Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa
File:                     34352e3136362e35322e302f32322d3232203d3e20323637393336.roa (raw, json)
Hash identifier:          ACK+olqujMynLaZNlDSHU78BJvK9bnJQXoCHToXSTXM=
Subject key identifier:   3D:CE:D0:D5:1E:0C:03:B5:85:EA:5D:42:4A:30:57:A7:EC:5D:5A:30
Certificate issuer:       /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial:       6DB6FFA64D17A7EB7A09539421ACA110EB1B1DE0
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa
Signing time:             Thu 04 Apr 2024 09:33:00 +0000
ROA not before:           Thu 04 Apr 2024 09:28:00 +0000
ROA not after:            Thu 03 Apr 2025 09:33:00 +0000
asID:                     267936
IP address blocks:        45.166.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 13:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b6:ff:a6:4d:17:a7:eb:7a:09:53:94:21:ac:a1:10:eb:1b:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
        Validity
            Not Before: Apr  4 09:28:00 2024 GMT
            Not After : Apr  3 09:33:00 2025 GMT
        Subject: CN=3DCED0D51E0C03B585EA5D424A3057A7EC5D5A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:89:b1:31:31:0b:9f:9d:85:8f:7f:4d:df:
                    7d:e4:2a:8b:a2:57:55:5c:10:63:14:a3:e7:b4:a1:
                    23:2b:49:ed:ba:8b:78:80:a6:43:1d:e3:7a:bc:17:
                    e0:69:14:46:34:3c:38:04:31:65:2a:38:3d:8d:39:
                    d1:4d:86:7b:bb:8e:d3:4d:69:12:3e:c9:72:58:53:
                    7e:bc:7e:06:dd:25:ec:ee:bd:d2:9a:bc:61:45:9d:
                    50:81:3c:5a:f6:98:2e:7e:88:2c:60:eb:55:ba:be:
                    97:a5:9f:3f:56:04:4b:ec:fa:00:93:9f:bc:9e:80:
                    e9:cb:20:e6:a0:89:14:17:19:2f:f7:5d:5b:75:07:
                    f0:9a:81:49:3e:9c:62:6c:5c:ff:63:0c:d6:15:94:
                    c3:3c:40:cd:08:b4:73:fd:c7:70:dc:1a:b3:28:86:
                    33:71:60:93:e2:39:d8:a0:eb:11:7a:7c:f4:c5:31:
                    bc:db:f0:18:42:a0:d5:d4:59:b5:76:ef:11:be:04:
                    00:8f:8d:39:6f:20:25:9a:24:27:84:4c:13:23:13:
                    56:8c:dd:58:b8:f1:43:23:ab:3f:f1:b4:c1:1a:1d:
                    f4:17:b2:5f:df:67:a8:8d:f2:9b:3c:44:3c:d4:6f:
                    f6:9f:d1:c1:6d:92:15:01:de:a2:e8:18:73:4c:94:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CE:D0:D5:1E:0C:03:B5:85:EA:5D:42:4A:30:57:A7:EC:5D:5A:30
            X509v3 Authority Key Identifier:
                keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:63:e0:52:c1:0a:03:3b:30:2c:c3:e1:d6:a7:a9:41:78:
         aa:2c:f0:bc:bd:8b:38:52:5c:17:51:76:e4:24:7f:5a:0a:33:
         e9:81:b6:5e:b0:c5:ef:47:8f:3c:95:b8:6f:42:62:d8:31:ef:
         9f:9e:5e:25:db:62:98:18:40:54:2b:e4:1e:65:f1:4c:94:f8:
         03:2a:0d:cc:e5:30:9a:22:84:55:98:c6:91:6d:fd:72:3d:63:
         92:f0:af:3b:87:8b:3d:8b:cb:5d:86:08:58:b9:7e:8f:da:a3:
         81:2d:cc:1a:2b:f3:8c:f2:12:f8:56:54:a1:99:03:34:3a:e7:
         85:59:42:d9:8d:f3:13:2e:42:69:fc:5a:54:38:12:9b:8f:13:
         6d:a9:09:46:66:e1:80:1f:fc:dd:48:d8:c3:13:4d:fb:75:6c:
         d1:07:40:3a:38:86:68:26:a2:ed:98:a1:57:7e:15:e5:e8:3a:
         81:21:29:11:75:24:4f:a9:dd:b7:e4:ae:e8:e2:c2:29:05:c4:
         0b:89:8c:35:5b:10:ee:09:5e:99:c5:cd:94:38:7e:fb:74:29:
         18:e8:5e:1d:eb:51:af:00:63:c5:92:93:d6:a2:c3:7f:70:c4:
         43:79:8b:76:fb:3c:81:5a:b2:e7:4b:32:20:e2:c0:44:bc:e6:
         05:a6:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 16:55:33 2024 by rpki-client on console-fra.rpki-client.org