Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35342e302f32342d3234203d3e20323637393336.roa
File:                     34352e3136362e35342e302f32342d3234203d3e20323637393336.roa (raw, json)
Hash identifier:          yd/i5huxi5W2DZBAJEajudlMmZjbZLLoBaUlbQyJs+E=
Subject key identifier:   1F:5E:48:55:DB:20:71:60:FF:41:84:4C:71:43:AE:74:12:54:93:51
Certificate issuer:       /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial:       5902B606DF16A96AE79A621687C919B7A7941721
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35342e302f32342d3234203d3e20323637393336.roa
Signing time:             Thu 04 Apr 2024 09:33:04 +0000
ROA not before:           Thu 04 Apr 2024 09:28:04 +0000
ROA not after:            Thu 03 Apr 2025 09:33:04 +0000
asID:                     267936
IP address blocks:        45.166.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 13:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:02:b6:06:df:16:a9:6a:e7:9a:62:16:87:c9:19:b7:a7:94:17:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
        Validity
            Not Before: Apr  4 09:28:04 2024 GMT
            Not After : Apr  3 09:33:04 2025 GMT
        Subject: CN=1F5E4855DB207160FF41844C7143AE7412549351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:ed:c3:50:67:f2:83:88:f1:59:ef:10:36:
                    ea:df:3f:5b:e3:0d:01:b8:56:c5:44:98:ae:9d:49:
                    63:ad:0a:7e:54:cb:58:04:6f:55:2a:e3:d1:4e:3b:
                    df:ed:76:dd:d7:10:27:3d:82:0e:c1:89:d0:88:48:
                    c7:68:53:b8:13:ca:a0:fd:58:9a:f4:0d:a2:26:f3:
                    02:1c:75:00:34:5f:a6:d8:e4:4b:c3:6b:e1:e2:cb:
                    42:9a:bb:59:a5:d5:82:27:99:82:04:b3:48:4a:c8:
                    4e:81:14:c2:4d:45:53:84:5b:a8:bf:09:4b:71:7d:
                    d9:79:f4:0b:b7:da:8a:fa:df:f1:c5:24:3a:a8:ca:
                    6b:63:6d:95:5d:79:63:f4:86:0b:1c:a8:39:71:81:
                    ea:0c:47:f7:63:88:10:c7:fd:d7:52:88:8e:f7:6c:
                    ee:de:d0:83:b9:5c:13:fb:e8:68:5a:bf:cf:5c:be:
                    44:e6:79:3f:87:93:06:3d:cc:30:26:5b:56:51:5e:
                    59:f1:d1:d2:a4:c9:6a:44:92:d2:27:54:fd:dc:f2:
                    9d:7d:f4:de:66:af:23:ca:11:43:82:ef:75:60:15:
                    c8:c0:40:8b:5b:77:d7:af:9b:66:bd:8d:bd:f0:04:
                    d7:e9:93:44:c7:01:3e:67:99:df:1a:2a:4e:56:f2:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5E:48:55:DB:20:71:60:FF:41:84:4C:71:43:AE:74:12:54:93:51
            X509v3 Authority Key Identifier:
                keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35342e302f32342d3234203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:67:03:f6:31:76:ad:c6:75:bb:79:a3:17:c9:2b:18:c6:
         5e:5e:27:90:af:09:f0:2e:0b:af:37:38:c8:44:cf:11:25:a5:
         02:8b:a6:1c:68:97:59:f9:ae:34:a0:c9:71:ef:89:3d:ef:f7:
         da:1d:be:07:c6:37:6a:82:33:ef:72:7b:a2:37:f3:20:b1:4b:
         96:d0:8d:9b:78:c0:fe:72:69:47:07:86:71:64:45:f3:f1:bb:
         50:5e:8b:df:00:57:92:1b:47:2f:7a:91:f3:52:90:4c:dd:c1:
         d3:78:e6:32:b1:d4:e7:43:4c:2e:69:ce:ab:90:b5:36:3b:bb:
         b4:a8:c7:36:60:e2:c5:3b:22:5d:93:48:32:c0:b5:27:39:92:
         31:94:7a:55:bb:99:0d:7b:9d:9e:91:08:6e:a7:c3:69:73:e0:
         c2:7e:ce:01:b4:b7:ef:fa:76:3d:15:1a:e1:e6:6d:21:69:9b:
         0b:b9:4c:68:7f:5a:5e:59:1e:a9:51:d3:15:a0:e6:f2:91:43:
         8b:7b:5b:2a:07:d4:a0:d1:27:e3:ca:d1:36:3d:92:d1:a4:5f:
         42:a8:34:ed:10:da:08:a4:0f:18:25:ca:53:d0:e8:b6:05:52:
         3a:8e:e4:30:c1:57:d4:80:a8:14:5f:e0:c6:e2:a2:b2:90:31:
         e7:57:45:74
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWQK2Bt8WqWrnmmIWh8kZt6eUFyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NEMzI3ODdBRjU0NzkzQzQwRTY0MEQ1OUI0MUM0RTM4
NTMyQkI1NDAeFw0yNDA0MDQwOTI4MDRaFw0yNTA0MDMwOTMzMDRaMDMxMTAvBgNV
BAMTKDFGNUU0ODU1REIyMDcxNjBGRjQxODQ0QzcxNDNBRTc0MTI1NDkzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3+3DUGfyg4jxWe8QNurfP1vj
DQG4VsVEmK6dSWOtCn5Uy1gEb1Uq49FOO9/tdt3XECc9gg7BidCISMdoU7gTyqD9
WJr0DaIm8wIcdQA0X6bY5EvDa+Hiy0Kau1ml1YInmYIEs0hKyE6BFMJNRVOEW6i/
CUtxfdl59Au32or63/HFJDqoymtjbZVdeWP0hgscqDlxgeoMR/djiBDH/ddSiI73
bO7e0IO5XBP76Ghav89cvkTmeT+HkwY9zDAmW1ZRXlnx0dKkyWpEktInVP3c8p19
9N5mryPKEUOC73VgFcjAQItbd9evm2a9jb3wBNfpk0THAT5nmd8aKk5W8gQrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUH15IVdsgcWD/QYRMcUOudBJUk1EwHwYDVR0j
BBgwFoAUfNMnh69UeTxA5kDVm0HE44Uyu1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9X
Y00vMS83Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRDMyNzg3QUY1NDc5M0M0
MEU2NDBENTlCNDFDNEUzODUzMkJCNTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drV05CMkx1Tm94Q2V4aTJVWXJXNmp6a0MyVVVHRFpuV1A1eDE5MXlvV2NNLzEv
MzQzNTJlMzEzNjM2MmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaY2MA0GCSqGSIb3DQEBCwUAA4IBAQB4wGcD9jF2
rcZ1u3mjF8krGMZeXieQrwnwLguvNzjIRM8RJaUCi6YcaJdZ+a40oMlx74k97/fa
Hb4HxjdqgjPvcnuiN/MgsUuW0I2beMD+cmlHB4ZxZEXz8btQXovfAFeSG0cvepHz
UpBM3cHTeOYysdTnQ0wuac6rkLU2O7u0qMc2YOLFOyJdk0gywLUnOZIxlHpVu5kN
e52ekQhup8Npc+DCfs4BtLfv+nY9FRrh5m0haZsLuUxof1peWR6pUdMVoObykUOL
e1sqB9Sg0SfjytE2PZLRpF9CqDTtENoIpA8YJcpT0Oi2BVI6juQwwVfUgKgUX+DG
4qKykDHnV0V0
-----END CERTIFICATE-----
Generated at Wed Jul 17 17:08:46 2024 by rpki-client on console-ams.rpki-client.org