Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35332e302f32342d3234203d3e20323637353739.roa
File:                     34352e37302e35332e302f32342d3234203d3e20323637353739.roa (raw, json)
Hash identifier:          hUgjsCp4Mu78iLViwz+Kw3eGw0KQ+PbQLmh3AXHodgY=
Subject key identifier:   EC:9E:C8:29:27:68:70:57:3D:26:01:06:C1:B5:27:72:C5:8B:14:1E
Certificate issuer:       /CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
Certificate serial:       74C30DD29182EFE2A007D8EB782C4CC1015D417E
Authority key identifier: ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35332e302f32342d3234203d3e20323637353739.roa
Signing time:             Thu 06 Mar 2025 22:16:09 +0000
ROA not before:           Thu 06 Mar 2025 22:11:09 +0000
ROA not after:            Thu 05 Mar 2026 22:16:09 +0000
asID:                     267579
IP address blocks:        45.70.53.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 02 Apr 2025 01:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c3:0d:d2:91:82:ef:e2:a0:07:d8:eb:78:2c:4c:c1:01:5d:41:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
        Validity
            Not Before: Mar  6 22:11:09 2025 GMT
            Not After : Mar  5 22:16:09 2026 GMT
        Subject: CN=EC9EC829276870573D260106C1B52772C58B141E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:45:76:33:15:7c:01:94:18:e6:79:ec:db:
                    f1:7e:b0:eb:d8:43:78:56:f8:56:8c:8e:85:1a:5d:
                    b2:2f:cc:ae:49:0e:96:5c:cf:28:f2:c8:ee:1c:8b:
                    79:cb:8b:2e:40:28:18:53:41:c4:94:f4:03:25:3a:
                    35:12:a6:4f:39:47:bb:ef:61:6a:c6:50:38:fc:e2:
                    fe:7d:5b:22:40:8e:7d:b8:6d:ca:12:0e:9a:cc:66:
                    32:b8:8e:29:0c:2b:d4:78:e5:4a:49:23:b4:a8:61:
                    34:41:68:00:aa:fe:9b:43:1d:0d:29:74:eb:7f:cb:
                    00:29:03:f4:ce:e1:2f:e3:aa:82:5d:be:e9:2b:ce:
                    13:32:57:07:31:72:2d:a3:b3:b8:4c:5b:46:21:e3:
                    3a:a0:98:f5:3e:e7:88:90:74:7c:10:ac:46:97:f4:
                    83:2a:7d:75:ce:34:ef:3a:29:6d:dc:5c:14:6b:b7:
                    2b:5a:69:f6:be:84:af:6f:aa:fc:d6:22:78:55:27:
                    08:12:64:13:dc:ea:9b:58:fe:44:b6:10:60:42:d0:
                    b0:7a:44:e6:ac:5f:82:ec:5c:b3:69:f7:8e:99:8b:
                    c4:d7:92:6b:92:3a:52:44:2a:ee:d7:66:59:67:09:
                    05:f9:8c:71:ae:b1:7f:90:a5:94:88:86:d7:cb:d1:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9E:C8:29:27:68:70:57:3D:26:01:06:C1:B5:27:72:C5:8B:14:1E
            X509v3 Authority Key Identifier:
                keyid:ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35332e302f32342d3234203d3e20323637353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:02:5f:cb:5c:2d:1d:6c:5b:27:40:3a:c3:f6:e5:f3:00:c2:
         e6:94:26:52:59:e7:f5:22:fe:91:9c:ef:69:79:2d:27:0a:44:
         89:7b:13:e9:a7:af:75:f6:7c:30:fa:b0:5c:c0:a4:a3:77:c9:
         86:c8:db:11:f0:2f:bc:82:88:37:7f:cc:c2:fc:7a:0e:46:dc:
         0f:95:af:28:c2:30:fa:d6:02:6f:2a:12:75:6d:c2:0c:7d:74:
         cd:83:03:07:9f:f3:c0:06:58:e8:58:4c:49:61:5b:20:51:02:
         02:59:3f:8c:5b:42:91:52:b7:26:a2:c3:0d:ea:41:e6:2e:9b:
         e6:9c:46:44:cf:ba:6e:6b:6d:57:3d:f3:7f:18:8c:98:6c:ec:
         b7:8a:77:91:43:7a:fb:e6:b4:a0:48:c5:12:57:2d:f9:43:b1:
         7a:e0:8d:c8:99:9a:91:3f:36:08:cd:68:67:9b:16:bf:88:dd:
         10:f8:cd:64:36:1c:24:91:9c:91:fa:3c:96:c1:f9:aa:e4:e6:
         7c:2e:c1:d0:9d:d0:c4:90:0b:27:47:a3:73:d1:e8:2e:37:ca:
         e0:e0:3d:61:91:d7:41:1a:bd:8d:14:a4:f2:ee:b5:88:f0:3b:
         c0:68:ac:03:f8:49:c2:b3:5c:78:33:5a:32:84:78:50:58:57:
         b5:35:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:04:12 2025 by rpki-client