Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39392e302f32342d3234203d3e20323637303230.roa
File:                     34352e3232362e39392e302f32342d3234203d3e20323637303230.roa (raw, json)
Hash identifier:          ROZdqN/VaIhp12MWI84nAT6BLy/m9klbQdIGosWacA8=
Subject key identifier:   E7:0F:07:F5:13:79:6F:1D:0F:9D:56:EC:61:95:28:3E:1E:E4:FE:A4
Certificate issuer:       /CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
Certificate serial:       53F93720115C0F11A6201023B774D3D638F7CF0E
Authority key identifier: CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39392e302f32342d3234203d3e20323637303230.roa
Signing time:             Thu 08 Sep 2022 19:50:36 +0000
ROA not before:           Thu 08 Sep 2022 19:45:36 +0000
ROA not after:            Thu 07 Sep 2023 19:50:36 +0000
asID:                     267020
IP address blocks:        45.226.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f9:37:20:11:5c:0f:11:a6:20:10:23:b7:74:d3:d6:38:f7:cf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
        Validity
            Not Before: Sep  8 19:45:36 2022 GMT
            Not After : Sep  7 19:50:36 2023 GMT
        Subject: CN=E70F07F513796F1D0F9D56EC6195283E1EE4FEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:20:39:c3:be:bc:df:d6:07:83:24:2f:70:
                    4e:e4:24:c2:45:da:2f:3b:8f:1b:08:70:c6:0b:22:
                    7b:74:22:c5:09:71:ee:ec:b2:69:41:63:9b:b0:65:
                    22:b3:f5:49:78:1c:c6:b5:10:80:f7:12:7b:cd:6e:
                    87:74:78:ca:bb:47:e3:3d:64:fb:c3:b3:20:e7:12:
                    02:a4:9d:03:ca:21:b1:0e:12:fd:42:bd:13:3d:35:
                    cd:a8:b4:56:4c:8b:17:48:89:c3:50:d9:b8:da:a4:
                    16:e8:8e:b4:33:be:32:5d:19:8c:f6:b7:39:8e:94:
                    78:bd:9f:95:b7:51:88:6c:24:b2:35:c1:fe:1c:a4:
                    a1:1f:9b:f5:10:7d:c0:35:98:6c:fb:ef:e0:d8:0a:
                    05:65:f9:20:6f:7f:e1:6d:0b:8c:e1:a3:26:d7:3f:
                    5f:dc:82:9b:ed:44:6a:7c:55:29:bd:3b:cb:e1:15:
                    10:93:34:46:3f:d2:3a:e7:4a:8b:c5:c6:67:1c:b4:
                    d1:fa:64:00:18:e3:52:a8:fd:5e:88:a1:68:ce:71:
                    e4:e0:16:e1:af:bf:1f:f1:11:f4:fe:f2:5a:34:6d:
                    1b:77:a1:a3:ab:5f:19:89:ba:25:f0:eb:7d:29:fb:
                    f1:a6:e9:ab:dc:54:98:ad:76:57:9f:f4:10:70:d6:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0F:07:F5:13:79:6F:1D:0F:9D:56:EC:61:95:28:3E:1E:E4:FE:A4
            X509v3 Authority Key Identifier:
                keyid:CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39392e302f32342d3234203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:26:94:b3:bf:45:ed:4b:5d:fd:df:2f:10:b8:d4:07:e2:d8:
         fa:d2:69:c9:5b:65:fe:d5:fd:ca:d8:2a:48:ef:31:d1:3d:cc:
         59:6e:68:e9:56:2c:53:11:07:b7:3d:97:fb:3b:a6:0b:59:d0:
         b4:af:b8:cb:4b:c6:81:a0:3c:8a:f3:14:82:ce:7a:96:cf:36:
         1b:27:41:ec:61:fc:14:0c:84:33:48:76:5f:e1:d6:b0:87:1c:
         34:bf:a7:9f:b6:aa:c7:5b:d1:d8:5a:ba:0b:09:9f:62:c5:fd:
         ca:f1:68:d0:5b:25:79:5d:e5:b0:f2:16:18:a9:60:00:4d:5e:
         b7:15:87:fc:34:4d:b2:dc:4a:b4:96:91:20:0f:9c:04:8d:03:
         5c:88:3d:25:89:58:62:a6:12:9d:fb:c5:e3:2c:29:a1:7e:f1:
         4d:1a:df:1a:c8:94:d8:6f:1b:35:75:fa:69:82:f0:41:ff:ce:
         97:f0:c2:24:3c:56:b0:5f:1d:78:a1:e5:99:db:40:d6:43:da:
         ff:c5:76:0f:6c:6c:44:0c:5c:33:01:1c:cd:d7:36:4f:05:f7:
         6d:a5:5d:b4:70:be:dd:bd:a7:59:c0:8e:2d:b6:39:df:a1:dc:
         80:92:b8:5c:c7:a7:cb:fc:14:da:ea:b9:73:46:2b:15:26:a5:
         23:1e:47:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:27 2023 by rpki-client on console-fra.rpki-client.org