Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37352e302f32342d3234203d3e20323638343439.roa
File:                     34352e3136312e37352e302f32342d3234203d3e20323638343439.roa (raw, json)
Hash identifier:          7jX6pdZRRfrWxn9tLdpq29kO0sL/M+facNF6eM0RRu8=
Subject key identifier:   7F:F2:F4:56:47:6E:27:E6:7A:50:89:34:6B:3E:1A:DC:86:70:25:64
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       2046562F942D0F28DA169C33D00282782583503D
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37352e302f32342d3234203d3e20323638343439.roa
Signing time:             Wed 05 Jun 2024 15:01:49 +0000
ROA not before:           Wed 05 Jun 2024 14:56:49 +0000
ROA not after:            Wed 04 Jun 2025 15:01:49 +0000
asID:                     268449
IP address blocks:        45.161.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:46:56:2f:94:2d:0f:28:da:16:9c:33:d0:02:82:78:25:83:50:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Jun  5 14:56:49 2024 GMT
            Not After : Jun  4 15:01:49 2025 GMT
        Subject: CN=7FF2F456476E27E67A5089346B3E1ADC86702564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:5e:1f:5b:09:59:62:e1:18:6b:1a:1a:3a:
                    87:59:4e:5b:ee:0a:e8:75:74:91:a6:c5:5a:88:82:
                    30:fe:f2:95:92:51:c5:41:99:20:05:2f:ee:6a:6b:
                    d5:6b:61:b9:2f:c9:12:15:e4:73:75:b3:cf:32:d3:
                    44:3e:8b:cc:73:47:a9:e0:43:ca:de:de:2e:7c:2e:
                    a6:3a:2c:51:a2:b3:09:04:4a:35:59:a0:ca:37:6f:
                    c4:80:02:97:fb:f6:3c:75:8c:c7:dc:ab:c1:95:f1:
                    45:f0:c9:2d:23:05:45:36:b7:00:93:92:2b:b5:57:
                    f0:e6:c3:bb:95:da:05:96:df:8d:42:d8:fd:47:89:
                    75:87:e1:e2:bb:1c:9d:26:b7:a3:5e:7b:71:5c:1b:
                    38:73:29:98:de:fd:74:bf:48:83:48:50:16:f6:f0:
                    b4:f4:7c:b8:7f:51:f7:c0:1a:49:1b:72:66:15:e2:
                    9d:39:7d:a4:8a:1d:df:42:7f:07:68:63:b7:33:ac:
                    72:01:cb:29:44:95:e9:81:a4:55:ac:cf:5c:b7:61:
                    63:87:5e:1b:32:f5:8a:94:41:21:7f:97:b6:fd:ef:
                    41:0b:b5:2a:49:7b:29:7e:70:16:10:66:31:66:e2:
                    de:53:9b:ba:d5:db:c6:02:bb:ac:64:8c:4c:04:00:
                    35:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F2:F4:56:47:6E:27:E6:7A:50:89:34:6B:3E:1A:DC:86:70:25:64
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37352e302f32342d3234203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:59:e3:28:bd:85:5f:ac:e2:7b:ef:c1:9a:47:61:e6:0e:09:
         9a:20:97:6f:36:db:6c:31:b1:09:af:77:10:21:4d:36:de:10:
         10:24:aa:c7:66:a5:44:33:db:b8:d2:23:d2:12:e5:03:b1:9c:
         ff:2f:78:61:ed:4d:27:5f:f8:3f:ba:f3:29:4f:c8:fb:6f:73:
         0f:8b:83:13:84:51:b4:06:35:4b:ca:9e:4c:28:85:4a:a4:4a:
         76:33:24:4e:b1:99:c1:5b:81:cb:35:83:dc:f3:c2:3d:f2:aa:
         76:00:eb:6c:f4:3d:49:b6:19:5f:65:83:4b:d4:d3:74:3b:65:
         cc:c1:e1:4f:f9:a8:0c:12:8a:50:bf:d4:86:18:d8:ea:19:5e:
         d7:a5:9c:35:fb:a3:da:08:5c:c9:63:ee:00:4e:df:27:fb:26:
         50:de:ae:0e:c4:44:85:d1:15:c9:ff:64:b8:de:90:a0:31:50:
         90:5e:fa:61:7f:d3:2d:4e:0e:e6:c9:c2:fc:f0:eb:3a:be:65:
         87:5c:8e:a7:1a:14:cd:8d:da:0f:a7:7b:2d:b5:3f:75:fd:40:
         2a:79:78:f2:46:6a:37:45:20:c2:91:ad:04:68:b7:d3:58:5e:
         08:0c:16:3c:4a:ed:f0:8b:b4:35:01:60:a5:ec:2d:61:c5:70:
         ca:92:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 20:19:21 2024 by rpki-client on console-fra.rpki-client.org