Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136302e302f32332d3233203d3e20323637343230.roa
File:                     34352e3233352e3136302e302f32332d3233203d3e20323637343230.roa (raw, json)
Hash identifier:          otnfCuscu4W/DfHIU0xfNl/Vr1yf9S5w7i9N4aRX1Vo=
Subject key identifier:   F9:50:41:1B:64:24:36:07:26:B2:80:73:E4:83:8E:EB:8F:D7:A3:71
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       4C15BC7BFAB26BAFF297AD50377525A856DC4E85
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136302e302f32332d3233203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        45.235.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 21:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:15:bc:7b:fa:b2:6b:af:f2:97:ad:50:37:75:25:a8:56:dc:4e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=F950411B6424360726B28073E4838EEB8FD7A371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:02:d1:03:d6:18:4f:fe:9b:32:ae:ce:60:aa:
                    af:12:08:b8:2b:31:f8:2d:50:1d:39:f9:92:2e:c7:
                    2a:bc:5a:6b:09:5e:35:64:95:a6:94:8e:c6:7a:a1:
                    5a:b6:52:98:a7:2b:a2:c0:e3:a0:5e:eb:53:bb:58:
                    13:7b:df:c3:fc:75:fb:1a:e2:bb:6a:ec:5b:fd:a6:
                    8c:57:2b:7d:29:00:b5:57:d6:a3:33:0d:6f:40:81:
                    65:a6:8a:f3:86:09:bf:ae:94:40:8f:9c:d6:1c:2d:
                    b8:b0:08:15:d5:3c:7b:5a:99:2d:a6:c6:cf:b4:6a:
                    48:3a:32:94:45:27:60:25:4a:bd:eb:9c:47:42:24:
                    ee:c0:cf:23:8b:b3:b0:d9:13:dd:f5:31:3c:09:cc:
                    10:06:08:54:3c:2f:63:9d:8d:46:25:a1:cb:3b:e7:
                    fb:a7:c8:1a:bf:1a:b2:99:99:33:42:f1:04:b3:18:
                    f6:f6:0b:f6:75:77:87:d4:d3:55:dc:03:50:db:70:
                    a2:ed:39:60:9c:ab:9a:35:db:ac:30:f9:fc:41:1e:
                    1c:68:80:7a:52:a4:90:6a:0f:11:4a:88:6d:9a:8a:
                    b7:27:95:82:09:c5:f7:81:6b:62:14:dd:d1:19:44:
                    ef:70:fc:7e:ca:71:6a:5c:27:8a:e5:78:f4:64:29:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:50:41:1B:64:24:36:07:26:B2:80:73:E4:83:8E:EB:8F:D7:A3:71
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136302e302f32332d3233203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:0e:c2:31:c5:88:6a:af:a3:2c:d7:d5:6a:22:de:3f:75:e6:
         8a:0d:35:05:2d:56:c6:4a:f3:03:d0:b5:e3:11:03:f5:13:1f:
         41:d4:b8:d7:17:f3:24:41:60:5f:25:c8:49:4d:05:60:7f:51:
         a6:ae:ab:8c:22:13:05:5e:60:7c:e4:68:25:96:34:6d:c0:34:
         43:8b:c6:46:b9:39:18:c6:e1:d7:78:01:d4:a2:8e:d6:96:71:
         38:92:d3:52:19:68:e2:36:be:5b:3f:ea:54:7a:b2:4a:e0:94:
         fa:85:33:79:91:a4:65:7a:25:3e:08:97:40:58:28:b9:a4:34:
         ff:2f:43:95:ec:28:cc:c7:6f:08:dc:93:e8:55:cd:18:24:0c:
         26:f0:0b:62:3f:db:4d:d2:98:88:05:41:07:ce:2e:3e:a6:3a:
         f6:15:27:ae:99:41:6b:29:8b:a6:f5:b4:a6:17:9b:26:67:61:
         a0:82:fe:4b:ed:cc:7e:6a:a6:18:1b:25:59:5b:15:35:41:e4:
         a6:c4:56:4d:bf:83:8b:3a:50:b0:3b:56:4b:55:8c:6a:4a:df:
         cb:01:2d:14:62:db:61:31:34:e1:60:98:69:b4:f4:f5:06:a5:
         6a:b6:6f:76:2e:d7:7a:5b:f2:19:57:bb:1b:ac:30:6b:63:16:
         0f:e6:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org