Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3232203d3e20323638343439.roa
File:                     34352e3136312e37322e302f32322d3232203d3e20323638343439.roa (raw, json)
Hash identifier:          /yMbuIjvg7cthtlLQGoNoY+gXHf6DmQwrtyHsZUQ1uw=
Subject key identifier:   82:B4:FB:B7:0F:15:0D:FC:AB:D9:46:7D:C2:93:9B:76:8C:99:A4:EB
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       13D229DE6C78F4EDFE3F7B7ED895FE9AF54CD3F9
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3232203d3e20323638343439.roa
Signing time:             Wed 05 Jun 2024 15:01:48 +0000
ROA not before:           Wed 05 Jun 2024 14:56:48 +0000
ROA not after:            Wed 04 Jun 2025 15:01:48 +0000
asID:                     268449
IP address blocks:        45.161.72.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d2:29:de:6c:78:f4:ed:fe:3f:7b:7e:d8:95:fe:9a:f5:4c:d3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Jun  5 14:56:48 2024 GMT
            Not After : Jun  4 15:01:48 2025 GMT
        Subject: CN=82B4FBB70F150DFCABD9467DC2939B768C99A4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:67:ff:e4:7c:04:fc:3f:71:21:88:b7:77:
                    4d:49:ac:01:74:a0:bf:9e:a4:07:74:85:4f:81:8d:
                    d5:5c:88:f0:3b:23:57:67:0b:05:58:c5:fe:0b:71:
                    36:e2:2c:f5:3f:ca:86:9d:64:73:7c:51:20:9c:4c:
                    ed:98:0a:a6:26:ed:50:77:6a:13:e3:13:3b:23:b8:
                    70:6c:78:9a:c0:ac:66:1c:df:99:c2:04:ef:17:7b:
                    66:a1:61:3c:7e:f0:75:86:7c:07:b2:12:d8:85:b9:
                    26:c0:16:41:2a:2b:ab:cf:f9:39:19:ad:f2:d9:5a:
                    a9:70:17:b3:65:7d:7b:a7:ba:db:b4:e5:8f:4e:5f:
                    ed:f8:f3:a2:97:12:2f:2b:5f:78:cf:74:4e:d1:c7:
                    60:56:df:a2:da:cb:79:21:00:87:28:25:7c:86:44:
                    06:80:21:87:f2:8d:43:d1:5d:a9:50:38:07:79:d5:
                    d4:fe:76:c7:3d:e3:26:60:d5:b3:59:fa:12:f4:ae:
                    08:1c:cc:93:bb:f2:ec:8f:bd:f9:6f:75:6b:d9:21:
                    6d:61:a9:56:1c:10:52:cc:24:43:57:42:38:34:ad:
                    1a:9c:14:ec:2b:f4:e3:9d:ae:38:80:14:4f:d6:8a:
                    fe:f5:a1:6e:ae:30:20:0c:cd:d5:00:3d:47:e5:58:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:FB:B7:0F:15:0D:FC:AB:D9:46:7D:C2:93:9B:76:8C:99:A4:EB
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3232203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:40:b0:84:bc:52:6b:ce:9a:c7:11:36:33:52:4f:04:d4:d4:
         99:2c:62:2b:11:eb:5e:52:6c:33:06:06:1c:67:75:fc:ff:7b:
         39:cd:a4:2b:1b:ee:47:be:9d:40:01:0b:0a:83:26:91:0c:c5:
         03:da:18:e8:6e:ef:d6:87:ce:9d:6a:cb:b8:eb:6f:7c:5c:52:
         8e:f3:5f:62:46:13:2f:8e:87:47:44:d6:95:91:3f:bf:cd:64:
         bb:f2:1e:fd:84:57:9d:e7:92:61:91:74:7e:40:2c:10:38:a6:
         3a:e4:aa:e4:4d:9b:c5:4a:db:27:39:19:45:ec:8a:d4:35:7d:
         88:37:ff:69:c4:7c:de:73:3c:07:75:4b:7f:b4:99:53:9c:45:
         18:2e:28:ff:e2:53:9f:71:27:b5:80:8d:ca:c0:ec:b3:54:40:
         21:58:8e:db:5c:31:3b:ed:c2:82:8e:52:9e:63:0c:20:45:ee:
         08:41:e9:a5:84:fa:fc:de:35:7f:f0:89:c4:aa:79:30:40:1b:
         ff:75:1c:15:58:57:74:8b:50:f3:34:40:32:4f:7c:dc:6c:29:
         e0:54:79:bd:3c:d7:d1:f9:44:21:aa:97:01:1a:3b:3d:72:ee:
         6a:16:29:a7:c5:e9:8e:de:99:58:40:e1:18:be:7a:d3:f1:17:
         d6:7d:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 20:19:21 2024 by rpki-client on console-fra.rpki-client.org