Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136302e302f32332d3233203d3e20323638383538.roa
File:                     34352e3137342e3136302e302f32332d3233203d3e20323638383538.roa (raw, json)
Hash identifier:          OlYSn5jFYEtZdwVlAHf3ZPBqEBZihgZYE6EmdRQDL5Y=
Subject key identifier:   8D:28:EC:0F:BF:34:7B:6F:FD:C2:BE:D9:31:B2:AA:5E:B7:4C:34:B9
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       121F7715ECD0EBB1347BDEB5C7F52D335AD7F27B
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136302e302f32332d3233203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:52 +0000
ROA not before:           Wed 03 Apr 2024 20:38:52 +0000
ROA not after:            Wed 02 Apr 2025 20:43:52 +0000
asID:                     268858
IP address blocks:        45.174.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 13:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1f:77:15:ec:d0:eb:b1:34:7b:de:b5:c7:f5:2d:33:5a:d7:f2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:52 2024 GMT
            Not After : Apr  2 20:43:52 2025 GMT
        Subject: CN=8D28EC0FBF347B6FFDC2BED931B2AA5EB74C34B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:f6:0b:10:61:bd:d8:70:35:f2:db:f4:4b:
                    4d:7c:3b:d1:de:bb:72:aa:74:04:13:88:38:bc:07:
                    e3:52:42:21:67:d8:1a:93:b4:b9:db:67:2b:6e:f8:
                    1a:1e:3c:7f:34:02:db:9c:93:d2:94:ea:58:2f:3b:
                    ab:70:4c:82:f4:43:39:66:a0:b8:0d:58:1a:ad:ba:
                    e9:31:69:d1:18:30:bc:c9:4c:45:03:96:e2:e2:0a:
                    0d:2c:61:37:72:38:22:8e:92:2c:74:0b:19:8f:91:
                    e7:db:54:34:3a:e2:ae:1b:ba:a3:66:cf:87:f5:4c:
                    99:56:8f:5e:94:23:f9:fe:93:0c:64:ca:4b:b8:46:
                    47:f7:b5:e2:2c:f3:7f:f7:3c:95:21:f8:77:e1:89:
                    81:e1:79:16:c1:90:e0:97:06:b8:ff:18:a4:2e:51:
                    44:9f:4f:7f:4d:5a:7b:63:7c:e6:bd:0c:6a:e1:84:
                    5e:5e:0d:1b:ff:40:22:06:af:59:45:20:43:c7:f6:
                    46:6b:ec:d0:58:35:6d:bb:dc:27:e2:11:28:ce:c4:
                    8d:c3:98:38:cb:d2:ea:72:80:ba:4f:d7:09:71:1e:
                    9c:85:b1:43:32:ff:61:49:1b:c3:0e:7b:0a:c5:33:
                    2b:37:47:7d:9f:0e:19:2a:74:4f:f5:94:4c:56:2e:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:28:EC:0F:BF:34:7B:6F:FD:C2:BE:D9:31:B2:AA:5E:B7:4C:34:B9
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136302e302f32332d3233203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:8e:ba:aa:ca:76:4c:1d:5b:47:0b:5d:91:32:2a:d4:11:
         d4:7e:92:a8:ce:c8:26:71:c7:b5:4d:7c:23:5b:1a:36:ca:fd:
         0c:a3:36:bc:c4:6e:cb:a1:64:4e:91:e5:a9:78:77:7f:d9:74:
         36:b5:49:10:20:06:ae:fc:6e:2c:d9:3a:87:75:23:44:c4:d2:
         42:95:d8:5c:94:4d:b7:ea:31:3b:43:1e:fd:ad:e3:2f:2b:9a:
         66:50:7e:b8:6c:39:08:f1:93:4c:9d:99:e9:3d:a0:62:6e:1a:
         7d:fa:15:05:f4:18:bb:bd:75:13:6b:b0:c8:15:bb:14:02:e3:
         66:fd:41:ff:f0:02:49:52:ba:b7:ca:2a:7a:f2:09:6f:bb:80:
         ec:4a:76:5f:d7:1b:db:cd:e2:61:3a:4d:d0:b8:24:61:06:72:
         a7:67:89:59:19:ab:94:0c:2c:40:60:f0:a1:15:2b:cc:8f:dc:
         84:a9:3a:1f:d0:e7:a8:0e:31:25:25:a3:c0:36:2a:c7:8d:06:
         09:41:01:22:63:03:0a:38:3c:94:a2:5d:21:79:39:ea:4c:d0:
         a5:34:90:b3:08:4f:60:35:16:a3:3e:42:94:1b:98:cd:3d:e8:
         8b:c1:33:38:2f:1d:d1:93:c1:40:5f:b5:f3:9e:f3:c2:21:91:
         55:72:df:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEh93FezQ67E0e961x/UtM1rX8nswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZENDMzMjlFMzk4NjAxNjM3MzMzNkY0REM3MTUzNURE
RERBQTMzODAeFw0yNDA0MDMyMDM4NTJaFw0yNTA0MDIyMDQzNTJaMDMxMTAvBgNV
BAMTKDhEMjhFQzBGQkYzNDdCNkZGREMyQkVEOTMxQjJBQTVFQjc0QzM0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWefYLEGG92HA18tv0S018O9He
u3KqdAQTiDi8B+NSQiFn2BqTtLnbZytu+BoePH80Atuck9KU6lgvO6twTIL0Qzlm
oLgNWBqtuukxadEYMLzJTEUDluLiCg0sYTdyOCKOkix0CxmPkefbVDQ64q4buqNm
z4f1TJlWj16UI/n+kwxkyku4Rkf3teIs83/3PJUh+HfhiYHheRbBkOCXBrj/GKQu
UUSfT39NWntjfOa9DGrhhF5eDRv/QCIGr1lFIEPH9kZr7NBYNW273CfiESjOxI3D
mDjL0upygLpP1wlxHpyFsUMy/2FJG8MOewrFMys3R32fDhkqdE/1lExWLr51AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjSjsD780e2/9wr7ZMbKqXrdMNLkwHwYDVR0j
BBgwFoAUj9QzKeOYYBY3Mzb03HFTXd3aozgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMS84RkQ0MzMyOUUzOTg2MDE2MzczMzM2RjREQzcxNTM1REREREFBMzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGRDQzMzI5RTM5ODYwMTYz
NzMzMzZGNERDNzE1MzVEREREQUEzMzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzEv
MzQzNTJlMzEzNzM0MmUzMTM2MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzODM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtrqAwDQYJKoZIhvcNAQELBQADggEBADX2jrqq
ynZMHVtHC12RMirUEdR+kqjOyCZxx7VNfCNbGjbK/QyjNrzEbsuhZE6R5al4d3/Z
dDa1SRAgBq78bizZOod1I0TE0kKV2FyUTbfqMTtDHv2t4y8rmmZQfrhsOQjxk0yd
mek9oGJuGn36FQX0GLu9dRNrsMgVuxQC42b9Qf/wAklSurfKKnryCW+7gOxKdl/X
G9vN4mE6TdC4JGEGcqdniVkZq5QMLEBg8KEVK8yP3ISpOh/Q56gOMSUlo8A2KseN
BglBASJjAwo4PJSiXSF5OepM0KU0kLMIT2A1FqM+QpQbmM096IvBMzgvHdGTwUBf
tfOe88IhkVVy30g=
-----END CERTIFICATE-----
Generated at Mon Jul 15 15:35:17 2024 by rpki-client on console-ams.rpki-client.org