Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31352e302f32342d3234203d3e20323638303335.roa
File:                     34352e3136382e31352e302f32342d3234203d3e20323638303335.roa (raw, json)
Hash identifier:          KEuIG9XSpmMyPZ1/b8292AdagrJu3G8XPHYq3GhZeHs=
Subject key identifier:   A2:BD:CA:97:39:45:93:AA:B0:51:8E:1B:80:D0:D7:21:80:EF:CB:FA
Certificate issuer:       /CN=2FB412543B856F996765C01B679EECB97CE613A2
Certificate serial:       24B5EFD3E603174C32DB6B82B3F7CFB16433E0E5
Authority key identifier: 2F:B4:12:54:3B:85:6F:99:67:65:C0:1B:67:9E:EC:B9:7C:E6:13:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FB412543B856F996765C01B679EECB97CE613A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31352e302f32342d3234203d3e20323638303335.roa
Signing time:             Tue 20 Dec 2022 11:46:27 +0000
ROA not before:           Tue 20 Dec 2022 11:41:27 +0000
ROA not after:            Tue 19 Dec 2023 11:46:27 +0000
asID:                     268035
IP address blocks:        45.168.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b5:ef:d3:e6:03:17:4c:32:db:6b:82:b3:f7:cf:b1:64:33:e0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB412543B856F996765C01B679EECB97CE613A2
        Validity
            Not Before: Dec 20 11:41:27 2022 GMT
            Not After : Dec 19 11:46:27 2023 GMT
        Subject: CN=A2BDCA97394593AAB0518E1B80D0D72180EFCBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ce:7a:70:38:29:06:b7:76:ab:6e:4d:77:ab:
                    e0:fd:bc:7d:61:d5:71:c7:c9:54:d3:dc:9c:39:40:
                    ed:9b:43:2d:44:c1:44:51:5a:06:ae:7b:13:3c:b4:
                    98:d8:68:0b:b5:ea:76:2f:18:be:23:1b:44:ce:85:
                    10:ce:09:d9:1e:18:07:68:c1:e1:82:3c:cc:23:97:
                    37:d2:55:79:06:93:e0:d3:fa:f4:aa:80:1f:00:18:
                    92:bb:53:81:53:23:e9:56:fa:4e:e1:2c:d0:35:92:
                    1c:ab:b5:8d:cc:f8:42:e0:5e:61:58:27:3c:25:33:
                    23:0c:41:3f:20:e3:42:1a:47:33:2f:cd:1c:ee:03:
                    b2:cf:3b:a9:34:cc:ec:5b:8b:97:51:01:5d:e1:40:
                    71:8e:ce:d5:b9:e3:96:84:5a:2a:de:97:41:1b:76:
                    e9:c4:2c:4d:e3:f4:4a:14:ad:7c:32:d5:4c:40:3d:
                    2a:9c:bd:af:ff:44:4b:0b:27:a0:7c:37:53:02:9d:
                    ad:2d:37:63:6c:bb:6f:00:86:cf:b0:4f:65:3a:64:
                    53:11:30:07:11:de:04:0d:7c:3d:54:95:9d:6a:59:
                    65:f5:c8:9f:38:56:7d:60:b7:1e:03:97:ec:1d:f3:
                    1c:8a:de:a7:e9:73:19:82:4b:e4:ed:e7:17:c2:f7:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BD:CA:97:39:45:93:AA:B0:51:8E:1B:80:D0:D7:21:80:EF:CB:FA
            X509v3 Authority Key Identifier:
                keyid:2F:B4:12:54:3B:85:6F:99:67:65:C0:1B:67:9E:EC:B9:7C:E6:13:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/2FB412543B856F996765C01B679EECB97CE613A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FB412543B856F996765C01B679EECB97CE613A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31352e302f32342d3234203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:08:bb:f7:cc:f1:cd:af:8c:c5:ff:ba:a0:da:71:20:c4:2f:
         31:c0:54:ae:80:88:8d:93:55:7a:5d:f3:94:e6:4b:78:61:21:
         c5:af:94:e1:9a:e3:f1:0f:a2:59:af:b2:1e:c1:f4:37:6c:c6:
         bf:d3:52:b0:cd:b3:64:f0:84:02:73:e1:34:dc:89:d5:e1:22:
         f9:9b:16:3e:45:51:17:ef:9a:34:aa:85:8b:46:23:71:77:f8:
         69:84:6c:10:a8:9d:c0:66:d1:09:2a:0c:a5:73:9d:b4:0b:67:
         59:39:e3:a3:7d:80:3f:0f:f7:59:69:7c:51:30:f9:54:85:79:
         7c:49:04:80:92:bc:ab:aa:89:7c:c8:27:54:4f:f0:fe:d9:11:
         91:46:e6:6a:19:5a:38:ce:70:08:8e:85:18:db:71:67:85:76:
         95:b7:2c:de:73:68:6e:a3:4e:ac:de:80:1f:0c:ea:cb:db:3c:
         45:65:28:aa:da:9c:f4:c0:42:12:f2:4c:fe:f2:79:f5:cf:5b:
         6a:26:e0:0e:f4:a7:06:11:55:44:7a:96:a9:6f:e1:0f:e5:8e:
         12:af:6b:b6:48:13:ef:29:d8:46:cc:4e:b2:fa:38:0a:4f:d4:
         b6:65:c7:0e:4b:f7:96:d5:22:11:c5:30:07:e4:83:ea:c3:24:
         27:bb:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:23 2023 by rpki-client on console-fra.rpki-client.org