:14:f5:c7:0f:57:fa:92:53:d1:55:9e:e6:00:d2:38:41:5d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:0a:e5:d8:81:8e:c7:e7:3c:53:78:a6:30:
                    92:9d:9a:d7:e5:3d:a8:0c:da:ba:0f:da:3e:a4:d1:
                    d8:ac:03:df:57:77:70:79:7f:14:66:cf:56:e6:89:
                    f1:50:4d:36:29:3b:2b:cc:5e:29:54:11:49:43:c2:
                    1c:a0:a3:0a:04:02:4b:34:5c:d9:b0:af:fe:aa:60:
                    75:62:c3:d5:79:67:8d:f5:4f:a2:48:0e:d3:56:09:
                    8b:63:0d:54:37:41:8e:43:e7:cd:c1:47:70:1b:76:
                    07:ee:7d:33:df:37:a5:3e:e4:07:33:70:32:f3:44:
                    f2:f3:62:c4:c2:92:0d:b3:6b:b4:2f:63:59:81:d7:
                    1c:d4:26:81:55:e4:0b:6d:6b:21:49:43:92:98:23:
                    bf:e2:10:f0:3b:a8:d9:7f:51:83:b5:99:c0:27:27:
                    ae:eb:2b:58:51:b7:3f:fd:ba:39:45:7e:26:89:23:
                    66:2c:9b:6b:ee:20:ee:d2:c9:6b:73:86:c9:ff:84:
                    95:47:21:e7:39:2b:b2:bb:2c:d9:35:56:54:b1:63:
                    f3:20:98:c4:1b:97:00:b6:c1:1a:d6:ed:40:3b:51:
                    3f:6a:4e:f4:27:d2:0f:49:1c:7a:a6:13:11:83:e8:
                    f9:7f:45:c4:66:24:16:7a:94:82:41:df:d6:1c:5b:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:71:25:00:FB:A7:37:87:12:8F:66:46:2A:E5:17:21:FA:C5:FD:6A
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38322e302f32342d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:01:0f:bc:d5:cc:43:ab:dd:8a:2d:07:8f:b8:6b:d8:fa:92:
         34:d0:e6:8b:d8:cc:ab:8a:21:97:1e:4d:96:ad:56:d1:07:27:
         33:36:fe:89:ee:6b:c7:5b:23:98:46:ce:b2:12:96:a4:29:d5:
         ff:f9:1b:1b:c4:fe:12:49:d8:4b:33:f7:7f:e1:8b:99:33:5a:
         b0:14:bc:44:30:17:0f:d7:98:8f:4a:b6:5d:4e:66:e7:cc:9c:
         da:6f:09:f0:30:8a:7d:e0:86:fc:a3:cb:d4:94:9a:fb:d3:f9:
         8e:d4:33:74:e3:b1:85:b4:2b:3b:f0:8d:9a:ce:00:33:bd:21:
         08:ab:0e:fc:28:dd:da:e5:f4:c4:51:49:23:e6:9b:0d:a6:8b:
         74:72:3f:d3:61:a4:20:87:d6:99:fc:64:22:f0:01:89:3d:14:
         02:ab:34:03:62:df:75:bd:72:60:3e:2b:a1:10:93:4a:4a:2f:
         f2:01:1b:1b:bb:c7:90:d6:a1:51:40:ae:e5:66:74:c8:ac:1b:
         02:30:c3:df:9f:1a:98:89:13:fd:e8:20:7f:4c:95:13:51:5c:
         3e:f3:22:9a:39:9a:91:55:42:b4:b6:ae:70:d3:05:09:c1:a5:
         6b:0d:59:15:b9:cd:ea:69:93:db:b5:d5:61:ed:1e:06:1f:97:
         b9:dd:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org