Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32332d3233203d3e20323637343230.roa
File:                     34352e3233352e3136302e302f32332d3233203d3e20323637343230.roa (raw, json)
Hash identifier:          E0ox42bSdMBGxCaANU7KKy6CugS9dEnwXFNkTIMPCnM=
Subject key identifier:   8D:D5:20:AB:03:68:DC:EF:15:E3:58:18:38:74:C9:F9:CF:CD:F0:32
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       7EC994F291AF7F47188DFBB52DDAC849984A5003
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32332d3233203d3e20323637343230.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     267420
IP address blocks:        45.235.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 01:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c9:94:f2:91:af:7f:47:18:8d:fb:b5:2d:da:c8:49:98:4a:50:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=8DD520AB0368DCEF15E358183874C9F9CFCDF032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:d8:c1:0a:9a:67:c0:31:0f:6a:96:52:86:
                    e3:d0:27:e6:10:04:a0:e8:f7:5d:38:69:27:0a:eb:
                    c1:fa:fe:d7:ba:fb:fa:25:eb:7b:44:5b:74:09:8f:
                    5f:25:49:ce:2c:e3:72:c4:c6:ed:16:9e:26:f9:78:
                    80:04:2e:03:70:c6:f4:f4:49:83:30:3b:ba:2c:54:
                    63:cd:6b:f2:d5:68:4d:8e:51:bf:6e:15:84:70:40:
                    c1:0f:c6:82:be:9d:4c:1a:d8:93:6f:9f:bb:f4:a9:
                    f9:47:0c:90:88:43:7d:1e:e2:e5:65:41:51:26:55:
                    9e:3c:7d:54:43:46:fd:93:56:68:b4:92:a1:ff:7c:
                    a0:fe:1c:bd:25:86:ad:24:c4:01:ab:81:72:a9:31:
                    50:89:b7:0c:ac:cb:b4:96:a7:8e:f3:d9:99:61:7a:
                    54:fe:5c:ac:99:eb:12:8c:89:a7:65:61:dd:30:09:
                    de:a8:0d:dc:21:93:7c:fe:52:de:d6:e3:09:06:fb:
                    9f:44:4d:0f:68:57:66:e3:40:34:8f:73:2a:da:e1:
                    52:13:88:e1:ba:3d:fe:57:da:f7:13:54:4f:6d:39:
                    df:e9:9a:b0:67:6b:c0:7e:bb:a7:77:22:ad:50:28:
                    ea:ee:5b:a8:b0:2b:f2:34:03:64:02:47:0a:35:b8:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D5:20:AB:03:68:DC:EF:15:E3:58:18:38:74:C9:F9:CF:CD:F0:32
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32332d3233203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:5d:03:1f:8a:ac:f7:ec:a9:7c:5e:68:36:ac:dd:a7:bb:
         fb:aa:5f:7b:6f:17:92:8c:14:8e:6d:71:d3:d8:85:c5:f9:e7:
         8e:f0:ba:dc:0f:29:b1:14:6f:c8:92:d8:0b:6f:2b:58:7e:1c:
         be:c9:85:73:54:cf:3d:0c:37:67:01:66:df:76:3f:cd:ab:de:
         b8:cc:5a:44:1b:db:7e:6e:33:31:af:8d:97:0e:73:88:c6:1e:
         08:2c:f5:77:6f:cc:dd:41:9c:20:78:6e:25:66:ae:9a:52:0e:
         32:3b:4f:3e:12:a6:6b:f0:be:cc:f5:61:b0:c9:55:78:f3:2a:
         53:e2:33:d1:e6:af:c4:48:15:88:b0:a3:14:6f:21:94:75:97:
         e6:f8:92:42:7b:f9:65:1e:70:fb:2a:79:72:84:4d:a4:3f:c6:
         28:52:4b:56:65:bf:a5:b0:d0:7d:e3:58:18:7f:b7:80:88:26:
         f3:81:4c:80:c5:25:2a:0c:9a:27:fd:47:ca:83:3a:13:20:ff:
         44:35:39:02:45:53:93:37:84:af:e7:8d:08:5d:44:55:d4:a2:
         df:0c:96:78:3a:ca:e0:e6:05:c9:20:d4:2c:51:a3:a6:a7:4e:
         12:2b:70:0d:f8:d8:3d:4e:34:5f:8a:b3:f7:aa:04:dc:54:16:
         28:1b:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 04:35:43 2024 by rpki-client on console-fra.rpki-client.org