Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33332e302f32342d3234203d3e20323639343235.roa
File:                     34352e3138362e33332e302f32342d3234203d3e20323639343235.roa (raw, json)
Hash identifier:          oVLjKouWP6BtYFMrW/JA5XyuXqUeQqKJ7zvYBVXB2ds=
Subject key identifier:   BF:3D:C0:B7:15:2E:8C:E7:8A:95:CE:E4:0C:11:23:54:7F:A4:00:D5
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       1DC5972EA9A23C7BD06BB350DF82C445E7997949
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33332e302f32342d3234203d3e20323639343235.roa
Signing time:             Mon 19 Feb 2024 15:48:28 +0000
ROA not before:           Mon 19 Feb 2024 15:43:28 +0000
ROA not after:            Mon 17 Feb 2025 15:48:28 +0000
asID:                     269425
IP address blocks:        45.186.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Feb 2025 15:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c5:97:2e:a9:a2:3c:7b:d0:6b:b3:50:df:82:c4:45:e7:99:79:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Feb 19 15:43:28 2024 GMT
            Not After : Feb 17 15:48:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:84:28:cf:0c:73:f0:1f:0e:e5:7b:68:ce:
                    61:ca:97:91:78:fe:62:6d:f5:4f:e5:62:dd:f2:9c:
                    eb:93:aa:0d:ff:d4:eb:a7:60:07:f5:ff:5f:c5:58:
                    9b:f5:a9:aa:d4:02:46:ef:d7:6e:90:61:fa:d1:2e:
                    01:d4:ce:b1:67:2c:22:02:fb:cc:18:ac:02:20:b0:
                    f7:f4:7a:77:71:88:13:09:25:6e:c0:f0:4a:ed:1a:
                    98:19:4e:b0:0d:44:f9:6c:10:a2:ee:18:95:85:57:
                    cd:22:c5:79:91:7e:9d:02:1e:51:c2:81:d8:4c:38:
                    28:0a:6a:b3:a3:b1:64:8a:13:5a:fe:06:c6:60:f3:
                    c8:b2:8b:d7:0f:2d:59:15:bd:68:06:2d:c4:65:2f:
                    1a:8e:b6:80:42:1f:ea:75:58:4d:c6:87:65:28:48:
                    2c:da:35:00:47:21:67:1e:57:d6:e9:be:11:bc:da:
                    dc:de:78:2b:a1:0c:20:00:f3:a3:7a:cf:90:e5:8b:
                    33:5f:d4:72:1b:a8:35:09:7c:c6:30:2a:53:c5:98:
                    31:1a:8a:35:c6:bf:a7:8f:e5:7a:32:6c:76:1c:45:
                    2e:8e:40:97:92:19:58:ca:e2:ea:00:64:ca:80:b4:
                    04:68:a8:1a:9c:9b:9a:20:78:6b:51:c6:77:89:2c:
                    6a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3D:C0:B7:15:2E:8C:E7:8A:95:CE:E4:0C:11:23:54:7F:A4:00:D5
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33332e302f32342d3234203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:60:89:c7:2d:ae:3a:c3:7c:28:cf:9b:36:85:4e:6a:dd:ca:
         75:f9:4f:fd:c5:33:8a:e6:92:e6:0d:77:fe:c3:25:77:e6:b3:
         85:19:1f:91:be:3c:c2:b5:01:07:31:7f:3c:76:f8:ff:d8:80:
         55:61:c3:72:8e:f9:38:06:16:06:3f:cd:5a:c3:88:d8:bf:4d:
         24:1a:ec:e1:64:cd:c0:47:c0:37:1c:b7:8d:42:39:f6:d3:22:
         c0:94:15:bc:0e:73:7d:9c:06:7d:e9:fd:c0:5e:92:8b:44:dd:
         b0:fa:47:f2:ee:36:5f:45:37:1a:e8:a3:33:f7:1a:2b:b9:98:
         32:dc:ff:ff:f1:43:ba:ee:5a:ff:a6:b7:8a:c9:f9:bc:d5:08:
         0b:c1:9f:fc:33:0e:75:56:42:ca:0b:ea:7c:b0:66:51:e0:7a:
         be:63:2d:44:8f:61:45:f0:e0:2d:17:45:90:0f:3e:92:b1:d5:
         65:57:14:ae:67:75:07:95:bb:c9:6f:b3:5c:b1:c4:93:1d:97:
         0c:5e:ad:3f:04:78:84:df:17:cb:23:2a:4b:4a:2d:81:3d:43:
         1b:7f:c2:99:b7:33:9d:83:c2:65:6c:35:66:65:fb:6a:5c:10:
         89:85:d9:88:26:c2:07:9f:84:85:7d:5a:81:34:ce:00:fa:b0:
         f0:32:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 22:34:36 2024 by rpki-client on console-ams.rpki-client.org