Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35332e302f32342d3234203d3e20323637393336.roa
File:                     34352e3136362e35332e302f32342d3234203d3e20323637393336.roa (raw, json)
Hash identifier:          tMoE/y34WNR5Ot8kGpW08mZnY5Q0eTrxsdoop6pZkfA=
Subject key identifier:   2C:8A:D3:F7:03:10:D3:B1:AF:64:38:6D:BD:FA:FF:06:DB:24:23:44
Certificate issuer:       /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial:       46744AE9151E628B0418B36B3553ABD73D42790C
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35332e302f32342d3234203d3e20323637393336.roa
Signing time:             Thu 04 Apr 2024 09:33:03 +0000
ROA not before:           Thu 04 Apr 2024 09:28:03 +0000
ROA not after:            Thu 03 Apr 2025 09:33:03 +0000
asID:                     267936
IP address blocks:        45.166.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 13:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:74:4a:e9:15:1e:62:8b:04:18:b3:6b:35:53:ab:d7:3d:42:79:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
        Validity
            Not Before: Apr  4 09:28:03 2024 GMT
            Not After : Apr  3 09:33:03 2025 GMT
        Subject: CN=2C8AD3F70310D3B1AF64386DBDFAFF06DB242344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:6e:f5:17:70:88:40:d6:f5:ff:3e:d3:3c:
                    07:96:c3:ff:0a:01:dc:c6:e2:fd:b6:27:b3:30:1a:
                    b1:44:78:4f:f8:8c:08:74:c5:ac:68:9b:aa:e0:2b:
                    59:c8:8b:b5:09:5d:99:eb:5b:81:21:d0:c3:cc:55:
                    fc:3f:c2:92:31:8c:17:93:f2:23:70:11:cf:2d:d8:
                    9d:82:5d:91:61:ec:94:61:a9:9f:df:23:82:df:ac:
                    c9:d2:dc:93:72:9a:ff:87:00:4c:cf:af:c9:92:44:
                    70:99:b5:a4:14:cc:8e:6e:2b:fe:34:d1:b2:b1:d2:
                    73:d3:fa:6b:6b:9e:37:1b:1d:7e:12:ad:14:3c:11:
                    61:ec:97:cb:43:02:2d:cf:c2:48:bf:82:e9:a5:5d:
                    b8:9e:4e:3c:a8:95:6f:ee:ee:e1:d6:84:cf:94:d1:
                    64:b7:38:3e:92:f0:af:f7:3a:69:3f:b4:3c:5e:92:
                    0a:59:d2:cc:c9:5e:ac:a6:78:6d:2f:a2:12:52:29:
                    bb:a2:7a:c0:72:cb:a2:bc:2c:34:5a:96:5e:1a:0c:
                    fb:e0:ec:3b:8f:ff:d7:16:05:b4:10:12:22:77:7f:
                    49:96:35:b0:3a:73:30:07:47:8c:c9:53:f8:d3:49:
                    c3:60:33:d6:48:3c:0f:23:8a:1a:97:90:e5:b1:18:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8A:D3:F7:03:10:D3:B1:AF:64:38:6D:BD:FA:FF:06:DB:24:23:44
            X509v3 Authority Key Identifier:
                keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35332e302f32342d3234203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:b2:19:18:b8:e7:49:88:08:d5:c6:41:13:6c:63:5f:1e:
         e1:83:80:b6:b4:01:99:34:a0:db:52:b5:03:0a:f0:f5:97:3a:
         b2:b3:9c:3d:e1:36:c7:a8:c8:bd:c1:04:eb:bc:e3:9b:a3:de:
         5f:d5:23:eb:1c:51:49:4f:ef:2f:dc:93:8f:77:26:30:3a:3f:
         8a:81:d2:2a:25:9c:c8:28:7c:fb:f4:c3:a3:94:d0:80:69:72:
         19:41:94:ce:64:f2:e5:61:ac:72:2d:5b:27:4b:ec:58:06:a1:
         52:c1:19:e2:a6:1b:78:ee:6e:5a:10:10:e4:75:cd:a7:f1:c6:
         ac:19:b9:52:a1:86:17:75:f4:b5:3e:93:e9:a9:0f:6f:14:79:
         02:f3:3f:dd:3d:e1:4c:7c:c4:62:e0:f2:ed:8b:4f:a2:f4:5f:
         a2:d3:d8:52:e0:78:aa:78:b9:3a:34:dd:d1:89:89:a5:2d:f3:
         f3:f5:bd:a7:e5:a2:8c:1e:8e:53:a4:fe:87:ec:0e:be:fc:fb:
         5f:bb:2b:4f:6a:e1:e4:2b:13:ff:cf:95:17:70:3c:e6:9b:d3:
         8f:b5:e5:de:6f:aa:1e:4f:91:32:33:6e:a8:6b:df:aa:58:f8:
         f2:4b:5e:d8:6a:fa:dd:7d:0c:5f:5c:37:70:5f:c1:e8:8f:69:
         60:2e:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 16:55:33 2024 by rpki-client on console-fra.rpki-client.org