Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230322e302f32342d3234203d3e20323637333936.roa
File:                     34352e3233332e3230322e302f32342d3234203d3e20323637333936.roa (raw, json)
Hash identifier:          9+bR6BAQfmtJ+S1/w75eeQ6IOOOWNo8kyiZCsLleuu0=
Subject key identifier:   1B:D2:17:85:90:78:1E:34:2E:07:50:3E:EF:01:45:C6:04:77:CD:EB
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       1F5A82342384EBE0E962DB54D2597529040B0717
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230322e302f32342d3234203d3e20323637333936.roa
Signing time:             Tue 23 Apr 2024 18:59:52 +0000
ROA not before:           Tue 23 Apr 2024 18:54:52 +0000
ROA not after:            Tue 22 Apr 2025 18:59:52 +0000
asID:                     267396
IP address blocks:        45.233.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5a:82:34:23:84:eb:e0:e9:62:db:54:d2:59:75:29:04:0b:07:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Apr 23 18:54:52 2024 GMT
            Not After : Apr 22 18:59:52 2025 GMT
        Subject: CN=1BD2178590781E342E07503EEF0145C60477CDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:ca:ee:c2:4f:38:ca:b0:4e:9d:f5:43:06:
                    e6:9b:42:4b:4c:9c:ea:6c:98:ca:b9:58:01:5a:9f:
                    55:60:ec:99:6f:73:30:a5:00:68:22:e8:25:df:09:
                    2d:46:76:ce:aa:66:41:43:a0:d7:ba:c2:5f:b0:09:
                    82:dc:f9:51:a9:7a:47:e7:a2:82:a5:0d:56:09:ea:
                    bc:52:f8:8c:13:47:2a:0e:17:ad:16:2a:08:7a:d6:
                    93:09:0c:46:5a:78:45:8c:8f:03:27:0d:3a:80:c1:
                    6b:35:1d:bf:2e:da:41:5c:71:56:89:24:b2:1b:60:
                    e5:4f:ac:60:8e:00:63:fe:f8:28:0b:73:01:72:b7:
                    37:1c:72:c7:aa:84:98:c2:0e:70:96:1d:e5:5c:1f:
                    f8:6a:58:fa:bd:e8:53:09:a1:89:74:34:63:83:5a:
                    22:b5:de:1a:d0:59:27:30:da:09:30:91:ec:34:e9:
                    fa:23:14:d2:53:1c:5e:00:6b:f4:32:21:53:33:e8:
                    e5:25:7f:46:81:55:94:21:c2:f5:a5:3b:a2:68:48:
                    1d:a7:5c:57:2a:8b:e6:de:d8:ef:80:af:a4:15:13:
                    45:ee:73:0a:29:ad:d8:b9:26:09:fa:2c:e2:98:3c:
                    2e:46:32:6a:6e:cc:22:4e:09:b1:8a:de:96:90:aa:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D2:17:85:90:78:1E:34:2E:07:50:3E:EF:01:45:C6:04:77:CD:EB
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/34352e3233332e3230322e302f32342d3234203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:8a:d2:93:59:31:fb:be:e1:31:df:e5:87:da:09:3e:05:
         23:09:eb:d2:09:70:7d:92:49:50:ac:32:b0:0a:0a:ab:74:98:
         56:f1:22:b2:81:db:79:e6:fe:c1:f3:34:8d:52:c4:83:ff:3e:
         02:cd:cf:85:c8:57:8d:ac:aa:75:eb:a0:82:ec:5c:d2:5c:99:
         39:b6:be:ef:6e:d4:dd:d9:be:e5:85:c0:b9:15:3a:9c:14:25:
         bd:eb:fc:ed:53:47:8d:64:c2:c2:cb:7f:1b:83:40:47:6d:15:
         72:94:33:79:d7:75:b4:fa:bc:54:b5:df:e3:d5:e9:71:62:ef:
         ad:44:4f:d8:45:50:fa:d8:89:81:31:c3:c2:0d:b9:5a:88:12:
         d1:c1:21:0c:00:d7:6a:ca:a3:dc:35:c7:32:3e:c2:6e:75:2a:
         0c:0f:8c:4f:67:4a:41:47:39:43:0d:a2:77:f2:55:c1:cb:71:
         b0:9f:ec:b2:ac:62:ad:e2:02:49:06:f8:a3:eb:e6:61:f3:39:
         2b:29:ab:f1:ea:6b:56:6a:e9:2f:81:27:1d:9f:d0:d0:16:7e:
         f8:f1:cb:37:65:82:3f:93:26:e7:cc:64:3d:e2:5c:e7:a3:af:
         76:25:3e:19:8d:60:75:c1:7f:e8:04:bd:cb:3a:9a:c8:ca:69:
         4a:a3:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org