Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32322d3332203d3e20323635323633.roa
File:                     3136382e39302e33322e302f32322d3332203d3e20323635323633.roa (raw, json)
Hash identifier:          wxmBzu7lIAv4vjNOeB09vtmXiNcShf2BLq08RBYc6bM=
Subject key identifier:   45:9B:E9:0C:4C:C0:51:EA:10:40:0F:E3:53:D5:B7:07:1B:6E:C1:8B
Certificate issuer:       /CN=CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4
Certificate serial:       782152C7306B00213A978904BBD27AAB39F7C87B
Authority key identifier: CC:C3:D7:2C:E0:5B:E2:79:4F:FD:02:00:FF:10:F4:A3:0F:87:4C:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32322d3332203d3e20323635323633.roa
Signing time:             Thu 04 Apr 2024 01:31:45 +0000
ROA not before:           Thu 04 Apr 2024 01:26:45 +0000
ROA not after:            Thu 03 Apr 2025 01:31:45 +0000
asID:                     265263
IP address blocks:        168.90.32.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Sun 21 Apr 2024 19:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:21:52:c7:30:6b:00:21:3a:97:89:04:bb:d2:7a:ab:39:f7:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4
        Validity
            Not Before: Apr  4 01:26:45 2024 GMT
            Not After : Apr  3 01:31:45 2025 GMT
        Subject: CN=459BE90C4CC051EA10400FE353D5B7071B6EC18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:95:11:b6:12:44:8c:32:d5:c2:55:ef:31:
                    eb:5e:2b:65:cb:19:ff:0e:54:07:ba:af:a1:c1:07:
                    cd:58:3e:58:be:fb:9c:65:5a:79:f8:d7:6a:79:b5:
                    9d:15:63:1d:e3:3a:ae:47:c9:5c:84:c4:3e:9b:fb:
                    ff:69:36:c7:6d:47:43:76:13:f3:51:14:c2:b8:d1:
                    99:d0:4f:4d:b2:91:11:51:23:01:bb:40:22:b4:29:
                    25:e2:45:fd:ef:64:09:6f:b3:df:99:e0:11:49:ff:
                    2a:b1:4a:13:7b:2e:17:74:a3:98:cd:23:0e:ac:7e:
                    03:28:ad:7b:bb:d6:bf:0a:62:39:b6:b3:47:46:83:
                    ad:1c:fd:54:4a:b6:ba:5e:b2:ae:8b:9a:64:07:87:
                    cf:d8:af:e5:f6:cb:52:23:5f:1d:d7:54:d1:d3:93:
                    88:46:74:a0:81:30:20:f7:6d:48:78:30:c2:aa:fe:
                    8a:06:56:45:ab:88:0a:fa:93:a0:63:9b:a5:08:f0:
                    58:92:06:eb:9b:91:47:5f:d2:15:30:94:72:67:5c:
                    86:ec:77:a5:92:f5:41:e6:c3:67:d4:d0:66:6d:a3:
                    04:46:91:d5:ee:b8:ae:50:33:08:b0:8b:b8:a2:ad:
                    1a:03:c4:a9:7c:57:96:7f:6e:28:68:ae:9e:d1:32:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9B:E9:0C:4C:C0:51:EA:10:40:0F:E3:53:D5:B7:07:1B:6E:C1:8B
            X509v3 Authority Key Identifier:
                keyid:CC:C3:D7:2C:E0:5B:E2:79:4F:FD:02:00:FF:10:F4:A3:0F:87:4C:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32322d3332203d3e20323635323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:30:38:4d:38:a6:0b:ac:d3:a2:9f:5f:1a:8d:b8:80:9d:
         2d:c6:05:01:22:0d:36:36:bd:54:f9:a5:1a:a9:28:84:7f:c9:
         d1:90:ea:01:a7:5c:11:1b:39:a2:07:00:cb:80:d5:35:67:19:
         e0:d8:e7:91:0e:2f:3a:f7:20:de:cf:69:54:cc:f6:89:9c:4f:
         bd:4d:2e:6f:25:63:ab:ac:97:16:73:1d:10:df:5f:f7:f8:df:
         84:d5:54:04:1d:ae:d7:db:30:07:49:fc:e0:2b:bf:8d:7c:5c:
         23:5f:67:93:fd:f5:ad:9d:6a:38:75:0c:20:fd:58:6d:12:1e:
         87:af:af:07:ff:21:a6:51:45:0c:03:59:7f:ad:52:48:3a:8d:
         88:b2:37:76:72:d9:4c:50:da:92:b3:05:76:4b:66:c2:a6:57:
         f7:6c:f8:75:ef:d8:8e:c4:23:3c:0b:60:a1:15:b6:db:a2:ea:
         28:34:22:fa:87:2e:29:22:7b:4d:e4:a4:45:63:a9:9b:bc:9b:
         c5:6b:83:9d:fb:41:ee:dd:a6:4b:c9:be:d6:23:c4:7e:0a:ee:
         67:73:fc:7f:bc:f9:85:95:ea:24:18:66:27:2d:0c:8d:cd:09:
         60:e2:a1:6f:1c:9b:77:a3:4e:3e:4b:a0:1c:05:e1:34:22:25:
         35:f0:32:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org