Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233322e302f32342d3234203d3e20323637313336.roa
File:                     34352e3232392e3233322e302f32342d3234203d3e20323637313336.roa (raw, json)
Hash identifier:          vO1lQlEPXQ0DYlD9ZnD5rgvx7IXdZVANM86wfywOpEc=
Subject key identifier:   27:07:72:76:09:61:99:40:CF:9F:72:CB:80:EF:81:04:2D:F0:6A:2A
Certificate issuer:       /CN=587B556A325EFD4FA17909D19F46DDB8079DD090
Certificate serial:       6583FFC7E64FD4053B48857B1E556FB4E8A5D997
Authority key identifier: 58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233322e302f32342d3234203d3e20323637313336.roa
Signing time:             Thu 04 Apr 2024 23:24:16 +0000
ROA not before:           Thu 04 Apr 2024 23:19:16 +0000
ROA not after:            Thu 03 Apr 2025 23:24:16 +0000
asID:                     267136
IP address blocks:        45.229.232.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 11 Nov 2024 18:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:83:ff:c7:e6:4f:d4:05:3b:48:85:7b:1e:55:6f:b4:e8:a5:d9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587B556A325EFD4FA17909D19F46DDB8079DD090
        Validity
            Not Before: Apr  4 23:19:16 2024 GMT
            Not After : Apr  3 23:24:16 2025 GMT
        Subject: CN=2707727609619940CF9F72CB80EF81042DF06A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:c6:8a:0b:e3:54:82:bf:5c:b1:8b:f9:11:
                    78:72:f1:4e:ad:c1:d2:77:fe:5c:19:e7:2e:4b:5f:
                    93:b4:46:86:20:43:e2:a0:30:bd:2a:e6:e6:d5:f8:
                    e4:3b:97:af:89:63:67:97:b3:21:ff:8a:ef:e0:28:
                    f5:10:06:ab:ac:ad:d5:b1:41:f5:35:0f:f1:56:27:
                    92:dd:84:c4:97:67:d4:38:25:a1:aa:ff:eb:6d:8f:
                    39:ee:e2:c1:10:0a:11:a3:82:4f:d4:d0:09:7a:03:
                    1d:2f:34:26:e7:31:7e:28:87:f8:3d:8e:98:84:fe:
                    04:d9:40:ce:43:76:1e:53:5d:51:f5:30:38:77:a9:
                    3e:f9:7f:b1:5b:7f:bc:bc:51:81:28:10:3e:cb:0e:
                    16:01:9f:a8:07:73:47:0c:20:22:b9:0a:06:d1:3c:
                    5c:a7:02:aa:74:29:aa:bc:76:50:66:0a:9b:d9:c4:
                    40:9b:87:02:87:59:83:93:6a:ad:55:94:ef:9d:b3:
                    ff:bd:62:1a:fd:64:31:ff:ad:f1:a3:9e:ef:7a:73:
                    8f:21:04:39:62:16:4d:c2:ff:94:18:89:2e:af:d4:
                    61:83:03:a1:12:41:56:70:49:bc:23:c5:e0:8d:23:
                    a1:2b:b0:d1:39:79:d7:9a:20:ac:92:e5:50:6a:39:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:07:72:76:09:61:99:40:CF:9F:72:CB:80:EF:81:04:2D:F0:6A:2A
            X509v3 Authority Key Identifier:
                keyid:58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233322e302f32342d3234203d3e20323637313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a5:c2:26:ea:ef:fa:f7:24:3b:56:72:3d:01:13:e2:86:b8:
         41:02:e6:d2:e6:e4:1d:61:5f:fd:49:15:05:d1:0a:04:36:aa:
         d6:bc:c8:ed:eb:6c:20:ee:18:3e:69:17:b7:c3:a4:f4:09:33:
         b1:63:4a:11:c8:bc:69:bc:68:27:73:c6:7e:a9:b8:20:84:93:
         b0:50:4f:be:df:57:1c:b7:b3:fe:13:02:fb:b9:96:70:86:e0:
         2c:1f:9b:d9:12:bc:e7:cd:54:2c:9e:4b:f8:df:fb:91:b5:d7:
         53:ee:5c:ad:82:72:6e:ff:1b:c0:f4:13:61:fe:dd:80:cb:70:
         e6:3d:f2:da:71:c2:6c:cc:d0:3b:01:75:9a:b1:9f:2e:48:4f:
         67:b1:68:a8:67:cf:5d:b2:71:64:92:40:e0:3b:8f:56:df:a9:
         81:0a:71:35:78:73:ec:8a:68:77:51:30:87:23:d1:8d:2f:87:
         6b:65:15:31:30:4a:1a:e6:33:ae:d7:86:e8:a8:56:46:af:f5:
         6d:5c:b0:fa:c4:da:ac:c5:3d:6e:7a:3f:d7:05:7e:21:3d:50:
         05:9a:c9:5d:7f:09:bf:3a:35:82:26:d4:ce:03:26:5d:0f:62:
         2b:a3:6d:82:3b:b0:60:86:8c:87:16:af:0f:b4:c1:18:e8:49:
         5c:b0:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:20 2025 by rpki-client