Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3332203d3e20323637323134.roa
File:                     34352e3233302e3136302e302f32322d3332203d3e20323637323134.roa (raw, json)
Hash identifier:          i5gmNQwjF1/4xyj+0rHvAC4qoZi5euxmGuiR8872RGs=
Subject key identifier:   DF:36:9F:24:55:71:2E:3C:32:D5:A8:B5:4C:EE:8D:8B:27:5B:8E:70
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       0217A1FD1D5F9796230EC6450D250DE257EE5CCF
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3332203d3e20323637323134.roa
Signing time:             Mon 26 Aug 2024 22:55:28 +0000
ROA not before:           Mon 26 Aug 2024 22:50:28 +0000
ROA not after:            Mon 25 Aug 2025 22:55:28 +0000
asID:                     267214
IP address blocks:        45.230.160.0/22 maxlen: 32
Validation:               Failed, certificate revoked on Wed 30 Oct 2024 15:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:17:a1:fd:1d:5f:97:96:23:0e:c6:45:0d:25:0d:e2:57:ee:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Aug 26 22:50:28 2024 GMT
            Not After : Aug 25 22:55:28 2025 GMT
        Subject: CN=DF369F2455712E3C32D5A8B54CEE8D8B275B8E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:14:ae:0c:31:05:c9:74:3e:db:d0:63:1d:
                    94:71:bd:bd:b3:b1:74:63:6d:a2:a0:5e:3b:15:2c:
                    7b:ef:20:d8:8f:1d:4a:ad:4e:97:88:eb:11:6d:b8:
                    33:d1:0c:be:5f:06:97:18:9d:52:0f:9f:2a:62:6e:
                    9f:ac:40:c9:f6:e0:f2:47:84:bd:65:ff:93:7f:6e:
                    4d:57:ab:ec:4e:95:4c:1d:a0:54:5f:ae:b7:0f:c0:
                    d5:cf:4f:b8:cf:63:f0:b0:f0:52:c0:b1:02:57:71:
                    45:1e:b4:73:3e:15:cd:e0:f5:bb:ec:ca:5b:09:d6:
                    95:cb:f1:0d:d0:8e:da:21:98:e1:f6:f5:2b:f2:d0:
                    be:b5:95:ad:ba:13:5a:33:47:01:22:2f:c3:b8:3d:
                    71:3c:33:8c:60:bb:d2:c7:61:a4:61:0d:e0:93:59:
                    39:50:df:33:13:f6:8c:cc:fa:9e:b5:28:a6:7b:20:
                    c2:3e:7e:48:b7:aa:f0:dc:c8:5f:30:05:fe:be:bf:
                    b5:c9:d2:6d:af:e0:33:6e:f9:77:68:2f:b6:63:e8:
                    70:3d:2a:98:28:51:77:68:23:81:b1:a4:c1:28:bb:
                    7e:3c:93:4b:56:15:a3:08:26:2b:78:e8:be:10:78:
                    0f:9a:57:bb:4c:0e:90:0d:94:b3:ca:f0:dc:06:b5:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:36:9F:24:55:71:2E:3C:32:D5:A8:B5:4C:EE:8D:8B:27:5B:8E:70
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3332203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:5a:56:b5:49:3a:60:32:9f:84:c9:e5:55:38:41:d8:56:
         5a:56:98:97:42:00:c5:9a:2f:f8:92:91:c4:54:37:a8:66:fe:
         af:0d:55:72:cd:43:97:d8:16:2f:c1:3a:b8:ab:a9:1f:77:37:
         e0:db:cd:99:ec:58:a6:2b:ae:93:2c:4d:a0:63:5b:aa:ab:ae:
         c3:87:b4:1d:1d:67:4b:9f:a9:12:89:7b:2f:b4:42:dc:9b:ab:
         7e:31:59:31:1c:fb:b9:07:c3:47:a1:ee:54:c8:10:42:af:04:
         ec:e3:6c:2f:20:70:d4:52:17:c2:b7:50:20:fc:00:4c:e3:77:
         c1:66:47:5d:0e:fd:5f:78:22:a8:c4:16:16:e8:3c:3b:f5:ee:
         60:bc:ef:b7:8b:84:fd:d8:84:bc:d3:06:cb:06:8b:56:e4:73:
         29:49:75:24:7d:28:35:b8:7c:89:c8:65:a3:7e:73:09:d0:3b:
         b3:7b:7a:f6:2f:d8:43:28:fa:2a:6e:b1:91:bb:71:c2:54:20:
         09:ad:d3:7b:6d:c8:be:42:9f:8b:db:39:bd:6d:10:d8:a2:1d:
         22:61:09:5a:66:f4:ff:5f:c8:03:ed:4a:89:3a:cb:47:e4:6b:
         a1:57:a1:40:8a:92:4f:b1:22:72:86:b1:5f:2f:a8:75:1f:3b:
         2a:51:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:34 2025 by rpki-client