Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32332d3233203d3e20323637333636.roa
File:                     34352e3233342e3133322e302f32332d3233203d3e20323637333636.roa (raw, json)
Hash identifier:          yHSJ79DXH9HF35oQR/yiEpRYHJIcEF4v1EZ9vdMTn0g=
Subject key identifier:   98:21:7B:0E:1C:95:40:92:47:8C:B1:05:44:B7:C9:68:B1:22:A2:BA
Certificate issuer:       /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial:       77C760EEA47A0D232F50CD8852A80860F1BD8599
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32332d3233203d3e20323637333636.roa
Signing time:             Tue 23 Apr 2024 13:51:09 +0000
ROA not before:           Tue 23 Apr 2024 13:46:09 +0000
ROA not after:            Tue 22 Apr 2025 13:51:09 +0000
asID:                     267366
IP address blocks:        45.234.132.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c7:60:ee:a4:7a:0d:23:2f:50:cd:88:52:a8:08:60:f1:bd:85:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
        Validity
            Not Before: Apr 23 13:46:09 2024 GMT
            Not After : Apr 22 13:51:09 2025 GMT
        Subject: CN=98217B0E1C954092478CB10544B7C968B122A2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:42:b4:ac:30:ef:02:93:10:17:06:08:28:
                    e4:6d:04:60:74:c7:07:4f:7f:80:31:61:97:c7:d6:
                    df:a0:91:ce:a4:6e:9a:aa:52:14:ea:8a:c1:14:34:
                    10:b1:1c:86:19:5a:7e:da:a2:fc:00:a3:ce:00:4d:
                    27:6e:a4:41:f0:2e:79:ea:4c:5d:55:6c:72:64:d3:
                    0e:29:2c:68:11:d5:14:85:29:6f:33:86:c8:ca:61:
                    ee:2b:4e:25:32:32:a7:88:10:f5:07:95:7b:98:10:
                    e5:71:da:1d:e2:1d:00:2f:e4:82:47:c2:35:58:67:
                    0c:45:6f:d4:57:a2:f1:3f:91:43:5d:c8:d1:f2:6c:
                    df:cc:b0:d8:de:7d:3a:34:45:76:11:83:ff:dc:d3:
                    ed:60:09:70:5c:ec:1e:8c:b4:a5:e3:5e:ff:23:8c:
                    b8:04:87:e3:42:5a:a2:95:fa:ad:99:ed:c2:8a:dc:
                    13:68:9c:0c:45:78:59:64:36:c7:2f:9d:65:16:38:
                    2c:af:65:d8:43:35:e9:5e:47:ab:8a:f2:e5:4d:fd:
                    6c:9e:13:e4:36:13:f2:a8:c9:89:b2:6a:ee:1a:69:
                    7d:d4:3c:ef:ee:30:e6:c8:53:e2:db:da:76:b7:83:
                    af:38:c2:c7:fa:60:11:8a:37:00:da:bb:fa:d9:3b:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:21:7B:0E:1C:95:40:92:47:8C:B1:05:44:B7:C9:68:B1:22:A2:BA
            X509v3 Authority Key Identifier:
                keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32332d3233203d3e20323637333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:02:c3:7a:68:e2:5f:07:ae:92:cd:33:dc:3a:d5:e5:51:54:
         68:04:cf:16:98:35:04:44:69:03:d8:bf:ea:06:59:c8:29:c1:
         ec:6c:8f:4b:f9:c0:c3:e6:9a:0e:94:dc:f3:d3:a6:c9:d2:da:
         d5:86:2f:07:d0:51:8f:28:c0:19:5e:ec:fa:67:53:32:34:6d:
         a2:e1:3e:6c:81:32:6f:b9:e5:0d:f2:b3:e6:70:f3:1a:2f:9c:
         82:24:5d:07:d1:b2:cf:11:89:d9:ed:67:5c:6c:66:31:d8:50:
         02:7d:61:b2:50:6b:85:a3:0a:0a:ff:97:18:0b:60:a3:86:a6:
         da:33:22:9c:a9:69:73:0d:22:83:e4:0d:c2:fc:bd:a2:e5:49:
         fd:30:c3:e9:a4:3f:30:da:68:e1:14:c6:ad:d0:52:34:d8:af:
         dd:09:33:64:82:94:82:11:1c:3e:12:25:cf:97:a8:a4:fd:59:
         52:7a:21:67:09:f1:d5:e3:e2:f5:a2:ab:3a:41:f9:25:62:b5:
         2d:6d:ef:0f:84:2e:73:ce:e4:30:4f:29:4c:cf:cf:6e:42:5d:
         f5:d1:e7:09:d4:7e:2c:c7:25:c3:4a:d1:e7:91:a9:5f:00:ae:
         dd:22:0e:a3:0f:b7:3c:ee:56:84:43:dc:74:c4:58:18:64:89:
         8e:37:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:44:02 2025 by rpki-client