Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e352e302f32342d3234203d3e20323638393134.roa
File:                     34352e3137342e352e302f32342d3234203d3e20323638393134.roa (raw, json)
Hash identifier:          BRyHVciqmd5DlOxBM9YJFmJ7p2Plhty8IlH0w2fCE2g=
Subject key identifier:   19:96:4D:E3:DC:7F:3D:47:48:38:8A:21:A9:FA:61:3E:86:F3:BD:B6
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       47F4B5E5C6A58B083248007405F7264F99D6CDB1
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e352e302f32342d3234203d3e20323638393134.roa
Signing time:             Thu 13 Mar 2025 00:51:21 +0000
ROA not before:           Thu 13 Mar 2025 00:46:21 +0000
ROA not after:            Thu 12 Mar 2026 00:51:21 +0000
asID:                     268914
IP address blocks:        45.174.5.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 22:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f4:b5:e5:c6:a5:8b:08:32:48:00:74:05:f7:26:4f:99:d6:cd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Mar 13 00:46:21 2025 GMT
            Not After : Mar 12 00:51:21 2026 GMT
        Subject: CN=19964DE3DC7F3D4748388A21A9FA613E86F3BDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8e:6a:95:05:36:8b:5c:4f:e4:a6:b6:1a:65:
                    3f:1f:6a:ed:6b:3a:ca:dc:b6:be:3e:4b:7f:9b:2a:
                    8a:54:f0:69:97:64:8b:dd:26:4e:8d:6c:6b:3b:f0:
                    c3:16:6f:fe:de:dc:b6:10:fa:08:0f:a5:57:03:16:
                    01:f5:2d:a1:f1:bc:3c:5c:8b:a9:b9:4d:ca:2b:27:
                    30:5b:91:14:00:9c:70:cd:e4:74:98:45:f1:d9:59:
                    cf:ad:17:ee:e2:2c:f7:64:b8:42:a2:53:13:df:4e:
                    34:e6:9c:cf:2a:70:14:5c:b7:32:e7:01:7e:82:c2:
                    ed:5b:39:51:ca:ec:3f:b0:90:64:be:2b:3f:83:bb:
                    f6:e7:1c:e0:b0:bd:0a:e5:1a:92:34:54:66:bc:95:
                    fa:5c:0d:1e:fd:e8:7a:01:5f:e5:31:f1:2f:32:45:
                    e8:a9:c4:41:93:54:d2:f2:a9:2b:0f:bf:c6:ed:5e:
                    b1:2b:97:d3:ae:10:08:68:4f:9a:9d:66:92:70:4e:
                    1f:5a:76:53:df:4c:0f:5d:1e:2a:fb:7e:99:3b:8b:
                    0f:1d:d8:a3:67:ac:8c:db:c7:af:c7:dc:5d:de:7f:
                    99:6a:a0:87:93:c4:fa:af:30:ad:4b:72:05:ad:af:
                    66:e9:1d:cb:6e:ee:29:40:e5:77:3e:03:92:68:bb:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:96:4D:E3:DC:7F:3D:47:48:38:8A:21:A9:FA:61:3E:86:F3:BD:B6
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e352e302f32342d3234203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:17:c2:9b:41:30:97:2f:17:5f:20:81:ee:a9:9d:81:23:
         3e:b2:61:2c:03:f8:b5:d4:83:fa:45:26:67:4a:c0:f7:e8:34:
         b7:6c:f7:11:f1:8b:42:91:f2:80:72:b2:25:73:99:f3:95:bb:
         82:06:fa:58:8b:75:a7:e8:ef:1f:36:94:fd:a4:77:f1:4a:7b:
         05:fc:fc:75:74:95:40:3e:37:0b:c1:21:b0:e1:15:59:05:ae:
         c4:e6:aa:45:c8:64:20:a1:21:31:11:6c:d5:30:a6:bb:00:e7:
         57:a7:86:b6:3f:b0:1e:74:32:46:42:34:38:e5:66:06:59:69:
         f5:46:12:0f:00:fb:2b:4d:00:3c:c7:0a:1d:cb:ee:3a:2a:6f:
         7b:c7:56:46:22:6b:81:73:00:9e:8c:b0:90:91:32:52:63:36:
         cc:e7:94:f0:97:88:7a:df:50:bc:ae:f0:25:60:bb:b9:fd:7e:
         b4:bd:49:c5:41:bc:bd:9c:81:2c:4b:e8:5c:ea:1d:6f:50:af:
         97:dc:62:ac:2f:89:7b:0b:72:be:8a:e0:2b:37:77:6f:b1:f7:
         f4:ae:16:54:c9:db:ac:9f:c1:fe:fc:a0:82:f0:d6:1f:d4:b9:
         99:9a:84:cd:a9:69:36:be:44:79:5a:c5:34:64:1d:55:bd:50:
         68:95:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:39:52 2025 by rpki-client