Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/34352e3137382e3234312e302f32342d3234203d3e20323639313135.roa
File:                     34352e3137382e3234312e302f32342d3234203d3e20323639313135.roa (raw, json)
Hash identifier:          jEauBAhbfNHolNtgAl42jt3EmPK2MgbCpYzkr8dk/zU=
Subject key identifier:   5A:C7:D5:11:71:A2:79:44:69:FB:A0:12:B9:3E:5D:18:24:07:92:8B
Certificate issuer:       /CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
Certificate serial:       38393F70D34C5A154ADFF32D5F808FC899081549
Authority key identifier: 37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/34352e3137382e3234312e302f32342d3234203d3e20323639313135.roa
Signing time:             Tue 23 Apr 2024 12:43:22 +0000
ROA not before:           Tue 23 Apr 2024 12:38:22 +0000
ROA not after:            Tue 22 Apr 2025 12:43:22 +0000
asID:                     269115
IP address blocks:        45.178.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:39:3f:70:d3:4c:5a:15:4a:df:f3:2d:5f:80:8f:c8:99:08:15:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
        Validity
            Not Before: Apr 23 12:38:22 2024 GMT
            Not After : Apr 22 12:43:22 2025 GMT
        Subject: CN=5AC7D51171A2794469FBA012B93E5D182407928B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:ba:29:c2:d6:49:20:11:f1:3c:2f:c7:72:
                    8a:3c:6c:2a:d8:c3:98:51:82:86:4e:a8:58:17:95:
                    8b:3d:61:bc:49:de:52:e4:a7:46:9d:58:fe:07:b9:
                    8f:98:10:3a:83:4a:3a:52:19:12:60:a6:5e:a4:58:
                    bf:d8:a6:b2:39:19:59:5e:a1:be:23:f7:e9:35:3b:
                    d2:bf:cb:2c:20:8a:8f:1e:5e:4b:81:38:2b:46:30:
                    94:e2:ab:3d:46:91:1b:03:42:bd:f3:9a:cf:5c:c2:
                    77:cb:98:f2:52:9b:fd:7b:cb:51:42:ed:34:0e:f5:
                    66:ff:33:52:07:18:09:55:a2:54:d6:c1:fd:0e:7c:
                    ce:58:68:9d:fb:74:69:e7:84:a4:71:0d:7c:d9:1a:
                    7f:94:73:a8:96:a4:fc:f8:7d:b0:65:e8:cd:97:22:
                    fc:2d:61:20:b4:00:6e:50:b4:0e:01:1c:73:e2:33:
                    75:2d:58:90:83:f7:04:38:e5:59:49:87:90:28:5d:
                    38:42:b1:31:1e:af:2c:b2:3e:17:9b:2e:03:68:4b:
                    ef:8a:83:c4:a5:6a:82:3b:44:25:4a:bd:b1:b9:e8:
                    5a:60:31:a7:67:e9:fb:57:ef:e1:61:4f:f6:08:fd:
                    fa:8b:8a:9e:c8:9a:d4:b5:e5:65:81:2d:30:47:29:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C7:D5:11:71:A2:79:44:69:FB:A0:12:B9:3E:5D:18:24:07:92:8B
            X509v3 Authority Key Identifier:
                keyid:37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/34352e3137382e3234312e302f32342d3234203d3e20323639313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:bf:57:f0:ab:82:41:67:43:aa:47:5d:bd:9e:5b:2a:f9:
         af:98:4f:bd:0e:4a:84:74:ec:41:d8:e6:a0:a9:02:9f:f3:40:
         da:19:ad:58:65:a2:40:30:4c:7b:f6:2f:70:da:28:b2:d1:40:
         9a:85:4b:8d:d9:16:89:a9:e4:68:12:dd:88:2a:dc:50:de:33:
         54:18:97:d1:ae:ec:02:60:47:a0:77:db:cb:71:4a:6e:98:9c:
         59:66:8a:15:88:70:9a:f0:82:85:00:50:50:3c:0c:9d:ad:93:
         2a:7a:94:d2:12:c0:1a:b2:ad:8e:f6:33:11:e7:c7:eb:ea:01:
         3c:f6:ee:1e:aa:ea:f4:67:ce:da:cb:33:b4:33:c6:18:75:6a:
         d6:ef:f0:5f:c9:30:38:44:0e:de:b4:b4:0c:53:9b:f9:8c:f9:
         fa:ec:7c:3b:63:45:89:f4:85:89:02:9b:31:ee:62:0d:0d:28:
         b5:0a:44:c4:45:d0:52:a1:76:14:da:3b:e1:34:50:15:90:ca:
         2c:cf:54:d6:95:b5:9e:80:87:36:54:2b:43:52:10:c9:f0:3c:
         08:77:3b:60:59:4b:db:4c:c1:be:3e:bb:d0:17:6f:83:9b:a4:
         13:d9:43:a8:49:b6:20:7a:af:50:df:9c:67:f9:a5:9a:26:55:
         15:78:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org