Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32322d3232203d3e20323636313036.roa
File:                     34352e352e3230302e302f32322d3232203d3e20323636313036.roa (raw, json)
Hash identifier:          9l5ca6ayCwU6cEXRJBCa2xE+AtrpHDZ+6JzjKS8C8cQ=
Subject key identifier:   95:56:82:EB:D5:23:D9:0E:80:81:1E:18:DF:49:58:09:5C:AE:BA:C2
Certificate issuer:       /CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
Certificate serial:       4FEF9D22E98AC9E005DB5822B592A67A063F4A56
Authority key identifier: 2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32322d3232203d3e20323636313036.roa
Signing time:             Wed 19 Jun 2024 19:22:58 +0000
ROA not before:           Wed 19 Jun 2024 19:17:58 +0000
ROA not after:            Wed 18 Jun 2025 19:22:58 +0000
asID:                     266106
IP address blocks:        45.5.200.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 17 Dec 2024 23:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ef:9d:22:e9:8a:c9:e0:05:db:58:22:b5:92:a6:7a:06:3f:4a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
        Validity
            Not Before: Jun 19 19:17:58 2024 GMT
            Not After : Jun 18 19:22:58 2025 GMT
        Subject: CN=955682EBD523D90E80811E18DF4958095CAEBAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:64:78:26:d5:68:13:7c:ba:af:9f:a8:ba:
                    79:7f:15:b2:28:a6:12:8b:9c:e8:17:56:79:e0:eb:
                    2d:13:92:da:0d:e2:c7:75:5b:6e:db:94:57:8d:82:
                    61:ad:41:23:96:a2:b2:80:c0:78:b6:d7:60:61:af:
                    29:a7:9a:3f:25:b7:bd:05:4e:88:53:f4:46:9e:a8:
                    27:03:9e:2f:19:8f:7e:2c:61:47:ed:79:f8:74:29:
                    9c:26:90:f1:9e:51:b7:32:0d:e8:65:09:af:0a:ad:
                    28:b3:25:4b:5a:17:3d:b4:85:1c:61:2c:f4:98:70:
                    75:e3:6c:35:01:ed:2d:09:5d:b6:dd:23:69:43:84:
                    12:6c:82:0f:b5:cf:69:73:ba:25:3f:8a:03:ea:c5:
                    22:75:dc:0f:1b:1f:a9:40:a2:52:2d:5a:a9:6a:f2:
                    3e:6c:52:9e:52:8e:d7:71:1c:fd:72:7e:a5:08:57:
                    fc:e9:5a:03:92:b2:7d:6c:a0:22:9d:25:60:2d:09:
                    1d:6f:d6:47:cb:8d:bb:2d:6d:d0:c2:fc:a4:6e:24:
                    db:94:c8:d4:d8:81:92:43:28:2b:a7:ed:99:ce:bd:
                    32:69:35:ff:0d:e0:c4:61:f2:2f:a0:cf:fe:2a:1a:
                    cc:75:8e:6e:4b:40:21:bd:b8:14:35:a8:58:cd:2f:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:82:EB:D5:23:D9:0E:80:81:1E:18:DF:49:58:09:5C:AE:BA:C2
            X509v3 Authority Key Identifier:
                keyid:2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32322d3232203d3e20323636313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:5e:ea:d5:2a:62:fa:bc:d4:86:25:17:6f:27:3c:67:f2:b7:
         3c:56:89:b7:ec:d5:a7:7b:15:79:d1:28:77:2e:4f:0b:68:c2:
         98:f1:8f:17:37:4b:4a:a5:93:16:1a:29:1f:04:93:1e:e4:da:
         a4:c7:cc:52:91:82:9e:68:19:22:9a:ac:4e:da:75:be:9b:92:
         3d:83:98:b2:64:de:d7:73:56:4c:76:a5:3d:a9:71:7e:20:5f:
         09:94:f3:84:44:94:d8:ae:28:98:fb:e5:b2:09:9b:db:74:b1:
         30:9a:a6:a9:13:cb:57:dd:b4:ef:de:1c:13:30:2d:0a:63:d1:
         b1:4b:7d:42:56:e3:29:bb:98:b9:1f:95:8f:f3:1d:ce:49:01:
         5a:12:46:37:11:37:28:70:83:59:c2:ff:84:cf:44:3a:d0:1d:
         a2:aa:d4:0c:cf:47:4b:8b:24:94:15:b0:0d:ed:08:4c:75:d8:
         88:3a:f8:e6:4f:60:89:9a:7b:40:63:64:48:e2:41:51:34:c3:
         2e:ac:93:2b:29:54:29:7f:bf:4e:af:c6:85:77:f5:9a:df:77:
         4d:63:67:98:2d:b6:6e:60:b3:87:30:4d:2a:3c:f8:88:2c:8c:
         e1:31:8e:6a:e0:41:4f:0a:f3:69:cd:46:f4:29:74:d1:1b:29:
         b2:ae:f7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:40 2025 by rpki-client