Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32342d3234203d3e20323639343235.roa
File:                     34352e3138362e33322e302f32342d3234203d3e20323639343235.roa (raw, json)
Hash identifier:          T0MCpTFDGAvEW3orXKHU1emHjshutFH6oMuM+mMSsj8=
Subject key identifier:   64:10:15:3F:83:A3:21:22:CD:DA:07:29:B7:06:78:27:CD:0D:6F:41
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       02A0FF4EBFB7BA081D14F043636B3C0524B0B2B2
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32342d3234203d3e20323639343235.roa
Signing time:             Mon 19 Feb 2024 15:48:28 +0000
ROA not before:           Mon 19 Feb 2024 15:43:28 +0000
ROA not after:            Mon 17 Feb 2025 15:48:28 +0000
asID:                     269425
IP address blocks:        45.186.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Feb 2025 15:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:ff:4e:bf:b7:ba:08:1d:14:f0:43:63:6b:3c:05:24:b0:b2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Feb 19 15:43:28 2024 GMT
            Not After : Feb 17 15:48:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5a:57:33:83:e6:ff:a3:ca:60:f4:6b:da:12:
                    25:8f:7b:b8:46:74:b7:7d:89:94:2a:97:4f:9d:f8:
                    6e:ad:ef:89:ec:f0:d9:73:dc:60:f0:27:58:ea:59:
                    16:47:a6:98:dc:9c:f5:89:26:73:95:1c:a8:11:83:
                    0a:00:33:93:c2:39:97:41:6f:f1:ea:0c:e8:da:63:
                    b9:44:e7:f9:10:81:4c:c6:ca:dc:4e:24:d6:85:e2:
                    b0:84:94:28:f8:e3:cd:46:e0:2d:6a:56:9c:3c:a3:
                    6a:1d:f6:7e:af:1d:42:db:ea:50:bb:1a:95:b7:71:
                    e8:c6:12:b3:87:79:38:67:91:c9:42:39:98:e1:34:
                    3e:a6:4b:97:85:61:5b:45:29:50:e1:c8:77:30:50:
                    4d:6f:46:f1:ce:94:29:0f:b0:ea:3f:79:f0:f7:9d:
                    ba:84:ca:1c:40:5f:56:90:d1:6c:10:2b:16:aa:99:
                    b3:e7:d5:af:93:7b:5b:ec:26:f1:1b:ea:c2:30:2e:
                    41:ae:fe:03:ea:cb:e6:d2:94:91:64:39:7b:72:de:
                    a5:dd:b1:6a:0b:1e:0f:9f:50:d7:fe:82:dd:e8:e6:
                    42:d2:d2:be:0a:47:eb:41:3c:e4:21:71:fc:8f:a4:
                    42:7d:4d:9a:34:14:7a:af:0c:83:f8:3d:bd:35:52:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:10:15:3F:83:A3:21:22:CD:DA:07:29:B7:06:78:27:CD:0D:6F:41
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32342d3234203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:e0:96:02:b0:93:83:49:01:ec:02:cf:f7:49:f1:5e:6f:
         e8:40:db:9e:b0:3f:8c:ea:88:21:a3:9d:7c:3c:ad:cd:48:43:
         4f:6c:8a:39:03:37:4b:43:84:07:ca:09:6e:d9:4c:d6:81:ff:
         83:a2:4d:33:b8:dd:18:17:6e:a1:cb:c9:75:e1:da:de:fe:f5:
         f3:52:72:58:c4:5a:86:cd:76:f4:89:70:28:dd:98:ae:ca:20:
         0f:e3:29:dc:4e:10:43:ea:0d:80:60:d2:62:eb:cc:db:26:1b:
         73:b2:02:d3:96:9c:b6:87:cb:7d:c2:32:43:79:43:29:4a:b0:
         8a:50:26:ce:ea:ee:51:e3:77:30:9f:f4:17:65:2b:a1:5f:8e:
         a7:e1:66:f6:06:17:41:c3:3d:4f:f6:77:29:1f:cb:b8:ef:e6:
         68:1c:6c:21:68:d1:3b:f4:05:e2:9d:cc:5b:0a:84:ef:ce:68:
         ec:76:bd:c6:2b:ed:1b:53:f4:a4:75:42:d2:59:9a:d9:bd:da:
         5e:12:88:67:85:72:50:d9:0d:b3:36:9f:4d:93:a8:7e:49:e8:
         ae:09:71:2d:9a:20:e7:a5:68:a3:d6:d6:2a:1d:0d:3f:c8:7b:
         ef:ec:08:c9:d7:2e:0e:6c:df:31:89:6f:60:9e:28:bd:d3:30:
         4c:15:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 21:57:28 2024 by rpki-client on console-fra.rpki-client.org