Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230312e302f32342d3234203d3e20323637333936.roa
File:                     34352e3233332e3230312e302f32342d3234203d3e20323637333936.roa (raw, json)
Hash identifier:          8hffOGINKZ42aFRGQU+qYl7L/8ZEOh5eUHTG/V5fvrQ=
Subject key identifier:   B5:6A:F9:99:E7:A8:B1:8D:73:0B:00:CF:8F:62:3C:B1:BF:74:E1:7E
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       19A97A55ECE0E7BAD48478F102E927518136013A
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230312e302f32342d3234203d3e20323637333936.roa
Signing time:             Tue 23 Apr 2024 18:59:38 +0000
ROA not before:           Tue 23 Apr 2024 18:54:38 +0000
ROA not after:            Tue 22 Apr 2025 18:59:38 +0000
asID:                     267396
IP address blocks:        45.233.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a9:7a:55:ec:e0:e7:ba:d4:84:78:f1:02:e9:27:51:81:36:01:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Apr 23 18:54:38 2024 GMT
            Not After : Apr 22 18:59:38 2025 GMT
        Subject: CN=B56AF999E7A8B18D730B00CF8F623CB1BF74E17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:2a:81:d3:3e:af:3d:3f:fd:8a:8b:d1:3e:
                    dc:96:8c:b6:1e:1f:65:96:0e:5a:81:12:45:e5:8b:
                    52:f9:8c:57:1c:68:75:a5:f2:d6:f6:26:8a:aa:93:
                    a4:3c:74:6c:8f:0f:16:65:82:56:f2:83:4a:11:da:
                    00:23:01:4b:da:14:e2:df:9c:ea:48:b2:1f:14:63:
                    bf:16:10:65:06:df:e3:ed:d0:60:15:33:1e:40:ed:
                    3d:c7:e9:56:e1:02:56:bc:c8:1b:f0:b0:49:1f:41:
                    92:8b:44:a1:76:44:dc:88:25:72:39:63:9c:35:c0:
                    b4:09:d6:4c:b3:43:74:e8:e4:14:9a:77:9d:8d:b9:
                    ff:89:f7:a9:00:7a:31:f3:27:66:49:9b:b8:0c:7f:
                    39:16:46:c8:79:16:19:c3:51:08:aa:0a:c3:0e:4f:
                    32:02:21:e7:5f:32:89:36:1c:6a:5e:5a:1d:23:eb:
                    e3:32:23:e7:8a:88:df:3d:51:54:7a:aa:6b:b0:c9:
                    c9:d6:6b:04:ba:05:46:58:be:6c:b6:bf:f7:35:a8:
                    e2:ad:48:90:56:0c:85:f5:50:9d:cf:13:09:27:50:
                    7a:1b:05:a6:ac:69:34:02:26:9e:b1:4d:ea:b8:e7:
                    35:e7:eb:4d:bf:e7:b5:07:af:65:0b:e6:52:e0:f8:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6A:F9:99:E7:A8:B1:8D:73:0B:00:CF:8F:62:3C:B1:BF:74:E1:7E
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230312e302f32342d3234203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c1:e2:e4:aa:63:6f:07:fe:2d:9e:e7:dd:14:bf:51:9e:0d:
         56:fa:c5:ca:9b:15:32:35:b6:75:73:25:4a:7d:09:84:6a:75:
         62:7d:58:a5:0a:10:b7:bf:af:36:ca:b2:91:ab:64:7e:6f:b4:
         f5:84:10:44:dd:a0:69:35:e1:b5:0c:03:49:ec:50:51:e0:35:
         5e:03:a2:f1:1e:77:03:f4:52:aa:39:76:99:99:29:c7:82:f4:
         66:4e:cc:dc:48:4c:c2:34:e7:7a:98:d8:6c:f6:a4:ef:44:32:
         8e:a3:29:04:dd:3f:09:18:26:3e:ec:f0:71:48:b8:0a:cf:17:
         98:ef:c2:b0:05:ed:3b:e8:d0:35:2d:58:15:ed:ec:51:49:ca:
         9d:49:08:7b:ca:71:6e:c9:0c:89:62:b1:fc:4e:a7:dd:f6:07:
         cd:58:93:dd:93:bf:62:e1:ce:94:fe:ed:96:81:93:67:d5:8d:
         7f:12:c9:a7:d0:a3:74:9e:73:9f:7a:12:e6:df:1e:c8:99:54:
         21:3f:2a:0f:b8:d6:6b:e1:0b:1a:26:75:dc:87:da:01:00:64:
         1f:e3:5d:3d:9c:bb:17:bf:b4:62:5b:b9:41:c2:42:16:56:cb:
         3e:87:5f:72:6a:f4:35:fb:b5:35:b2:e5:a0:3b:88:e7:64:58:
         19:05:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org