Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3232203d3e203631363231.roa
File:                     34352e3233352e3136302e302f32322d3232203d3e203631363231.roa (raw, json)
Hash identifier:          3B54fGNLMlJaWdeIOEN4Jd2QNK69dbnzXmSzOxF7ri4=
Subject key identifier:   F8:9C:B4:94:20:64:0B:E5:70:BE:D7:0F:71:87:FF:76:52:DE:F0:BE
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       1ED4CF89943889B26BDA71E23E20F3341B6C7C20
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3232203d3e203631363231.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     61621
IP address blocks:        45.235.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 13:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d4:cf:89:94:38:89:b2:6b:da:71:e2:3e:20:f3:34:1b:6c:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=F89CB49420640BE570BED70F7187FF7652DEF0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:83:24:5d:82:9f:e6:86:50:fe:07:fc:02:
                    a7:1f:74:c9:a6:d3:9f:2b:b6:18:6a:9d:bf:85:4e:
                    3f:3e:92:9a:cc:45:09:72:79:14:81:ee:89:7d:3e:
                    88:ac:d1:9d:10:f4:47:34:b8:6a:36:26:59:e7:cf:
                    4c:72:70:67:98:19:f9:db:c5:33:88:70:04:2f:8e:
                    dd:90:8d:86:5e:2a:ba:2a:55:10:8a:fd:c0:12:bf:
                    ff:2a:db:f6:e0:bf:5f:4f:d2:4e:1f:68:9f:2a:13:
                    6f:cf:7f:c2:c5:0c:21:e7:61:b9:51:e3:00:58:57:
                    83:5d:b5:b5:c7:e7:25:2d:9e:47:24:96:79:fe:bc:
                    97:f1:a7:bc:80:53:74:d3:f3:e9:eb:fe:77:c3:ea:
                    95:c6:5c:9a:4e:a5:86:00:c2:31:a7:74:1d:39:c2:
                    7a:50:d3:5d:46:54:fe:17:de:7d:37:8a:3e:0a:46:
                    29:b0:ea:c5:11:83:68:f2:c2:26:74:bb:8d:71:ee:
                    85:30:0d:a2:1d:5f:33:e9:06:e5:8c:c3:8e:96:b8:
                    6a:c0:62:42:b0:9a:10:ef:c0:ed:e0:e9:2a:63:e4:
                    9c:4b:b4:b7:4a:b3:95:eb:46:24:c1:91:5e:3f:8f:
                    c6:2c:5c:a1:0d:1e:bb:84:38:ca:b5:3f:f5:50:5e:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:B4:94:20:64:0B:E5:70:BE:D7:0F:71:87:FF:76:52:DE:F0:BE
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3232203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:01:50:5d:8d:69:0b:9c:ab:b4:5a:8a:c1:d6:b0:7f:f6:5e:
         e2:1e:81:8c:19:4d:f0:8c:72:9e:24:dd:b6:9b:bf:6a:0b:f7:
         cc:10:87:cd:ef:38:ed:b4:33:1c:bb:b0:0e:a6:7f:99:7c:54:
         d6:84:aa:c9:fc:fb:35:9d:c6:83:3d:c5:10:f7:cf:91:a8:82:
         0c:db:e6:62:45:08:cb:d3:17:14:29:b3:3d:91:d8:e4:09:77:
         41:97:d0:29:64:b4:2d:47:1c:3e:86:29:11:ef:d6:29:14:2e:
         cf:66:91:a6:19:f3:5c:b5:09:1f:c4:03:45:4f:15:b2:5a:d8:
         ed:50:71:76:99:2c:f9:f5:0b:25:49:2a:01:f9:65:be:46:2c:
         bf:c3:40:7f:58:11:dd:8e:80:3f:8c:9c:d7:66:f3:84:bb:75:
         cb:1d:8d:4c:3b:b5:6d:37:a1:a9:f7:8e:60:39:df:3a:7b:7a:
         0d:a5:60:1e:ea:75:a6:fd:f7:12:1a:11:27:72:f9:a6:30:bd:
         3e:de:43:df:97:d4:32:bd:0b:98:d6:1a:d1:d9:7a:e1:ed:bb:
         f8:81:99:6d:e6:c2:fc:84:1d:b8:bd:cb:04:07:f3:5b:02:9e:
         14:04:77:9a:d6:c0:96:48:1b:72:6a:25:81:8c:7a:16:e4:5f:
         cb:25:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:21 2024 by rpki-client on console-ams.rpki-client.org