Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e35312e302f32342d3234203d3e20323638373933.roa
File:                     34352e3137332e35312e302f32342d3234203d3e20323638373933.roa (raw, json)
Hash identifier:          OUPM29Y029eTSEGTPUcPwUddvzl0QqeL0LYBu2OxYkM=
Subject key identifier:   4E:70:05:E9:6B:65:04:4F:29:B7:2D:A2:FE:2C:86:9C:56:4A:95:47
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       3CD310421BB383C658A4FCB8B067842B4C22EF58
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e35312e302f32342d3234203d3e20323638373933.roa
Signing time:             Tue 17 Dec 2024 16:00:31 +0000
ROA not before:           Tue 17 Dec 2024 15:55:31 +0000
ROA not after:            Tue 16 Dec 2025 16:00:31 +0000
asID:                     268793
IP address blocks:        45.173.51.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 13:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d3:10:42:1b:b3:83:c6:58:a4:fc:b8:b0:67:84:2b:4c:22:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Dec 17 15:55:31 2024 GMT
            Not After : Dec 16 16:00:31 2025 GMT
        Subject: CN=4E7005E96B65044F29B72DA2FE2C869C564A9547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:93:24:aa:21:bb:4e:d5:5d:a8:fe:54:3d:
                    82:af:69:b1:a7:86:79:60:fa:38:1d:54:90:7c:e0:
                    64:9f:38:17:d7:51:25:23:a8:60:23:73:cc:8e:ca:
                    2f:a9:6c:d3:51:90:de:a2:53:d7:10:32:bb:09:87:
                    af:fc:25:e3:67:f7:65:b2:55:61:06:bf:e5:81:18:
                    d8:ca:45:1d:65:20:20:6a:50:09:59:f8:8b:a2:ed:
                    bb:56:92:60:f9:a6:b4:71:fd:49:32:20:59:bc:e2:
                    ae:90:8a:db:56:8c:e8:6d:fc:e6:aa:63:83:40:bf:
                    c8:8b:7a:b2:3b:dd:3e:b2:ae:bf:f4:21:f2:d5:97:
                    a6:2d:2e:27:48:e3:9f:8b:91:c9:c0:2f:b6:5f:2d:
                    c0:24:3b:1f:77:83:6b:a9:32:b3:29:b3:ac:4f:12:
                    76:33:59:a4:8f:a2:7d:7e:2d:98:8c:22:a6:70:a1:
                    47:d1:70:86:03:51:43:ec:e3:dd:a2:81:5b:6e:da:
                    ca:58:c6:7c:1e:b8:2b:fa:f7:7a:43:c7:dc:cc:65:
                    4d:1f:ae:9b:49:ff:9c:6c:ed:9a:6d:c5:e8:58:43:
                    83:10:ae:17:bc:ed:8b:09:c0:e9:e3:75:83:56:0e:
                    2d:1c:92:9c:a4:ef:10:d1:84:35:46:8a:38:74:ad:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:70:05:E9:6B:65:04:4F:29:B7:2D:A2:FE:2C:86:9C:56:4A:95:47
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e35312e302f32342d3234203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:79:76:ab:77:0d:92:1e:03:7d:c1:3b:f0:fc:3e:df:45:ca:
         10:ea:0f:e0:af:e2:c7:83:4a:d3:eb:17:66:45:ca:f9:f1:20:
         bb:cb:4d:d2:f0:3d:89:be:c8:33:c1:70:24:92:a8:3f:21:7d:
         e2:58:ee:e9:eb:a6:1a:1b:12:85:f6:7c:65:5e:82:31:cc:f5:
         71:b9:27:9a:59:f9:a1:cc:16:c6:9b:c2:80:ae:e9:2f:92:6a:
         fc:4e:7c:c1:1d:2e:09:88:24:0c:7c:16:c6:4f:a1:ce:c6:a3:
         32:1b:c7:80:37:33:8a:b0:e5:2d:a0:17:ee:cc:cf:1d:01:cb:
         70:d8:51:00:93:5f:4b:27:e1:31:ac:b9:ce:60:3a:49:ad:40:
         eb:13:b1:d5:c4:f5:f4:9e:cd:c2:89:53:e3:ee:26:0b:94:00:
         38:91:1b:dc:c2:d1:63:16:d9:60:99:95:2e:de:36:c8:ac:07:
         1b:ed:37:58:ef:82:92:09:f4:f2:ac:6f:6c:e2:f5:0e:81:03:
         46:48:90:f5:ff:2d:0a:c0:ac:75:90:02:ff:b1:18:30:66:03:
         c8:b5:d8:e0:e7:2d:40:6f:aa:ec:1b:56:fa:95:e5:5c:d8:50:
         5d:e0:c2:06:46:27:df:68:cd:1b:9b:e7:b3:96:f9:8f:8a:f5:
         d5:59:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 21:58:50 2025 by rpki-client