Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/34352e352e3130362e302f32342d3332203d3e20323636303936.roa
File:                     34352e352e3130362e302f32342d3332203d3e20323636303936.roa (raw, json)
Hash identifier:          819sodM102RF55X2sxMqGIPe1qfs9mokN6JnOh3rSmQ=
Subject key identifier:   09:C9:DA:ED:F3:F2:DD:04:9B:49:2D:3F:79:D6:42:35:10:80:45:DE
Certificate issuer:       /CN=551C8D694782953B26464AA2E96089A434D823FC
Certificate serial:       1B983BDFD64D1B8E3FC936CE6F15AA8D497AB925
Authority key identifier: 55:1C:8D:69:47:82:95:3B:26:46:4A:A2:E9:60:89:A4:34:D8:23:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551C8D694782953B26464AA2E96089A434D823FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/34352e352e3130362e302f32342d3332203d3e20323636303936.roa
Signing time:             Tue 29 Nov 2022 19:37:39 +0000
ROA not before:           Tue 29 Nov 2022 19:32:39 +0000
ROA not after:            Tue 28 Nov 2023 19:37:39 +0000
asID:                     266096
IP address blocks:        45.5.106.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:98:3b:df:d6:4d:1b:8e:3f:c9:36:ce:6f:15:aa:8d:49:7a:b9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551C8D694782953B26464AA2E96089A434D823FC
        Validity
            Not Before: Nov 29 19:32:39 2022 GMT
            Not After : Nov 28 19:37:39 2023 GMT
        Subject: CN=09C9DAEDF3F2DD049B492D3F79D64235108045DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f4:f2:b1:b0:eb:5f:e8:85:74:52:d9:e4:e6:
                    da:0a:97:a1:ea:18:57:91:a2:c6:bc:87:5e:18:76:
                    f1:87:95:88:9e:72:dd:9c:31:cc:b3:f0:cb:2a:4c:
                    e3:76:67:d8:da:17:df:1f:24:67:a4:8e:18:43:1a:
                    f7:ba:bb:a3:26:10:1a:48:84:96:9b:05:04:26:f5:
                    9d:f8:5c:60:93:72:bf:ac:42:fb:57:1e:a3:77:7a:
                    41:d9:46:2f:40:e9:7c:bc:ec:f4:d9:ab:74:26:17:
                    2a:06:aa:f2:2e:a7:1d:37:7c:fe:14:89:30:9c:12:
                    5b:3f:09:58:e1:0d:18:31:c8:25:a2:bb:db:43:82:
                    8e:14:d6:2e:5b:1c:cf:24:fd:da:7a:bc:ae:ee:bc:
                    69:de:c3:d3:74:46:f0:24:73:8c:82:db:3d:bd:51:
                    48:d6:8c:e3:3f:16:37:20:19:ef:d1:96:54:27:5a:
                    3a:49:7c:cd:21:06:f5:69:98:9d:01:0d:de:63:2f:
                    dc:f9:c1:ae:16:7b:08:3d:e9:9e:43:67:5f:0f:f3:
                    d2:48:85:d3:df:04:df:3c:60:52:90:34:b2:a8:24:
                    3f:55:25:04:a6:bf:6d:ea:f2:26:84:e1:6d:16:6e:
                    d5:43:4e:96:f3:88:e9:49:8a:fa:2c:09:0c:c6:b8:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C9:DA:ED:F3:F2:DD:04:9B:49:2D:3F:79:D6:42:35:10:80:45:DE
            X509v3 Authority Key Identifier:
                keyid:55:1C:8D:69:47:82:95:3B:26:46:4A:A2:E9:60:89:A4:34:D8:23:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/551C8D694782953B26464AA2E96089A434D823FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551C8D694782953B26464AA2E96089A434D823FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/34352e352e3130362e302f32342d3332203d3e20323636303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:ea:0a:eb:eb:3a:50:28:85:74:1b:a1:a4:fa:73:c3:b8:0a:
         56:14:2f:c5:7b:a1:7e:c1:36:59:81:7f:93:f9:18:43:3d:ed:
         73:91:e9:78:5b:d1:88:3e:80:3b:78:3f:5d:83:8d:5a:3a:b7:
         e6:56:45:b3:e9:0d:69:56:6e:ac:11:b7:1b:d6:b2:e8:00:45:
         58:2c:2e:d2:e9:07:10:6e:10:eb:f5:10:93:1d:31:25:fd:5e:
         16:6e:c7:d5:fc:a0:e5:45:17:30:8d:ea:18:1b:67:72:29:d6:
         72:50:f0:e0:ac:22:70:64:dd:f3:28:2e:6d:1f:e9:42:19:4d:
         c2:b9:52:ed:1f:41:fc:50:41:22:f9:9e:08:e5:0b:12:6f:b6:
         e5:2a:ed:f1:16:51:7a:58:a9:54:37:53:d2:f0:d9:48:ac:75:
         8d:8f:8e:d8:94:e7:6a:b5:4b:c0:81:48:d8:dd:05:7a:8d:34:
         50:d0:c8:dd:0b:8b:2c:ab:e4:06:3e:3e:c0:d2:10:7e:35:52:
         ec:91:27:49:9f:e4:fd:38:fe:8e:91:41:4c:ea:3e:0b:9e:90:
         44:0d:48:f9:a5:a7:ed:7e:5c:33:80:8f:0e:cc:4b:8a:7a:44:
         78:37:52:2c:36:1a:de:07:5b:d0:ec:cc:74:94:ae:1f:cf:03:
         24:81:ef:39
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUG5g739ZNG44/yTbObxWqjUl6uSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUxQzhENjk0NzgyOTUzQjI2NDY0QUEyRTk2MDg5QTQz
NEQ4MjNGQzAeFw0yMjExMjkxOTMyMzlaFw0yMzExMjgxOTM3MzlaMDMxMTAvBgNV
BAMTKDA5QzlEQUVERjNGMkREMDQ5QjQ5MkQzRjc5RDY0MjM1MTA4MDQ1REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn9PKxsOtf6IV0Utnk5toKl6Hq
GFeRosa8h14YdvGHlYiect2cMcyz8MsqTON2Z9jaF98fJGekjhhDGve6u6MmEBpI
hJabBQQm9Z34XGCTcr+sQvtXHqN3ekHZRi9A6Xy87PTZq3QmFyoGqvIupx03fP4U
iTCcEls/CVjhDRgxyCWiu9tDgo4U1i5bHM8k/dp6vK7uvGnew9N0RvAkc4yC2z29
UUjWjOM/FjcgGe/RllQnWjpJfM0hBvVpmJ0BDd5jL9z5wa4Wewg96Z5DZ18P89JI
hdPfBN88YFKQNLKoJD9VJQSmv23q8iaE4W0WbtVDTpbziOlJivosCQzGuLaFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCcna7fPy3QSbSS0/edZCNRCARd4wHwYDVR0j
BBgwFoAUVRyNaUeClTsmRkqi6WCJpDTYI/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEx0R2g3dVpRcHFOZm1Rdlc5QnV6RjJGRFdIcUFrSzQ0UVlFUTVQUEJK
cGUvMC81NTFDOEQ2OTQ3ODI5NTNCMjY0NjRBQTJFOTYwODlBNDM0RDgyM0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1MUM4RDY5NDc4Mjk1M0Iy
NjQ2NEFBMkU5NjA4OUE0MzREODIzRkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMdEdoN3VaUXBxTmZtUXZXOUJ1ekYyRkRXSHFBa0s0NFFZRVE1UFBCSnBlLzAv
MzQzNTJlMzUyZTMxMzAzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMyMzYzNjMw
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0FajANBgkqhkiG9w0BAQsFAAOCAQEAu+oK6+s6UCiF
dBuhpPpzw7gKVhQvxXuhfsE2WYF/k/kYQz3tc5HpeFvRiD6AO3g/XYONWjq35lZF
s+kNaVZurBG3G9ay6ABFWCwu0ukHEG4Q6/UQkx0xJf1eFm7H1fyg5UUXMI3qGBtn
cinWclDw4KwicGTd8ygubR/pQhlNwrlS7R9B/FBBIvmeCOULEm+25Srt8RZRelip
VDdT0vDZSKx1jY+O2JTnarVLwIFI2N0Feo00UNDI3QuLLKvkBj4+wNIQfjVS7JEn
SZ/k/Tj+jpFBTOo+C56QRA1I+aWn7X5cM4CPDsxLinpEeDdSLDYa3gdb0OzMdJSu
H88DJIHvOQ==
-----END CERTIFICATE-----