Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32332d3233203d3e20323639313631.roa
File:                     34352e3138312e33382e302f32332d3233203d3e20323639313631.roa (raw, json)
Hash identifier:          sQhnCu3nUHRsesHRbksX/3PFcmQHd1aI//cmsRfqpF4=
Subject key identifier:   11:F1:10:DA:3C:9C:68:79:24:F4:98:2B:FD:A3:80:1C:E5:0D:A1:BC
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       32CD6466EF23A8604C2C9365927C4F1B133F4DE0
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32332d3233203d3e20323639313631.roa
Signing time:             Thu 17 Aug 2023 04:09:36 +0000
ROA not before:           Thu 17 Aug 2023 04:04:36 +0000
ROA not after:            Thu 15 Aug 2024 04:09:36 +0000
asID:                     269161
IP address blocks:        45.181.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cd:64:66:ef:23:a8:60:4c:2c:93:65:92:7c:4f:1b:13:3f:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Aug 17 04:04:36 2023 GMT
            Not After : Aug 15 04:09:36 2024 GMT
        Subject: CN=11F110DA3C9C687924F4982BFDA3801CE50DA1BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:50:8d:c5:c4:67:f6:38:23:15:2c:e7:c6:
                    31:9d:c5:02:49:cc:a5:88:d4:4d:f2:6e:ad:21:e5:
                    52:1e:95:3c:88:2b:70:55:86:1d:c9:b2:34:f0:b9:
                    0b:7e:d6:34:05:14:f1:01:c6:16:b4:77:25:64:1b:
                    47:fd:cf:eb:2b:2f:65:4f:10:0f:74:a6:b6:03:8d:
                    3d:21:1b:57:ad:30:11:59:96:d6:fc:12:92:b8:78:
                    e0:33:7b:7e:92:d5:01:7c:3b:48:f0:0f:0c:09:ef:
                    5d:3c:2d:0a:8f:08:62:42:32:f1:2f:fd:5d:f0:c9:
                    94:99:3f:02:25:be:6e:8a:18:76:82:d2:a6:9b:f0:
                    35:33:27:d4:d6:e9:74:d4:c2:b4:84:87:8a:8b:41:
                    9b:6d:76:61:8c:e0:22:79:0e:7f:e5:64:92:34:7c:
                    ba:29:22:1d:22:03:3d:db:28:eb:67:e3:78:98:d9:
                    6a:6e:36:ac:f3:8c:d7:f0:20:df:05:f7:b9:60:b1:
                    24:b8:64:d8:5d:cc:90:cf:0e:99:79:c6:b6:97:3a:
                    b2:27:83:82:ee:54:fc:02:45:fe:55:f0:93:9f:b2:
                    9a:29:07:d6:3d:e4:38:aa:8f:72:b8:da:09:2d:dd:
                    0a:b9:49:b3:6f:fd:a1:2e:db:36:00:89:23:e7:7e:
                    93:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F1:10:DA:3C:9C:68:79:24:F4:98:2B:FD:A3:80:1C:E5:0D:A1:BC
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32332d3233203d3e20323639313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:83:d6:61:b1:8e:a1:8a:aa:99:a5:e3:90:ff:29:15:de:bf:
         ea:8b:e0:32:39:eb:32:df:7b:a7:b6:03:48:94:c3:0b:62:61:
         cf:a9:fb:31:be:f2:2b:92:ed:80:e8:14:df:c9:54:00:16:5e:
         25:34:b6:0c:86:68:69:70:ee:a2:82:5c:59:6c:a8:ce:a8:a3:
         b6:9b:87:69:78:2e:73:5b:e1:94:e0:e7:55:68:7a:33:e1:8a:
         82:1d:1f:6d:db:0d:19:eb:06:7c:97:17:ac:73:53:c4:c1:f7:
         0f:f4:6a:0a:8c:70:15:39:b6:30:4f:8f:be:61:9a:e2:6c:e3:
         55:19:d5:46:59:87:fa:81:77:d2:71:88:89:b1:b9:35:d0:96:
         c8:b1:2a:cb:de:ca:7a:54:e1:3c:ed:41:2d:fa:29:2d:9d:da:
         97:61:4f:90:9f:0f:c7:15:55:70:7c:bc:25:09:16:c9:e5:5b:
         dd:a9:4e:01:94:5a:f8:ee:e8:87:fa:12:06:44:65:86:d6:82:
         b5:3a:59:87:79:55:64:69:5f:5c:1a:57:96:41:00:6f:ce:89:
         79:c8:60:cd:d3:d6:11:d8:a8:66:4c:e7:91:4d:53:60:72:81:
         cd:eb:12:46:4c:d4:b3:86:ed:df:fd:3c:07:c9:1d:00:d0:16:
         c4:06:05:52
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMs1kZu8jqGBMLJNlknxPGxM/TeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyQjA1QzgxNzIwNzY3RTA2NjRCN0NEMzRCN0MxODI4
NUQyQzFFMjAeFw0yMzA4MTcwNDA0MzZaFw0yNDA4MTUwNDA5MzZaMDMxMTAvBgNV
BAMTKDExRjExMERBM0M5QzY4NzkyNEY0OTgyQkZEQTM4MDFDRTUwREExQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQlCNxcRn9jgjFSznxjGdxQJJ
zKWI1E3ybq0h5VIelTyIK3BVhh3JsjTwuQt+1jQFFPEBxha0dyVkG0f9z+srL2VP
EA90prYDjT0hG1etMBFZltb8EpK4eOAze36S1QF8O0jwDwwJ7108LQqPCGJCMvEv
/V3wyZSZPwIlvm6KGHaC0qab8DUzJ9TW6XTUwrSEh4qLQZttdmGM4CJ5Dn/lZJI0
fLopIh0iAz3bKOtn43iY2WpuNqzzjNfwIN8F97lgsSS4ZNhdzJDPDpl5xraXOrIn
g4LuVPwCRf5V8JOfspopB9Y95Diqj3K42gkt3Qq5SbNv/aEu2zYAiSPnfpNxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEfEQ2jycaHkk9Jgr/aOAHOUNobwwHwYDVR0j
BBgwFoAUmSsFyBcgdn4GZLfNNLfBgoXSweIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pSUXVhY0E1c3B2c3JIMXpDUEhjVU1xejdMbzE2VlVzYXVpMUJTeFJ3
OHEvMC85OTJCMDVDODE3MjA3NjdFMDY2NEI3Q0QzNEI3QzE4Mjg1RDJDMUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5MkIwNUM4MTcyMDc2N0Uw
NjY0QjdDRDM0QjdDMTgyODVEMkMxRTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daUlF1YWNBNXNwdnNySDF6Q1BIY1VNcXo3TG8xNlZVc2F1aTFCU3hSdzhxLzAv
MzQzNTJlMzEzODMxMmUzMzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbUmMA0GCSqGSIb3DQEBCwUAA4IBAQCQg9ZhsY6h
iqqZpeOQ/ykV3r/qi+AyOesy33untgNIlMMLYmHPqfsxvvIrku2A6BTfyVQAFl4l
NLYMhmhpcO6iglxZbKjOqKO2m4dpeC5zW+GU4OdVaHoz4YqCHR9t2w0Z6wZ8lxes
c1PEwfcP9GoKjHAVObYwT4++YZribONVGdVGWYf6gXfScYiJsbk10JbIsSrL3sp6
VOE87UEt+iktndqXYU+Qnw/HFVVwfLwlCRbJ5VvdqU4BlFr47uiH+hIGRGWG1oK1
OlmHeVVkaV9cGleWQQBvzol5yGDN09YR2KhmTOeRTVNgcoHN6xJGTNSzhu3f/TwH
yR0A0BbEBgVS
-----END CERTIFICATE-----
Generated at Tue Aug 22 05:12:19 2023 by rpki-client on console-fra.rpki-client.org