Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136302e302f32342d3234203d3e20323638383538.roa
File:                     34352e3137342e3136302e302f32342d3234203d3e20323638383538.roa (raw, json)
Hash identifier:          mUXalIbvuolO0xW0bH+iWPq3z3SHe2ZKauCQDhcu3VY=
Subject key identifier:   5C:01:11:C8:6C:FD:85:93:D2:6C:0A:DA:AD:56:9E:90:65:A0:DF:55
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       3D86FA6FDB75A9E9E196B1E497F2C4079EF5ED65
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136302e302f32342d3234203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:51 +0000
ROA not before:           Wed 03 Apr 2024 20:38:51 +0000
ROA not after:            Wed 02 Apr 2025 20:43:51 +0000
asID:                     268858
IP address blocks:        45.174.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 13:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:86:fa:6f:db:75:a9:e9:e1:96:b1:e4:97:f2:c4:07:9e:f5:ed:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:51 2024 GMT
            Not After : Apr  2 20:43:51 2025 GMT
        Subject: CN=5C0111C86CFD8593D26C0ADAAD569E9065A0DF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:10:9d:51:9f:67:b1:25:ec:a4:c6:ea:39:
                    40:a8:02:ef:20:a2:62:61:03:17:97:bb:97:a1:2a:
                    59:1c:d3:ff:7a:d0:33:50:5a:da:8a:73:3b:3a:1e:
                    48:b4:fc:5e:27:69:41:53:ee:29:d5:8b:b0:b0:50:
                    88:e2:22:36:2e:fd:76:52:f0:bf:3f:e8:75:f9:3c:
                    9b:66:0d:80:29:36:c9:11:83:b6:08:b3:7f:f5:c8:
                    72:f0:5c:e7:48:c4:ea:9c:09:8d:e2:30:45:3a:57:
                    4c:2f:ce:3e:b1:9c:8c:11:80:4c:f8:a7:63:ff:4e:
                    61:ad:50:24:2b:0c:11:f9:66:a9:48:ea:c0:5d:30:
                    40:4f:ed:6a:fa:5e:fd:9e:9c:ef:46:10:2f:33:b0:
                    60:e6:ac:cf:d4:07:79:2b:73:23:d2:1c:80:86:84:
                    f3:41:12:19:1a:73:63:58:dc:4b:01:76:df:0c:c8:
                    a2:61:af:b4:b4:3c:00:1a:3b:6b:e8:4c:9e:6a:a4:
                    4a:65:ba:40:ad:6b:67:4b:11:88:4e:69:3c:2a:14:
                    de:34:bd:89:a5:22:ed:58:f2:ac:1b:38:c0:d6:d6:
                    46:b1:4b:1b:51:b5:a9:24:bc:fc:3f:eb:a1:dd:d3:
                    7d:66:84:47:9d:0c:c8:b3:8a:35:41:aa:70:53:74:
                    1a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:01:11:C8:6C:FD:85:93:D2:6C:0A:DA:AD:56:9E:90:65:A0:DF:55
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/34352e3137342e3136302e302f32342d3234203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:c1:44:d4:5c:b9:d7:d5:44:8e:53:31:af:b9:a5:67:28:
         8a:6e:01:7f:ae:fc:03:97:37:83:c3:dd:1a:06:8b:e5:04:a7:
         70:d0:10:24:6c:b7:63:3c:90:c0:39:4d:2c:12:53:c1:0b:37:
         86:55:1b:d8:88:87:fc:ee:7d:e2:57:5e:8c:71:bd:03:8b:e3:
         e3:d8:59:3b:79:b5:a2:6b:d1:2e:ad:dd:d2:db:ed:62:e1:d0:
         16:e7:07:99:8d:25:7e:a2:42:16:54:b8:7d:42:97:db:4f:10:
         e0:6b:54:3c:1e:6c:75:e3:26:3c:05:8e:28:44:6b:e4:2c:0a:
         1f:ce:59:5d:f4:93:5c:7f:a1:be:48:23:ca:96:b7:8d:f5:c8:
         0d:20:99:a3:c6:1f:d3:0b:e0:ef:4f:c8:ce:8a:90:e9:26:7c:
         11:56:c0:54:f5:31:05:85:a9:92:00:7f:2f:40:eb:4a:87:ea:
         b5:d2:5e:62:23:e6:64:c9:11:fd:a5:7c:bc:8e:08:f9:10:f2:
         a9:12:7f:18:b2:58:ca:da:fe:08:e5:ab:8c:11:00:b3:03:c5:
         97:7e:81:3a:83:0a:14:dc:e5:e6:27:6f:8e:82:12:4f:51:03:
         15:f4:df:d0:9b:dd:6c:a8:b1:28:1f:54:6f:52:74:0c:9c:70:
         89:11:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 15:35:17 2024 by rpki-client on console-ams.rpki-client.org