Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133342e302f32342d3234203d3e20323637333636.roa
File:                     34352e3233342e3133342e302f32342d3234203d3e20323637333636.roa (raw, json)
Hash identifier:          PvBY4dmBuZcnVXJSfZfZD0et4Q0ClFf/imeh0Aq+EbE=
Subject key identifier:   70:15:EE:2A:57:DE:76:6C:D2:B5:C9:B7:ED:CA:13:57:80:AE:11:BB
Certificate issuer:       /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial:       77BF409768AB6334FB4119AF62C8A59FF7B979D6
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133342e302f32342d3234203d3e20323637333636.roa
Signing time:             Tue 23 Apr 2024 13:51:17 +0000
ROA not before:           Tue 23 Apr 2024 13:46:17 +0000
ROA not after:            Tue 22 Apr 2025 13:51:17 +0000
asID:                     267366
IP address blocks:        45.234.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bf:40:97:68:ab:63:34:fb:41:19:af:62:c8:a5:9f:f7:b9:79:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
        Validity
            Not Before: Apr 23 13:46:17 2024 GMT
            Not After : Apr 22 13:51:17 2025 GMT
        Subject: CN=7015EE2A57DE766CD2B5C9B7EDCA135780AE11BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:91:85:08:85:a3:85:8c:fd:26:1a:de:d2:
                    ad:a6:ea:70:54:c7:f6:fb:d3:a1:42:75:33:29:ca:
                    c0:2e:f9:c2:5a:c5:b5:43:a3:55:72:19:73:ef:03:
                    fa:14:9f:94:d1:5b:bd:ba:77:cf:ae:f8:40:13:3c:
                    08:0a:21:a7:8d:a7:91:19:2d:72:44:76:b8:d1:85:
                    cd:ed:20:e5:9a:c9:6b:bf:86:0f:ab:dd:ad:4a:26:
                    09:93:8e:4d:e3:55:c0:fb:7e:65:47:06:ea:58:bf:
                    77:e5:73:d2:20:57:f6:3e:17:5c:eb:88:45:4c:0b:
                    49:ad:f5:9f:e0:5c:d6:5d:09:39:53:7d:52:c1:88:
                    b8:69:f8:4c:ab:70:80:db:df:dc:07:1f:d8:76:ed:
                    6f:6b:a7:51:17:39:c4:1e:82:13:f2:24:27:a0:74:
                    59:b3:10:d1:23:64:f9:91:c7:af:ea:40:f5:0b:5e:
                    99:59:0a:7c:62:51:a5:60:e5:52:f2:ca:2e:e7:b2:
                    10:34:8a:13:15:10:35:5c:0b:2e:f6:af:58:5f:71:
                    b4:df:7c:40:c7:88:1e:3c:d0:ea:9f:56:6b:fa:27:
                    dc:e4:20:dd:58:6e:10:ff:ca:1a:d1:1f:22:a1:d9:
                    b2:3c:e0:c0:db:bc:c0:73:cd:84:3d:d0:ca:dc:0f:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:15:EE:2A:57:DE:76:6C:D2:B5:C9:B7:ED:CA:13:57:80:AE:11:BB
            X509v3 Authority Key Identifier:
                keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133342e302f32342d3234203d3e20323637333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c0:93:87:db:d0:45:d2:7f:2a:62:ac:fd:37:06:3d:76:17:
         3a:ab:0a:4b:24:5f:2b:fc:d6:73:27:4e:da:fc:7a:e7:7d:d4:
         02:b8:b3:93:f1:15:86:30:14:e1:6e:81:66:20:14:94:da:f7:
         2c:23:ee:44:be:e2:40:72:12:ff:1d:df:02:6e:a3:d1:24:e5:
         8d:07:df:36:c8:fd:0d:9b:1f:d5:1d:a7:cd:14:21:7f:5d:cc:
         b5:90:7b:39:a2:f2:bc:d0:68:a0:6d:f8:1d:f9:54:30:4f:76:
         49:b4:fc:0d:cc:c1:27:5d:e2:bf:e7:bc:47:a0:db:3c:70:fc:
         0b:36:cd:de:27:64:ce:1f:35:c4:f5:1d:98:e1:ef:a3:e0:51:
         26:67:43:3f:3a:e3:9f:6f:78:97:a8:5d:54:44:8f:62:88:5a:
         31:4b:ff:49:c9:cd:48:56:7e:df:e2:d3:bb:6d:d0:35:6a:a6:
         8f:d9:6f:5d:2e:d8:33:9c:f9:70:15:06:03:21:5a:39:30:e0:
         9c:87:e3:a1:38:f3:58:6b:b5:1c:04:28:d7:36:0f:bf:10:b3:
         ad:c9:01:12:8c:cf:b0:73:56:b0:9b:63:44:b6:f4:d6:8b:64:
         df:2a:3d:ef:6f:d1:e1:e9:73:79:c5:9e:29:fc:38:01:17:ea:
         2e:a0:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org