Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32332d3233203d3e20323637343230.roa
File:                     34352e3233352e3136322e302f32332d3233203d3e20323637343230.roa (raw, json)
Hash identifier:          hJAlJMnO3fwj9kjGVMwVmauyoS9MrrsnKv2iPFWVxxU=
Subject key identifier:   9A:3B:B9:EE:21:9D:41:4C:98:89:05:2B:6F:B8:3C:76:3D:85:C3:AD
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       55F5EC107A15B8091D9A9CDA362CD42717A189CB
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32332d3233203d3e20323637343230.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     267420
IP address blocks:        45.235.162.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 13:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f5:ec:10:7a:15:b8:09:1d:9a:9c:da:36:2c:d4:27:17:a1:89:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=9A3BB9EE219D414C9889052B6FB83C763D85C3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:02:25:ba:55:2f:55:8c:21:9a:62:64:0f:
                    cf:09:1a:49:5a:19:ea:18:d8:b3:ca:a4:03:a3:1a:
                    01:b0:92:11:3f:31:82:d9:54:2f:fa:aa:ea:e9:2f:
                    98:14:d7:51:ab:ec:39:19:99:f7:ae:d7:39:47:0e:
                    73:fc:ae:34:34:fa:06:a4:a6:99:a7:05:19:63:2d:
                    c7:d4:ec:dd:dd:1b:88:2a:3f:be:3e:c3:7a:7c:eb:
                    e2:1d:11:c9:1e:fb:2e:24:fc:11:ee:d0:6d:ba:7f:
                    90:01:7f:fd:f4:3d:37:97:9a:c2:bf:bc:e5:98:fe:
                    3f:f5:ce:d4:ae:ae:ae:16:e4:46:b6:91:fb:e8:a9:
                    2b:da:b7:75:3e:a4:34:48:fc:6c:b0:97:71:7f:9d:
                    d1:47:02:8c:42:9d:d4:e7:cc:6d:c8:49:96:3e:88:
                    1d:cd:a7:86:63:e2:1c:29:b7:01:4f:59:be:6f:f9:
                    d1:6c:a8:f0:dc:af:2d:a5:3f:b5:21:ed:68:0e:12:
                    a7:ee:59:34:0b:29:b9:19:ba:55:d4:a4:62:ff:2a:
                    4c:32:c7:dc:59:2f:da:af:17:1e:4c:0b:d5:b9:e2:
                    19:b2:44:e6:a8:30:af:19:ed:5f:62:9f:e0:67:a1:
                    5d:a8:ac:c0:37:b6:9b:9f:ac:c6:fd:96:39:ba:68:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3B:B9:EE:21:9D:41:4C:98:89:05:2B:6F:B8:3C:76:3D:85:C3:AD
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32332d3233203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:6c:7d:d2:68:73:b6:e0:46:03:d3:1e:8a:f7:bb:b4:f8:b5:
         5a:ef:02:19:f9:8a:25:4f:24:65:d8:c4:51:34:01:26:e0:09:
         99:8a:0b:98:6e:d6:de:51:3d:ec:33:ae:bf:95:bb:5a:29:92:
         3a:06:10:b9:7c:41:1b:2c:17:8c:ac:88:ea:eb:fe:69:bd:89:
         2e:fd:db:b4:b2:d9:6a:82:c1:c7:19:8a:b3:70:0b:fd:31:12:
         2a:4c:9f:65:53:09:05:9d:f1:af:66:81:10:33:03:d2:bd:74:
         83:89:c2:72:ce:fa:af:3a:38:82:ff:3a:b3:7e:17:a6:5b:a7:
         5a:56:9c:42:07:ca:af:f9:e0:2d:8a:27:eb:69:52:90:b2:37:
         9b:45:a4:c3:83:86:b4:bc:4f:0d:84:39:8d:29:b8:7a:8f:db:
         75:12:96:4b:4d:2a:c2:a2:f3:ab:c1:d7:ca:d7:b2:3d:3a:7c:
         dd:29:ef:87:c5:d9:a4:bc:df:e4:2d:c0:49:62:fa:5e:80:6d:
         69:ec:91:cd:ce:0a:6a:ff:b6:fc:ce:9f:f9:d6:75:64:44:25:
         5e:43:84:15:1e:58:f1:ac:89:d2:8d:d4:0f:c1:39:d9:59:3f:
         a9:a0:1c:99:c2:ee:1c:dd:81:d3:65:43:0b:b7:35:83:75:73:
         42:23:b9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:03:34 2024 by rpki-client on console-fra.rpki-client.org