Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37332e302f32342d3234203d3e20323638343439.roa
File:                     34352e3136312e37332e302f32342d3234203d3e20323638343439.roa (raw, json)
Hash identifier:          RO84QFTy4tNbxJ1vK8tHDa5dqQiz2cYcJvRvQpdtK18=
Subject key identifier:   FC:A0:AC:BF:08:82:D3:0E:E6:B5:D3:DA:3D:C0:83:16:03:E1:FE:06
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       27AEBB62F8000536C21472CAB9DBCF867E7C18DF
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37332e302f32342d3234203d3e20323638343439.roa
Signing time:             Wed 05 Jun 2024 15:01:49 +0000
ROA not before:           Wed 05 Jun 2024 14:56:49 +0000
ROA not after:            Wed 04 Jun 2025 15:01:49 +0000
asID:                     268449
IP address blocks:        45.161.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ae:bb:62:f8:00:05:36:c2:14:72:ca:b9:db:cf:86:7e:7c:18:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Jun  5 14:56:49 2024 GMT
            Not After : Jun  4 15:01:49 2025 GMT
        Subject: CN=FCA0ACBF0882D30EE6B5D3DA3DC0831603E1FE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:5e:2c:ba:89:fc:6e:00:7d:69:cf:6d:45:
                    cc:05:3c:c0:5a:a9:cd:44:18:7d:19:83:1d:2a:6a:
                    05:62:ea:34:56:8f:fb:56:ac:a6:51:7d:55:f2:ee:
                    40:03:60:e2:e7:41:e1:d4:16:66:7d:02:38:86:bc:
                    38:dc:ac:5d:bd:e0:86:1a:08:6e:ad:d8:30:b0:d6:
                    4d:2e:d7:a8:84:7f:6c:8f:44:70:ad:f8:4a:35:42:
                    dc:4b:b1:fa:ef:a9:d9:2e:88:6f:43:7f:57:0a:e9:
                    6c:48:98:55:77:72:5c:9d:4e:3a:ed:7d:80:fb:98:
                    d8:42:74:1a:df:1d:6e:52:a1:48:cf:d5:62:e7:5e:
                    89:21:93:5e:5f:1d:d6:bc:87:47:95:44:b9:39:c7:
                    00:b8:3a:32:64:9c:f4:0f:38:88:80:43:46:88:3c:
                    27:2b:a1:1f:a3:a8:2f:3e:8f:02:79:a1:23:79:5c:
                    b5:fe:c2:d6:e1:d7:3e:a7:b5:ad:31:cf:18:bd:24:
                    46:9d:1b:aa:83:20:d2:8e:4d:75:4f:de:63:be:63:
                    7e:b6:68:ab:0d:d1:8e:00:de:7f:ef:7a:9c:b1:3c:
                    e3:c7:fd:09:2d:16:57:44:65:57:4c:2d:6e:72:4e:
                    1d:45:6e:31:87:7b:7f:89:da:1f:f6:48:67:54:e2:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A0:AC:BF:08:82:D3:0E:E6:B5:D3:DA:3D:C0:83:16:03:E1:FE:06
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37332e302f32342d3234203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:80:12:0f:b5:22:73:c6:82:94:a5:d4:10:7c:47:7c:39:51:
         a1:77:5f:65:61:98:cf:9b:66:8c:d6:45:c9:7b:f6:2b:72:1f:
         0f:58:de:16:cb:ee:79:c8:d5:36:54:53:9b:5e:bc:01:3c:1d:
         80:91:63:16:6b:fe:11:5a:e9:e6:3a:63:54:32:de:db:ef:a8:
         5f:cc:0d:fa:50:5a:e9:98:17:98:b5:e7:d1:4b:49:b3:6f:5e:
         0e:6b:5b:bb:34:e9:ff:49:cd:3b:f1:df:52:11:be:21:95:fb:
         6b:9d:12:01:06:22:57:a5:34:49:4b:40:d9:57:c6:ca:02:97:
         8c:8b:2d:6f:9f:a0:d1:d4:d9:db:26:a9:11:19:e1:d6:0a:6a:
         f4:06:12:b2:07:51:60:c1:f9:7f:e5:7a:ef:8d:0a:bc:58:b2:
         82:21:4a:fd:f9:41:92:b2:58:c0:7a:37:dd:1f:ca:5f:de:b4:
         66:d3:92:47:8a:3e:29:94:9d:e2:59:15:8d:e9:16:db:dd:f7:
         b2:53:dd:bc:e7:c4:e5:64:38:93:90:fe:04:f1:8b:4b:ed:12:
         17:a1:d0:f8:70:0d:0f:47:8b:1a:06:a7:f9:ee:27:e7:4e:4e:
         9b:a3:ea:d5:bd:7c:38:ed:17:13:e0:ac:e5:2a:16:a7:bf:59:
         9f:9e:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 21:19:06 2024 by rpki-client on console-ams.rpki-client.org