Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32332d3233203d3e20323639313631.roa
File:                     34352e3138312e33362e302f32332d3233203d3e20323639313631.roa (raw, json)
Hash identifier:          V99Z6/EXwsNt0XmpE67+RYYLIeyJiB2s45iioGCElpw=
Subject key identifier:   14:44:7D:EB:29:CC:25:75:A3:6C:4C:19:B0:01:26:4F:D3:45:65:8D
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       4E2158537812CEF00D7B00130894540B01F1E4A5
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32332d3233203d3e20323639313631.roa
Signing time:             Thu 17 Aug 2023 04:09:34 +0000
ROA not before:           Thu 17 Aug 2023 04:04:34 +0000
ROA not after:            Thu 15 Aug 2024 04:09:34 +0000
asID:                     269161
IP address blocks:        45.181.36.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:21:58:53:78:12:ce:f0:0d:7b:00:13:08:94:54:0b:01:f1:e4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Aug 17 04:04:34 2023 GMT
            Not After : Aug 15 04:09:34 2024 GMT
        Subject: CN=14447DEB29CC2575A36C4C19B001264FD345658D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:73:f7:aa:35:c4:8f:1d:d1:53:27:de:1d:
                    a8:43:97:91:e0:50:54:5c:58:d8:5c:0d:16:d8:4b:
                    9c:d9:e7:e6:e0:49:92:a5:b5:1b:9f:ec:51:61:30:
                    67:a5:ac:a3:fd:55:0a:76:3c:20:09:10:9c:92:0d:
                    9e:0a:ac:87:25:c5:16:8e:5c:fc:b0:d2:77:5d:39:
                    42:a6:d3:ae:18:1e:86:42:38:f5:7a:26:24:f3:d8:
                    bd:8d:ff:e0:d9:73:2c:2c:21:18:3b:de:d7:2b:c8:
                    4d:19:a0:78:8e:84:66:5b:90:be:86:20:d1:4f:cf:
                    d1:09:11:1d:d1:18:92:64:bb:6f:c2:d0:46:aa:07:
                    e2:b0:75:09:d3:63:61:7a:a1:8a:5b:cd:74:32:b7:
                    e5:6f:c3:a0:5d:65:65:ac:94:a5:a1:b4:c3:08:08:
                    ba:0a:5e:e8:60:a7:74:d8:4d:ba:fe:2b:bc:61:8e:
                    72:d1:1e:4d:9d:82:a4:7f:5e:48:d3:d9:83:67:00:
                    5f:7d:7d:62:20:1a:8a:75:ca:42:fb:ee:c3:da:da:
                    69:1f:27:96:1b:b2:8c:c5:68:32:6a:6c:6c:ef:68:
                    59:89:0d:7c:55:70:83:ec:a9:c3:ec:e5:d6:39:bc:
                    ff:5c:67:61:00:f7:f7:43:2f:4c:e0:e6:c3:24:5d:
                    8c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:44:7D:EB:29:CC:25:75:A3:6C:4C:19:B0:01:26:4F:D3:45:65:8D
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32332d3233203d3e20323639313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:69:fe:d4:6a:ac:98:af:7c:8d:32:d4:4c:cf:34:f7:f6:ab:
         0b:bd:9e:4f:97:71:77:ce:13:03:d4:c4:49:07:aa:29:37:fb:
         61:99:fa:3e:6c:11:c8:32:90:2e:20:d7:70:34:60:c4:3a:78:
         80:a2:a7:e2:79:8f:cf:1a:2b:ef:33:07:50:7a:3a:90:d3:41:
         73:89:f2:a0:e0:9b:e4:a2:9c:a2:44:be:cb:72:b6:77:63:00:
         e1:81:03:df:72:e9:e9:e9:5e:48:c2:2e:23:75:c1:95:51:cb:
         43:4f:6f:d5:f8:d2:02:df:4d:25:90:90:ad:db:6a:37:00:37:
         d2:6a:02:94:52:81:0e:2a:6f:64:eb:3d:41:28:b0:d9:cd:5e:
         cd:85:4a:28:84:94:73:da:6b:f9:5e:3f:8d:09:70:2d:a5:fe:
         a3:69:ae:93:2e:76:d6:01:56:57:8d:1d:ef:fa:95:f4:bf:ab:
         43:cc:28:f9:ca:f3:7f:3c:e1:e1:ab:22:73:d2:ff:b4:66:09:
         86:7a:01:44:95:d7:fa:5f:a2:5c:b6:ed:60:5f:f5:05:7d:7e:
         9f:49:6b:58:94:15:d9:ab:5d:8f:9f:92:4e:45:62:a2:b4:15:
         44:8f:02:ee:f0:c7:d8:e8:78:48:6e:f5:22:d8:76:04:0d:1d:
         a1:38:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 05:12:19 2023 by rpki-client on console-fra.rpki-client.org