Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38332e302f32342d3234203d3e20323637333435.roa
File:                     34352e3233342e38332e302f32342d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          qxdKXdw5PF+55FIQIpZlft8ZQNCtNFeSmnXukGO113Y=
Subject key identifier:   36:A7:B6:69:6A:D8:84:5C:3F:FB:D6:2C:F6:91:74:80:21:23:6E:EF
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       59212660885EF37565A2AF0A7ED2B0C7CAEAF0B6
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38332e302f32342d3234203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        45.234.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:21:26:60:88:5e:f3:75:65:a2:af:0a:7e:d2:b0:c7:ca:ea:f0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:c7:11:73:5a:88:bc:94:fd:76:a7:41:ee:
                    58:23:65:5d:76:ab:f2:93:08:38:97:ca:d6:d1:bf:
                    3a:63:cd:c2:06:80:49:09:26:0d:5a:51:ba:33:96:
                    e9:96:1a:88:c4:d0:e7:57:c0:09:39:57:31:2c:7b:
                    4b:ee:76:69:44:6f:0f:50:58:e3:64:15:90:8d:43:
                    d3:d6:d7:ce:f2:95:b9:de:83:56:f3:2c:17:26:4e:
                    de:cd:2f:2a:6c:6d:9d:4a:2b:b7:3a:ac:ec:2c:4f:
                    2b:03:6b:ee:02:68:27:3c:ef:32:db:7b:6f:69:70:
                    88:2e:40:01:64:40:34:af:6f:20:8b:d7:84:92:06:
                    f7:1d:2f:c5:ac:fc:ec:1f:1d:9f:5c:b8:b2:6e:00:
                    34:41:1f:64:61:6e:bf:41:ce:a3:cb:fb:4d:28:ee:
                    ab:82:d0:05:d6:28:20:c1:8c:60:90:fd:a7:47:23:
                    74:fc:2b:76:6c:5d:c9:59:08:8b:ce:37:e1:e7:90:
                    63:7e:c1:a0:c9:0f:08:92:96:e7:e2:c9:6a:47:d0:
                    bb:bf:0d:0d:c1:de:61:78:bd:a1:88:58:77:52:e0:
                    82:2a:c5:2c:5b:51:ad:00:fb:85:88:c7:76:78:d4:
                    c4:ff:a1:53:85:60:c8:bb:46:de:3f:64:cd:4d:9a:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A7:B6:69:6A:D8:84:5C:3F:FB:D6:2C:F6:91:74:80:21:23:6E:EF
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38332e302f32342d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:4a:17:60:33:05:6f:b3:c9:91:b9:70:43:36:64:7d:ac:3f:
         a1:3e:71:2b:44:36:c4:6c:67:d9:91:f8:04:91:b6:33:2d:59:
         d2:d5:a7:7e:c2:25:f0:49:dd:6d:60:80:24:df:ba:f2:dc:8d:
         14:2d:b3:69:cf:1a:ab:eb:29:a7:d8:5a:1e:84:be:21:ac:ed:
         8d:f5:52:7f:79:bb:18:fe:2c:16:85:77:8e:13:62:bc:bf:45:
         67:e6:e6:81:90:2a:b9:b8:0b:97:23:16:79:d8:c3:6d:67:8a:
         f3:f3:9d:bf:25:35:82:c2:d6:d1:1a:46:ee:84:c5:d5:e7:e3:
         a3:dc:51:1f:26:d1:64:11:34:04:0c:96:e0:42:8b:66:70:75:
         3b:bc:73:59:fe:0a:92:10:02:3e:87:d6:36:28:e4:21:05:11:
         46:e9:9f:66:c8:75:46:45:32:2d:ad:0f:0a:49:69:de:8c:f6:
         f2:d8:cb:1e:a4:1c:36:b3:b6:02:a9:ba:77:38:3a:ef:1c:3e:
         2f:75:86:9f:72:a1:53:91:c3:8e:44:ab:e6:55:c5:e9:fc:f4:
         a3:66:26:39:4a:76:47:3d:81:8c:5e:d2:cd:4a:a1:ec:44:29:
         4e:af:f2:05:ff:49:7a:43:06:c9:8c:85:27:74:ae:07:4c:8f:
         f9:68:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org