Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3232203d3e20323637333636.roa
File:                     34352e3233342e3133322e302f32322d3232203d3e20323637333636.roa (raw, json)
Hash identifier:          xw+mKcSQPfjx4DN8bAfYdl6HLR3tmiGthdUFbBCwxmc=
Subject key identifier:   BA:A1:AD:90:E6:3D:EF:99:9C:75:B2:59:A7:34:FC:55:40:76:A6:9B
Certificate issuer:       /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial:       6263B04F1D4372706B4D228778EA251FCA8EFCD7
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3232203d3e20323637333636.roa
Signing time:             Tue 23 Apr 2024 13:51:07 +0000
ROA not before:           Tue 23 Apr 2024 13:46:07 +0000
ROA not after:            Tue 22 Apr 2025 13:51:07 +0000
asID:                     267366
IP address blocks:        45.234.132.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:63:b0:4f:1d:43:72:70:6b:4d:22:87:78:ea:25:1f:ca:8e:fc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
        Validity
            Not Before: Apr 23 13:46:07 2024 GMT
            Not After : Apr 22 13:51:07 2025 GMT
        Subject: CN=BAA1AD90E63DEF999C75B259A734FC554076A69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:12:c3:c2:dd:60:fc:97:5f:35:78:29:bd:
                    02:af:cc:28:0e:0c:6f:e3:07:5f:43:1a:ec:08:ea:
                    cb:a3:b1:14:26:2d:e5:36:3f:5f:50:46:f4:6f:8b:
                    ea:f5:ba:5c:2b:d2:31:ab:a8:0e:3d:23:a8:43:a4:
                    a0:f5:2a:bc:11:d4:09:08:7c:ae:01:08:92:9d:0a:
                    90:3f:23:1e:7b:c1:93:4a:d3:28:d5:93:3d:7b:96:
                    36:6c:3e:93:bf:34:e4:ec:7f:ad:78:83:30:6d:70:
                    09:20:5a:f8:fe:1f:79:07:fe:e9:01:14:9e:22:5c:
                    79:d8:8e:55:e8:26:c7:57:61:32:42:f9:5d:1e:03:
                    52:b3:2b:b1:a4:11:f7:7f:58:d9:7f:ba:50:5a:60:
                    a3:5e:b5:b4:33:3c:56:55:ce:bf:73:eb:b1:29:42:
                    13:7c:ff:16:69:9b:aa:f0:9e:c9:21:d7:e5:a9:b5:
                    b2:48:51:21:e6:a5:20:9c:34:78:d5:10:84:1a:50:
                    9b:73:93:37:b4:dc:ca:e3:89:db:a1:74:f4:2e:c8:
                    30:5f:34:52:d0:89:cb:d7:5d:31:60:04:bf:78:86:
                    4e:ad:53:f3:c5:67:f7:d6:3d:31:89:28:99:8f:33:
                    b3:63:49:56:33:f1:95:81:17:84:61:82:1d:0a:6d:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A1:AD:90:E6:3D:EF:99:9C:75:B2:59:A7:34:FC:55:40:76:A6:9B
            X509v3 Authority Key Identifier:
                keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3232203d3e20323637333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:67:96:66:1a:61:a8:ef:f1:e8:cd:76:dd:67:a0:24:e9:fa:
         fd:63:fc:3c:07:e5:88:2b:0f:ec:c7:79:2f:60:09:e1:c9:fa:
         b5:0d:8c:e1:5f:ed:1e:f7:fb:5f:2a:d1:28:e8:40:46:8f:00:
         29:07:ea:3e:95:6f:df:53:45:b4:ab:a4:c8:85:33:67:5f:16:
         3a:32:2d:05:68:a7:1f:38:0b:59:ea:e8:3a:e5:dd:f5:1e:a7:
         ef:86:5e:b3:11:69:26:6c:4c:40:33:7c:07:88:61:8e:34:55:
         97:14:d4:52:85:6c:06:d2:3d:7d:8b:c3:de:34:aa:da:bf:68:
         06:47:7b:8d:25:59:c8:da:62:cb:32:18:d4:2f:6b:58:42:ce:
         b8:2e:5e:7c:8d:6f:4c:e1:99:15:37:23:fb:5f:24:c4:7d:e0:
         ac:a7:ec:74:84:2d:83:89:89:d3:4a:5f:3b:72:04:c9:1a:d0:
         01:7a:18:40:23:7f:93:89:d5:9d:ee:58:4d:3e:99:29:c2:b0:
         55:95:92:44:89:6f:a3:69:75:1b:be:97:d9:83:95:ef:2f:5e:
         00:3f:5c:7e:06:09:6d:a4:5a:f5:ec:c4:ed:10:8e:ba:b6:ce:
         b9:91:4b:b9:4e:fb:59:e2:ef:d4:f1:7e:e8:3b:7d:11:a7:a2:
         7c:86:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:03 2025 by rpki-client