Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32342d3234203d3e20323639313631.roa
File:                     34352e3138312e33382e302f32342d3234203d3e20323639313631.roa (raw, json)
Hash identifier:          idnggS8i9DPdjHHZOdo88PAYgMxoyfsDNvvrgNVqYBA=
Subject key identifier:   2E:85:54:76:20:B3:61:EC:49:EB:F0:B7:0D:DF:E2:7E:60:AD:CB:39
Certificate issuer:       /CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
Certificate serial:       75AE1F900517CC713D1852E83ECAF69921FAC0F6
Authority key identifier: 99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32342d3234203d3e20323639313631.roa
Signing time:             Thu 17 Aug 2023 04:09:39 +0000
ROA not before:           Thu 17 Aug 2023 04:04:39 +0000
ROA not after:            Thu 15 Aug 2024 04:09:39 +0000
asID:                     269161
IP address blocks:        45.181.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ae:1f:90:05:17:cc:71:3d:18:52:e8:3e:ca:f6:99:21:fa:c0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Validity
            Not Before: Aug 17 04:04:39 2023 GMT
            Not After : Aug 15 04:09:39 2024 GMT
        Subject: CN=2E85547620B361EC49EBF0B70DDFE27E60ADCB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:54:e8:03:44:02:56:f2:4b:f4:54:7a:87:
                    97:91:38:4d:91:ea:64:ac:a3:2b:d5:39:d2:7f:e7:
                    6a:0a:c5:08:1a:c1:6b:e9:0f:bb:5c:16:78:b9:77:
                    b9:87:d2:59:55:dd:7b:dd:dc:c9:b0:76:20:0c:a9:
                    61:ef:e4:d6:7a:56:6e:82:76:47:e6:d3:d6:15:bf:
                    80:61:b9:6a:4c:d2:e8:36:e7:19:a6:47:91:15:ef:
                    8a:03:2e:4d:49:d5:62:00:7e:ad:be:57:dd:d8:6f:
                    0f:6e:5e:57:68:8f:71:a0:4e:b6:7d:f7:43:a7:c3:
                    1b:1c:06:ec:42:68:6c:58:6c:e5:db:f4:02:e5:cd:
                    b4:0c:3c:24:1f:db:e6:75:2c:aa:e0:fa:86:e1:85:
                    5d:c0:87:a9:d4:ee:2c:6b:5c:1a:ef:a3:cd:7d:5f:
                    d9:17:32:a6:f0:15:54:22:3f:91:10:03:38:be:94:
                    2b:9f:54:c6:f6:76:22:2e:8b:6b:00:e1:f6:2a:2a:
                    a4:6e:75:00:42:77:3d:22:ff:6a:54:51:15:eb:6f:
                    02:ec:d9:1b:81:ab:76:34:52:1a:c7:95:f2:46:62:
                    c2:34:02:7d:8e:f4:f2:eb:27:ce:8e:32:40:7f:fb:
                    a1:34:61:c7:3d:f1:68:ff:fc:6b:4e:36:f0:ab:6b:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:85:54:76:20:B3:61:EC:49:EB:F0:B7:0D:DF:E2:7E:60:AD:CB:39
            X509v3 Authority Key Identifier:
                keyid:99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32342d3234203d3e20323639313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:f5:07:6a:0b:c5:6b:37:06:6b:94:f7:c3:31:32:8c:5d:
         40:7d:66:ae:82:06:1e:aa:6f:62:4f:0f:af:12:b2:a4:d6:31:
         03:1b:e1:43:d3:34:ad:a0:59:85:33:82:34:8d:63:07:e8:2e:
         38:5c:c2:38:b4:99:aa:64:7e:ad:f2:db:66:3f:94:ac:61:20:
         af:ea:a0:b9:0b:62:ea:8f:02:bd:51:c2:47:4a:f4:51:80:47:
         0a:6d:4a:d1:5f:54:61:7d:f7:7a:87:e2:c1:0e:ac:24:3b:7d:
         66:93:03:a7:2a:40:13:1e:a4:42:4d:eb:8a:5d:be:71:48:2a:
         5d:0c:3a:2c:73:ca:ec:be:f5:fd:77:60:b3:e2:20:6a:11:52:
         18:de:f6:32:0b:0c:d3:aa:ea:dc:75:6d:6c:47:84:ff:c5:e8:
         a7:b7:cd:84:7f:e3:b7:aa:9c:3a:7f:56:a8:80:2b:83:55:cb:
         47:aa:d5:a3:b0:2a:f3:9d:55:c4:78:14:11:15:f3:61:92:ad:
         41:34:3f:8c:4f:92:af:b3:59:54:48:3a:07:55:aa:2a:3a:72:
         db:b7:f6:e7:39:0d:43:02:ce:85:71:3f:77:72:e3:69:db:e0:
         a3:97:87:78:fb:61:e6:c9:89:42:bb:0e:2f:8c:96:c4:97:30:
         d1:05:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 05:12:19 2023 by rpki-client on console-fra.rpki-client.org