Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa
File:                     34352e3232372e34372e302f32342d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          CAH2AwzG9okjJzgSqMSOsg4i9LDJWrOdTrutQjCi6tc=
Subject key identifier:   E2:2E:CA:15:BA:A7:11:7A:E7:CC:FD:A7:99:07:37:98:E2:74:A9:F4
Certificate issuer:       /CN=1BFBD5F04D9EADA74D7C8E38B3066F5695736F16
Certificate serial:       7AEF2CD6C13F32848326692FB2CC7822AA76BD83
Authority key identifier: 1B:FB:D5:F0:4D:9E:AD:A7:4D:7C:8E:38:B3:06:6F:56:95:73:6F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa
Signing time:             Tue 06 Aug 2024 15:07:46 +0000
ROA not before:           Tue 06 Aug 2024 15:02:46 +0000
ROA not after:            Tue 05 Aug 2025 15:07:46 +0000
asID:                     267079
IP address blocks:        45.227.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 11:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ef:2c:d6:c1:3f:32:84:83:26:69:2f:b2:cc:78:22:aa:76:bd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFBD5F04D9EADA74D7C8E38B3066F5695736F16
        Validity
            Not Before: Aug  6 15:02:46 2024 GMT
            Not After : Aug  5 15:07:46 2025 GMT
        Subject: CN=E22ECA15BAA7117AE7CCFDA799073798E274A9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:dc:7d:60:ba:e9:85:da:e8:9c:a0:b5:5e:
                    35:9d:53:36:56:da:74:3d:70:9f:d0:56:17:bb:e8:
                    e3:58:95:38:36:b0:09:9a:e3:57:3e:73:f8:6d:24:
                    67:d1:26:5e:6a:e1:63:76:70:78:3b:2d:ae:b2:85:
                    8c:d8:3d:57:eb:3a:d9:08:30:91:3c:13:32:cf:c2:
                    82:48:db:b5:d4:3b:4b:ab:57:b8:6d:c3:be:94:2e:
                    01:9c:3c:97:96:57:87:3d:df:89:46:f3:a6:95:2e:
                    d0:af:af:81:96:99:7f:8a:7a:61:04:c4:50:0e:0c:
                    68:2d:ad:12:68:c0:b7:ef:56:11:4a:41:8c:5a:d9:
                    5a:73:71:0e:67:34:f8:fa:ed:3c:06:e9:a3:1e:c8:
                    c6:7c:6e:3d:55:b0:cd:93:73:90:9a:d4:88:9a:7b:
                    d1:6d:ec:6b:fc:90:b3:05:b9:51:1e:41:74:0f:53:
                    11:fa:4d:b0:df:f4:52:c7:99:f1:bf:4e:76:0e:b9:
                    cc:a6:6d:40:34:2e:89:1f:c6:00:26:ab:46:71:66:
                    c0:dd:e7:ce:d9:59:b1:10:3a:ca:79:68:00:5f:bf:
                    b5:d3:1a:19:ed:90:0e:53:90:65:54:37:50:67:15:
                    87:c2:9f:a3:e6:33:c5:9a:ca:23:da:2b:41:06:c7:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2E:CA:15:BA:A7:11:7A:E7:CC:FD:A7:99:07:37:98:E2:74:A9:F4
            X509v3 Authority Key Identifier:
                keyid:1B:FB:D5:F0:4D:9E:AD:A7:4D:7C:8E:38:B3:06:6F:56:95:73:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ff:b1:0b:82:50:e4:08:f3:2b:f0:ac:69:6e:0a:d9:ec:60:
         bd:81:c7:a6:7b:52:d4:f8:83:38:32:0f:aa:92:5c:35:48:cf:
         4e:04:a4:e9:68:59:ea:a0:cc:f7:99:87:50:32:fc:13:28:d8:
         38:27:97:e8:19:ed:af:8f:2a:2f:cd:91:11:67:00:d0:0e:ef:
         24:25:c2:52:0f:20:f6:1c:89:a3:0f:53:e9:aa:72:9e:8e:53:
         c8:01:6c:f3:9c:7e:c7:00:5b:41:df:af:d1:04:9c:45:4c:40:
         2e:b3:b8:54:d6:39:e9:0b:a9:14:4e:7a:aa:23:ea:66:aa:0f:
         04:30:c7:63:4b:18:5d:56:b4:0a:c0:c0:f4:c1:bf:dd:99:54:
         fc:ea:66:1d:41:e8:e0:c6:0a:f5:e8:e0:d4:ed:ea:00:b4:5f:
         25:a1:22:0b:98:82:96:ef:6e:83:71:f6:33:f0:5d:de:0d:75:
         74:00:21:bd:df:65:3d:88:cd:e4:98:01:9f:d4:67:8f:4f:76:
         c9:98:64:ca:95:f0:c5:02:a8:d8:65:1b:ed:b7:71:d3:03:e6:
         65:da:0d:5b:51:a0:c1:58:42:09:02:3e:3f:70:57:58:8d:74:
         f0:43:bc:fd:df:83:3d:c4:11:59:3c:07:b2:eb:88:1d:8f:84:
         63:d3:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:50:05 2024 by rpki-client on console-ams.rpki-client.org