Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230322e302f32332d3233203d3e20323637333936.roa
File:                     34352e3233332e3230322e302f32332d3233203d3e20323637333936.roa (raw, json)
Hash identifier:          l+9IXdiwVX3XD4Gd2gnPMU+3vubVETxQhN7Ai38uQHM=
Subject key identifier:   1D:B6:89:FC:4C:A2:D8:A0:4A:B3:4D:9A:E8:2A:E4:7D:6C:1C:7F:1A
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       1CD212B600DCBF3C263159FB4E51CB65C4C9E6B9
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230322e302f32332d3233203d3e20323637333936.roa
Signing time:             Tue 23 Apr 2024 18:59:41 +0000
ROA not before:           Tue 23 Apr 2024 18:54:41 +0000
ROA not after:            Tue 22 Apr 2025 18:59:41 +0000
asID:                     267396
IP address blocks:        45.233.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d2:12:b6:00:dc:bf:3c:26:31:59:fb:4e:51:cb:65:c4:c9:e6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Apr 23 18:54:41 2024 GMT
            Not After : Apr 22 18:59:41 2025 GMT
        Subject: CN=1DB689FC4CA2D8A04AB34D9AE82AE47D6C1C7F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:2d:4b:70:6d:49:b6:0a:30:8d:be:af:44:
                    e9:18:5a:46:95:52:ac:d7:22:bb:ac:ff:45:cc:bf:
                    95:0a:d1:94:0e:a6:9a:76:6c:c4:89:f5:f7:2f:e0:
                    06:d5:34:97:48:10:c4:0c:ef:02:fa:ea:9b:44:63:
                    15:50:e0:4f:30:d7:41:34:78:30:92:2f:f9:e7:41:
                    fb:f6:83:49:46:8d:4a:67:a1:63:4e:95:0c:36:fb:
                    07:88:6a:e6:94:a3:96:14:c5:bd:d2:1e:70:06:ce:
                    23:53:a5:b4:7d:19:0e:ff:c9:d9:f6:3a:fe:bb:21:
                    07:eb:9a:22:f0:a0:a4:b8:7e:0a:ad:22:f5:c8:bf:
                    30:52:29:10:2f:7e:35:92:c9:0d:f2:ca:92:71:70:
                    74:c1:cd:04:d7:64:5d:36:da:aa:a3:28:0f:57:1d:
                    26:fb:b3:80:b0:00:5f:d4:36:0e:cb:61:9c:bc:ce:
                    08:56:cf:36:a2:c4:ac:dc:38:dc:05:3d:d9:bd:6a:
                    1c:a2:4f:f5:ac:03:bf:f3:76:96:51:75:76:47:b5:
                    52:61:a4:25:76:0c:e7:63:f4:0e:9b:47:6b:1e:0a:
                    0b:18:79:99:b0:5a:f1:d2:9a:5e:fe:6e:0e:f2:cf:
                    e1:13:33:8c:ae:5e:45:b2:2f:12:5e:43:fd:7a:0d:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B6:89:FC:4C:A2:D8:A0:4A:B3:4D:9A:E8:2A:E4:7D:6C:1C:7F:1A
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230322e302f32332d3233203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:aa:2e:fe:3c:10:0c:fa:4f:3b:15:44:dd:74:d7:c8:66:
         03:7e:de:4d:5f:71:26:34:c1:08:6c:4e:b7:0a:97:04:3c:ab:
         8c:cb:2c:7e:d6:31:11:95:87:7a:f5:f6:f6:26:14:ca:da:13:
         4a:ac:74:93:67:a2:e9:0b:e8:b2:74:37:ed:39:0c:4b:1b:1e:
         77:99:4b:91:49:8f:e7:7b:cb:02:ce:50:a7:84:cb:b8:63:9d:
         48:9a:25:b8:c1:66:24:dd:d1:3b:40:07:22:d6:ef:0c:b6:a0:
         f1:31:db:e9:b1:30:56:11:7a:5a:3c:60:b0:aa:67:dc:8a:d3:
         10:86:b6:2c:20:6c:6c:75:06:de:d2:67:0c:00:44:06:09:06:
         10:c0:83:49:64:c4:55:c4:57:ff:15:db:ab:d0:68:46:cb:f7:
         3b:8f:43:a1:8a:b7:91:34:73:4b:ee:ed:db:a9:6b:e3:fb:82:
         d0:d7:de:db:14:a3:8f:b5:c0:e0:44:9f:65:59:07:a3:de:7e:
         9e:ef:23:40:a5:77:5b:a1:22:5b:5f:ef:c2:83:08:4e:7a:16:
         3f:f5:8c:cf:c2:68:90:a6:e1:8a:72:a7:db:fd:5e:67:40:01:
         a9:0a:66:c9:10:e4:40:29:8c:24:53:e6:70:6b:56:29:3c:fa:
         16:3e:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org