Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa
File:                     34352e3138302e39372e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier:          tmvrzNtnmfDnLcKldoxxtDaVgrC4Psy77D/sz9T45s4=
Subject key identifier:   03:EF:D3:42:D4:65:EB:E8:9D:4C:96:37:A1:99:AD:F4:D5:0A:B3:6A
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       3AFFCB6639EA9E09B36937D2AB3D3FB748CB2657
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa
Signing time:             Thu 04 Apr 2024 08:00:46 +0000
ROA not before:           Thu 04 Apr 2024 07:55:46 +0000
ROA not after:            Thu 03 Apr 2025 08:00:46 +0000
asID:                     269128
IP address blocks:        45.180.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 15:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ff:cb:66:39:ea:9e:09:b3:69:37:d2:ab:3d:3f:b7:48:cb:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Apr  4 07:55:46 2024 GMT
            Not After : Apr  3 08:00:46 2025 GMT
        Subject: CN=03EFD342D465EBE89D4C9637A199ADF4D50AB36A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:8c:a0:6b:28:0f:89:42:82:03:0a:74:99:
                    7d:fb:14:c8:2a:a0:bd:36:d8:01:a9:19:26:48:69:
                    b6:f0:e6:f9:b1:d9:06:f1:0d:a1:18:3f:cd:e9:f3:
                    ba:3f:69:fe:94:eb:ee:62:0c:04:8b:a7:bd:8f:a3:
                    95:65:42:86:d0:6f:62:83:9c:c2:a9:49:26:63:c6:
                    9e:a7:a5:db:b3:c6:4c:25:a1:eb:d0:96:fe:1a:2f:
                    62:de:5e:3b:55:67:a1:da:06:58:8b:eb:70:ad:39:
                    79:ca:f2:14:3c:40:30:0e:9b:d5:87:1e:0d:aa:1b:
                    15:5f:41:7b:98:a7:ba:0b:cf:26:5e:bd:21:96:aa:
                    d3:a7:8f:a6:a9:c7:77:3b:01:c1:34:92:39:dd:90:
                    f3:c3:c6:91:ac:b0:8c:0d:db:1a:fd:71:71:ff:93:
                    7f:08:99:68:b6:a0:4b:5d:fa:45:2a:17:0b:55:22:
                    78:39:eb:98:fd:5d:ae:84:1a:67:db:39:8e:c7:7d:
                    df:91:62:47:1b:e9:52:d6:17:e7:cf:f2:30:f9:7f:
                    87:17:42:7d:6d:d6:78:8f:b4:5d:77:0c:3f:52:c9:
                    a4:3d:20:1a:25:e4:6e:28:62:79:bf:85:68:d1:5d:
                    d8:ca:01:f8:00:70:e2:0d:4d:5e:38:e0:2a:99:09:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:D3:42:D4:65:EB:E8:9D:4C:96:37:A1:99:AD:F4:D5:0A:B3:6A
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:7d:01:85:49:0b:4e:b1:cb:b1:64:10:43:2c:59:82:95:4e:
         4c:22:f8:80:64:a9:d3:70:81:a9:6f:47:c9:33:3b:a4:ff:41:
         0a:01:ed:88:55:95:28:20:6b:a6:b4:87:b8:b8:be:21:60:63:
         b2:9e:50:96:5a:1b:6f:1f:17:57:28:d6:c5:9c:d3:b4:69:2c:
         df:f4:d7:d6:4f:7f:9e:71:42:c4:77:39:2b:ce:40:09:fb:f5:
         31:41:ea:78:48:5a:88:3b:63:b3:57:38:94:f3:1b:df:dc:86:
         93:0e:a2:f9:ac:5b:20:9a:00:42:be:c6:3d:c9:7d:5d:6d:44:
         4a:26:fb:60:d7:f5:bb:d7:df:f3:a4:46:bb:f7:65:9f:d6:e3:
         e5:e0:be:8b:16:dc:ee:9d:ff:b1:ed:d0:63:a1:a1:f6:91:ab:
         46:d7:b9:0a:f9:47:95:39:26:a5:04:c6:e5:fb:d9:60:fb:10:
         18:f6:c5:d6:74:28:6d:44:13:2c:d8:15:1b:da:9a:60:a4:2a:
         d0:9a:e0:ad:3e:e4:69:49:1a:70:9f:9b:51:f0:0c:d6:c2:ce:
         1f:8c:6e:86:7d:b7:0d:03:26:61:4e:14:6d:04:b5:ad:e8:68:
         98:88:ec:f6:80:dc:54:6f:bf:ad:e3:c5:93:b0:29:66:37:5b:
         0a:3f:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 18:56:12 2024 by rpki-client on console-ams.rpki-client.org