Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32342d3234203d3e20323638343439.roa
File:                     34352e3136312e37322e302f32342d3234203d3e20323638343439.roa (raw, json)
Hash identifier:          vUeuGxbrA+7zw8h2oOpgXZG15WH3wwU9lvIwI/m/rig=
Subject key identifier:   B3:91:C2:2D:91:F8:4C:3D:71:7A:6B:8F:F4:B8:E3:5A:E0:57:EC:3C
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       13423EAAAEB5F83E2AFDDC19211E5756A6572166
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32342d3234203d3e20323638343439.roa
Signing time:             Wed 05 Jun 2024 15:01:48 +0000
ROA not before:           Wed 05 Jun 2024 14:56:48 +0000
ROA not after:            Wed 04 Jun 2025 15:01:48 +0000
asID:                     268449
IP address blocks:        45.161.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:42:3e:aa:ae:b5:f8:3e:2a:fd:dc:19:21:1e:57:56:a6:57:21:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Jun  5 14:56:48 2024 GMT
            Not After : Jun  4 15:01:48 2025 GMT
        Subject: CN=B391C22D91F84C3D717A6B8FF4B8E35AE057EC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:67:b7:8c:03:b0:42:1d:be:28:99:ca:d4:
                    5e:2e:42:c8:a9:27:06:fa:76:8b:89:9f:14:c0:cb:
                    c2:04:b2:bb:7c:77:01:48:fc:a4:51:fb:9e:49:cd:
                    4d:db:bd:b2:35:01:db:09:b9:c1:fd:56:f7:8d:c3:
                    02:ad:fa:a5:d2:84:89:51:fa:c3:e4:4d:6b:5e:32:
                    ea:da:f4:16:fd:22:ec:12:37:15:aa:dd:bf:b4:36:
                    f5:68:40:f5:d4:f6:48:24:cc:19:f0:b2:62:44:35:
                    e2:bd:a7:9d:22:56:fc:79:6c:f4:75:04:a4:4a:89:
                    99:db:20:df:10:2d:c7:1a:9b:92:4d:45:f8:2b:16:
                    27:a9:b7:d3:e7:01:40:60:3c:91:4a:00:85:99:0b:
                    93:2a:ef:eb:bb:f2:47:fb:46:08:45:99:45:fc:91:
                    73:96:b4:4c:13:0b:19:40:66:2f:46:d3:f0:88:64:
                    12:81:ee:70:10:38:64:cc:d7:cd:e7:6c:92:f1:1e:
                    5f:ad:bf:e5:d9:2b:9d:fc:ad:63:48:b5:7b:71:b2:
                    35:a8:60:93:aa:92:d5:e8:66:ce:74:3b:97:51:68:
                    a6:90:bc:3e:1d:44:2e:39:38:a0:cc:f7:d7:e7:31:
                    4d:33:f7:c4:92:37:a6:5b:91:53:97:91:4b:9c:ba:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:91:C2:2D:91:F8:4C:3D:71:7A:6B:8F:F4:B8:E3:5A:E0:57:EC:3C
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32342d3234203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:04:6b:7d:8b:65:77:98:b5:8e:94:ac:28:8d:7e:3c:42:18:
         80:cc:18:9a:4a:79:98:19:31:75:84:3b:80:75:62:5b:36:54:
         aa:85:91:f8:5f:7e:72:ee:a7:53:eb:a3:d7:1c:0b:a3:b8:fb:
         82:ac:5c:75:84:3a:dc:5d:cf:fd:30:26:47:18:b9:57:73:dc:
         fd:85:2e:bf:35:ab:18:b1:4b:1f:93:ff:63:7f:9e:c1:ea:aa:
         a0:38:72:12:80:27:28:b4:2d:00:0a:8e:a0:22:01:d9:8f:06:
         7c:40:47:c4:9b:a9:b8:95:44:58:70:5f:4b:35:32:b5:d3:4a:
         d3:1c:4a:7e:72:7d:c0:f9:d3:c2:f5:c6:6d:4c:80:f3:4a:26:
         e9:f6:df:01:5f:b2:90:3b:ae:7f:27:d8:84:4b:76:d5:c4:43:
         41:13:82:28:fd:a5:1c:bd:26:2c:4e:58:1a:dd:f6:f7:d6:26:
         ea:ae:e4:16:08:28:f7:af:41:8e:50:9e:1b:33:c9:ef:6c:db:
         5d:6b:13:0a:eb:1c:75:b9:d7:07:56:da:f1:fd:c8:46:6e:4e:
         fe:cf:14:e9:57:66:f7:00:16:62:bc:09:8f:11:18:99:73:4d:
         eb:e0:3f:f1:01:21:66:57:29:56:65:30:ea:c9:78:7a:09:23:
         76:04:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 21:19:06 2024 by rpki-client on console-ams.rpki-client.org