Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32332d3233203d3e20323636313532.roa
File:                     34352e362e33382e302f32332d3233203d3e20323636313532.roa (raw, json)
Hash identifier:          56Ylom8Tke6TQ+r1tKLnlqIFdNwvklR27WMfZlhb0X4=
Subject key identifier:   16:8C:F5:6D:5A:AC:F1:B1:C6:52:C7:E3:9F:26:B7:96:EC:F8:59:E1
Certificate issuer:       /CN=9D791F907273BED543508E5D9D56A36372EEB006
Certificate serial:       33BA8710A1D32A6CF66E1084D41CCE9F7447CA5C
Authority key identifier: 9D:79:1F:90:72:73:BE:D5:43:50:8E:5D:9D:56:A3:63:72:EE:B0:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D791F907273BED543508E5D9D56A36372EEB006.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32332d3233203d3e20323636313532.roa
Signing time:             Mon 04 Mar 2024 19:09:06 +0000
ROA not before:           Mon 04 Mar 2024 19:04:06 +0000
ROA not after:            Mon 03 Mar 2025 19:09:06 +0000
asID:                     266152
IP address blocks:        45.6.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 20:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ba:87:10:a1:d3:2a:6c:f6:6e:10:84:d4:1c:ce:9f:74:47:ca:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D791F907273BED543508E5D9D56A36372EEB006
        Validity
            Not Before: Mar  4 19:04:06 2024 GMT
            Not After : Mar  3 19:09:06 2025 GMT
        Subject: CN=168CF56D5AACF1B1C652C7E39F26B796ECF859E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1e:7b:d0:ea:c6:89:ce:65:b7:68:3f:b4:6e:
                    02:1b:bf:85:db:99:b5:69:53:a7:bc:93:21:2d:d0:
                    5f:2a:6d:eb:6f:9c:60:61:e5:e2:fe:67:23:f2:0f:
                    d3:48:d8:78:2b:32:0c:26:ae:99:5e:14:30:f0:84:
                    c9:66:c4:10:cc:33:20:29:36:aa:3b:f4:9c:2e:d1:
                    34:dc:73:2a:35:56:2e:b5:6a:25:4d:fe:da:b2:35:
                    6a:78:20:9b:1b:56:7e:40:b3:ec:1f:6b:a2:69:b0:
                    f7:6a:6e:9c:ca:f8:6e:20:0c:36:63:51:7e:98:0e:
                    5c:f5:a0:69:c5:29:e3:38:85:d9:36:02:f2:23:4a:
                    14:12:53:39:a7:ba:3b:33:d5:e6:34:82:4c:f4:a7:
                    da:2b:0f:35:77:9a:b9:59:91:20:00:76:3d:77:95:
                    19:d6:5e:79:c0:0a:fd:cc:97:2d:28:5b:24:76:29:
                    5f:c1:5f:c1:f5:44:a9:56:98:54:26:0b:ae:f8:95:
                    8d:b6:aa:95:0c:a5:90:ae:d2:d4:32:30:37:3d:3c:
                    9a:24:a8:80:36:5f:e2:b8:05:d3:8c:3b:3c:0c:47:
                    2a:9e:94:6f:64:59:6d:1d:60:ed:10:61:25:18:b0:
                    fb:8f:2c:28:4e:6b:c9:1e:65:7c:fc:b6:2f:f2:ce:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:F5:6D:5A:AC:F1:B1:C6:52:C7:E3:9F:26:B7:96:EC:F8:59:E1
            X509v3 Authority Key Identifier:
                keyid:9D:79:1F:90:72:73:BE:D5:43:50:8E:5D:9D:56:A3:63:72:EE:B0:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/9D791F907273BED543508E5D9D56A36372EEB006.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D791F907273BED543508E5D9D56A36372EEB006.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32332d3233203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:16:87:c9:81:cf:ec:b4:ab:bf:f4:4a:22:bb:02:a0:4f:b6:
         56:76:55:78:c2:28:f6:e3:9a:94:3a:3d:0e:09:12:5c:a1:df:
         d1:5f:98:b7:4b:e6:54:61:5a:20:a1:27:e1:6d:92:09:f4:e1:
         63:ad:85:5d:d2:05:e8:0c:ba:11:12:5b:1b:a7:30:a4:ec:fa:
         4e:72:da:6b:58:02:f9:49:90:95:e4:68:f4:b0:e3:22:35:ce:
         17:70:61:63:94:25:64:d0:7e:5c:1e:95:b6:57:6a:eb:9d:b2:
         40:b3:bc:69:23:51:f0:d7:4c:dd:0a:25:2d:b8:ba:bd:60:1b:
         80:ee:c7:82:37:ba:c0:21:77:70:df:98:df:37:d0:73:0f:04:
         a2:2c:b8:7c:28:3e:43:f1:78:42:d0:f2:e7:b2:5a:15:f0:64:
         25:ca:22:c5:3f:2a:06:f0:26:a9:50:de:c9:d0:c9:f2:16:b4:
         34:cd:d1:3f:be:d8:5f:a4:c0:b4:b3:69:40:4b:41:d3:87:12:
         44:c0:c5:74:e0:12:dc:94:27:2f:6d:2b:59:3b:21:42:fa:80:
         f7:aa:e8:43:d9:d2:19:ce:99:12:09:5b:ae:13:d3:f9:48:23:
         b7:8f:26:b1:20:fe:a4:ae:18:bc:35:cb:cd:dc:89:d5:aa:3c:
         99:c4:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 05:30:20 2024 by rpki-client on console.sobornost.net