Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32342d3234203d3e20323639323632.roa
File:                     34352e3138322e382e302f32342d3234203d3e20323639323632.roa (raw, json)
Hash identifier:          8t1I0loURtt93bNJFXna/6ulN9AqZdRfaxb+ikyD/cI=
Subject key identifier:   A3:2D:2F:57:F3:92:59:B5:E8:E4:9F:0B:D3:D0:66:98:83:8E:D0:7F
Certificate issuer:       /CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
Certificate serial:       7F4D8102B89E59BCA1F137D64F7E6DD4E2E88B9C
Authority key identifier: F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32342d3234203d3e20323639323632.roa
Signing time:             Thu 04 Apr 2024 07:29:07 +0000
ROA not before:           Thu 04 Apr 2024 07:24:07 +0000
ROA not after:            Thu 03 Apr 2025 07:29:07 +0000
asID:                     269262
IP address blocks:        45.182.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 07:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4d:81:02:b8:9e:59:bc:a1:f1:37:d6:4f:7e:6d:d4:e2:e8:8b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Validity
            Not Before: Apr  4 07:24:07 2024 GMT
            Not After : Apr  3 07:29:07 2025 GMT
        Subject: CN=A32D2F57F39259B5E8E49F0BD3D06698838ED07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:43:47:17:0c:03:b7:15:56:e0:29:01:7a:
                    ad:f6:5a:0e:a5:ac:c8:2b:ca:53:b9:b8:84:c9:0d:
                    08:1a:1e:bc:e4:3c:b6:9c:91:35:ac:e9:0b:59:15:
                    58:dd:ba:60:7c:4e:b9:8e:e6:f6:8d:c0:e6:7e:33:
                    42:e9:34:91:05:6b:de:88:55:b5:8b:c1:a5:d9:42:
                    3a:e8:70:91:4b:57:ff:cf:95:95:65:8a:a0:e9:f6:
                    fd:57:53:a3:bd:b1:b6:71:60:6f:ac:c0:b0:0b:5d:
                    30:cf:c1:a6:db:f6:52:41:e3:fd:db:25:dc:15:ee:
                    e1:b0:c0:d2:f7:fb:32:88:2e:6e:ca:0e:cb:59:00:
                    b8:07:f1:8e:a4:55:2f:00:14:70:d3:f7:70:5b:1c:
                    7b:58:2b:e7:85:be:07:57:ef:0b:99:1f:d5:19:53:
                    91:bf:08:2d:9f:70:02:81:2c:a4:51:81:52:b2:89:
                    76:f4:d6:79:7d:88:14:d4:f5:82:f1:b2:5b:19:c3:
                    27:3f:99:97:08:c0:37:1b:25:7d:34:55:e7:9d:ad:
                    af:29:53:68:95:b6:01:cd:a6:15:d5:ec:ba:fd:6c:
                    eb:f0:52:ec:08:6d:c9:40:af:79:e4:7d:89:c0:5c:
                    53:1f:c5:aa:53:77:9d:2a:55:7c:42:d5:5b:61:3f:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:2F:57:F3:92:59:B5:E8:E4:9F:0B:D3:D0:66:98:83:8E:D0:7F
            X509v3 Authority Key Identifier:
                keyid:F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32342d3234203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b7:42:3d:ab:00:20:56:5a:ba:56:bf:fc:33:ac:ac:cd:b0:
         e3:2f:b6:d7:d8:9d:b3:b4:a9:1b:0a:ff:6d:6e:42:df:ce:69:
         a1:42:34:49:d3:39:89:fa:6b:f2:96:8d:f7:6b:8b:e4:f7:1b:
         51:50:7f:f3:f0:c0:71:59:3e:0e:51:0e:d5:b8:e8:6e:16:db:
         c1:37:4d:39:da:4c:c0:3c:32:20:aa:ab:48:3d:10:84:39:8c:
         8f:5e:f8:05:1d:ee:9d:db:c3:ac:5b:21:04:b4:f3:48:54:a8:
         2b:8b:d8:a8:6c:1a:f9:75:3b:0d:b8:62:79:81:6e:c6:d0:17:
         2b:84:16:59:4e:00:c1:1d:2e:cd:44:15:21:b1:ba:76:6d:ef:
         9f:1a:83:9d:72:8a:61:35:22:01:59:34:91:04:6a:be:48:a8:
         8f:51:12:40:42:fb:77:9f:e2:74:75:96:73:2b:51:ec:12:13:
         ad:99:2a:1d:ae:17:09:82:c5:c2:84:b7:ce:f9:95:fd:50:40:
         ec:c7:45:5b:16:55:1e:90:c2:18:b2:fc:b3:c1:5d:16:cd:38:
         dd:7c:40:9d:db:98:ca:ea:d7:e9:d6:26:86:23:08:11:d6:80:
         7a:a0:33:37:f4:ef:91:8e:ae:fa:ff:29:38:3c:d5:ee:c5:fd:
         d3:15:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org