Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32342d3234203d3e20323637393336.roa
File:                     34352e3136362e35322e302f32342d3234203d3e20323637393336.roa (raw, json)
Hash identifier:          78srXGrBL4H8olgFbtI9gWYlTaqLm11QN+LMdjYy2jw=
Subject key identifier:   B3:EC:78:28:B1:B7:B2:CB:42:09:22:33:C6:49:2E:1F:42:C7:5E:A1
Certificate issuer:       /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial:       72FF6C5F70DE4062F6ED0766E778B66059887E8B
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32342d3234203d3e20323637393336.roa
Signing time:             Thu 04 Apr 2024 09:33:05 +0000
ROA not before:           Thu 04 Apr 2024 09:28:05 +0000
ROA not after:            Thu 03 Apr 2025 09:33:05 +0000
asID:                     267936
IP address blocks:        45.166.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 13:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ff:6c:5f:70:de:40:62:f6:ed:07:66:e7:78:b6:60:59:88:7e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
        Validity
            Not Before: Apr  4 09:28:05 2024 GMT
            Not After : Apr  3 09:33:05 2025 GMT
        Subject: CN=B3EC7828B1B7B2CB42092233C6492E1F42C75EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:94:63:7a:23:a6:e9:bd:26:d9:fa:2b:a7:
                    ef:7a:cd:31:e5:52:a6:35:82:52:f1:23:50:bb:58:
                    71:07:59:78:24:be:d3:c8:3f:dd:4b:39:26:fb:dd:
                    f1:4f:f0:5d:04:d2:65:f2:ff:97:a2:c3:d9:73:58:
                    da:ad:e9:49:cd:7b:08:04:86:78:df:84:e7:df:8c:
                    6b:99:2c:03:ad:2e:b3:45:2c:29:b7:74:e8:c8:94:
                    83:a3:f7:77:49:7c:cb:29:7b:00:a7:e6:b7:b2:4d:
                    18:58:15:3e:07:2f:67:44:2d:f7:16:1e:0f:c5:69:
                    b8:bb:06:ca:62:69:2b:03:57:5e:9d:19:3e:56:09:
                    3a:fb:c8:19:11:a7:1d:06:3f:6f:22:4c:ad:6f:06:
                    c4:50:3e:92:19:d4:92:e1:c7:d5:f7:41:a3:b0:73:
                    af:c6:1e:62:e1:f2:6b:93:51:41:28:f9:12:b9:ac:
                    d1:40:e2:4d:f8:e5:89:42:0b:c7:f8:77:21:d3:c8:
                    52:cb:19:91:d5:b4:4e:30:e5:d0:a1:2f:fd:74:56:
                    3e:a3:63:2b:88:dc:67:1d:0d:d4:b2:aa:69:69:b3:
                    47:68:e3:23:53:65:e2:32:7a:b2:b9:7a:87:ad:05:
                    13:c3:b3:73:3f:80:18:d8:77:78:4c:d4:4f:08:b3:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:78:28:B1:B7:B2:CB:42:09:22:33:C6:49:2E:1F:42:C7:5E:A1
            X509v3 Authority Key Identifier:
                keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32342d3234203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a1:a0:f0:77:dc:7b:16:09:a5:bd:6a:42:6e:f8:e4:e7:bc:
         45:6b:3c:b0:5a:d9:d1:fb:d6:3c:00:0b:87:5a:87:7e:6b:d5:
         48:07:fe:aa:54:e0:33:66:79:be:a3:3a:a6:98:d6:d5:56:d7:
         13:61:64:7d:61:7a:c1:0d:2d:37:32:0b:89:74:76:15:96:5d:
         75:07:2c:ac:60:8d:1c:25:ef:84:36:55:f9:72:2b:15:aa:ac:
         f8:f0:47:77:98:aa:a6:8e:ae:a5:45:a4:e6:c2:53:a2:a8:6d:
         ee:70:75:fd:fc:47:bc:e3:d8:35:8e:5f:ed:a9:3f:a0:37:f0:
         14:1e:5b:2c:ed:c3:7f:3e:f4:d4:10:46:02:89:c9:4d:d9:ff:
         49:6f:ed:af:6b:ef:17:4c:8b:d8:36:56:42:fe:ad:c2:26:2e:
         bf:73:81:6a:1e:05:06:48:f3:71:60:76:cc:45:db:a2:8c:89:
         5e:7f:3d:1e:45:58:73:5f:09:6b:9d:38:bd:9b:66:a0:dc:ec:
         7a:d0:ce:42:98:33:6a:15:6f:e3:6d:c3:cd:e1:a3:c5:ba:ec:
         27:48:86:12:6e:b3:86:b3:57:5d:6b:d7:0e:84:ec:22:4e:d0:
         9b:e7:54:e0:3d:9c:4b:f7:3f:65:67:a2:ee:d0:e6:40:2e:f7:
         8b:c6:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 16:55:33 2024 by rpki-client on console-fra.rpki-client.org