Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32342d3332203d3e20323731363536.roa
File:                     34352e3138362e3233322e302f32342d3332203d3e20323731363536.roa (raw, json)
Hash identifier:          b426x/OqvA3UqoRVIZ9xzcqVeEl9YSk9ekZ7ORs4ebM=
Subject key identifier:   76:78:0E:AC:D8:B7:77:F2:03:29:7E:AE:81:12:F7:60:F2:D6:B9:53
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       3DFE0C45381CD4681DE3E8CD99E64CA2B74C2F2D
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32342d3332203d3e20323731363536.roa
Signing time:             Wed 05 Feb 2025 13:10:02 +0000
ROA not before:           Wed 05 Feb 2025 13:05:02 +0000
ROA not after:            Wed 04 Feb 2026 13:10:02 +0000
asID:                     271656
IP address blocks:        45.186.232.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Thu 06 Feb 2025 16:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:0c:45:38:1c:d4:68:1d:e3:e8:cd:99:e6:4c:a2:b7:4c:2f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Feb  5 13:05:02 2025 GMT
            Not After : Feb  4 13:10:02 2026 GMT
        Subject: CN=76780EACD8B777F203297EAE8112F760F2D6B953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:31:82:f4:78:d0:b4:1e:52:b1:e6:65:31:
                    cf:0f:1b:13:b8:8b:34:30:6f:f2:9c:5b:d1:9b:81:
                    cc:f2:a5:cb:74:63:99:67:ec:58:30:7b:2a:34:6f:
                    24:f1:2a:f1:65:4b:18:5f:34:8c:e3:0c:b9:30:3a:
                    fd:b7:ce:a6:bc:b3:2d:34:9e:72:96:cb:20:2a:3e:
                    96:f7:2d:2e:62:e9:0c:77:66:2b:b1:3f:87:20:d4:
                    74:d0:11:0c:50:4a:67:ee:e9:ec:51:6b:57:dc:86:
                    1d:8f:cf:58:b3:7f:1e:de:57:13:f8:c7:91:ac:e6:
                    29:63:06:3b:01:3b:ff:c2:a3:d7:92:a3:16:0b:f3:
                    2a:a7:99:77:ef:5f:ad:1a:02:77:b9:65:08:52:a6:
                    6e:58:34:f3:be:be:92:e1:5d:50:9d:38:97:b1:4e:
                    7f:6c:51:30:18:24:b6:71:7c:bc:77:4a:bf:49:e2:
                    00:ab:0e:87:e8:4b:f7:9c:d9:95:e4:20:c3:7f:34:
                    c0:f6:c3:1a:ec:cd:a4:15:dc:c1:14:a8:fc:f7:ae:
                    00:bb:61:68:a0:4d:ed:fe:09:89:95:db:f5:f3:b9:
                    13:83:2a:2f:11:cb:fa:98:cb:66:d4:86:ef:3b:cb:
                    fe:0a:0f:02:7e:7c:52:7e:fa:93:da:9d:56:07:f5:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:78:0E:AC:D8:B7:77:F2:03:29:7E:AE:81:12:F7:60:F2:D6:B9:53
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32342d3332203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:1c:6d:53:68:84:e2:e9:8d:d3:ae:80:72:7d:2b:0e:53:ab:
         c5:d6:6e:36:30:f1:04:22:1d:a3:5a:c8:d8:92:96:f0:a9:1c:
         7f:16:71:0c:e4:58:ca:a6:0a:7f:f0:ac:7d:dd:61:2b:c1:45:
         37:80:14:a8:ca:c2:74:75:e9:76:a9:5a:e2:da:92:ab:7e:a0:
         e3:71:42:ac:73:fc:87:16:bf:13:15:92:37:fc:62:26:65:d3:
         70:7a:8f:44:c9:9e:be:e0:b1:8c:e1:16:7e:99:b8:0b:7f:c5:
         e1:a4:6b:8e:2b:67:05:6f:5c:bd:a5:29:73:3e:75:63:3c:2b:
         27:f9:16:8e:11:b4:87:ed:7e:2b:d9:23:e8:3c:7d:28:9a:55:
         e5:13:1f:88:f3:80:81:6a:48:0e:83:4c:02:38:f2:76:a8:d3:
         c7:42:7e:1b:f2:aa:3a:c0:19:49:19:dc:3c:4b:36:aa:e8:88:
         3f:32:a3:cc:32:87:da:51:fd:82:27:3b:75:24:2f:26:ee:0e:
         0c:b7:14:71:98:5d:2f:ef:b4:c8:6e:a2:cf:f0:59:3c:3a:7e:
         e8:8d:62:a2:7c:9f:75:bf:2c:23:9c:ce:15:5f:f6:f5:1b:ad:
         ae:66:a8:1e:d0:e0:36:ec:4e:38:db:b9:a9:f7:61:e6:00:9a:
         7c:60:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:24:32 2025 by rpki-client