Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32342d3234203d3e20323637313932.roa
File:                     34352e3233312e39362e302f32342d3234203d3e20323637313932.roa (raw, json)
Hash identifier:          4cfO2aylRflUCXWSnAUtu4rNjxwZlC5Y8rrLNBxABbM=
Subject key identifier:   BF:D6:7E:3B:2C:A6:67:39:6A:4B:88:20:66:58:EC:F5:AF:FF:9A:38
Certificate issuer:       /CN=59D79079ECD031F0A1D0E88BA326755415EE0813
Certificate serial:       1B0927CB8034E573620EB2A44D2AFE78F3D647C4
Authority key identifier: 59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32342d3234203d3e20323637313932.roa
Signing time:             Thu 25 Apr 2024 12:19:21 +0000
ROA not before:           Thu 25 Apr 2024 12:14:21 +0000
ROA not after:            Thu 24 Apr 2025 12:19:21 +0000
asID:                     267192
IP address blocks:        45.231.96.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:09:27:cb:80:34:e5:73:62:0e:b2:a4:4d:2a:fe:78:f3:d6:47:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D79079ECD031F0A1D0E88BA326755415EE0813
        Validity
            Not Before: Apr 25 12:14:21 2024 GMT
            Not After : Apr 24 12:19:21 2025 GMT
        Subject: CN=BFD67E3B2CA667396A4B88206658ECF5AFFF9A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:d6:50:6b:c0:20:04:47:27:e6:86:e4:60:
                    05:34:62:b5:12:88:66:50:3d:ce:d6:5d:8a:8a:f6:
                    cc:c5:f1:25:b5:ba:87:f8:41:1d:f3:92:c6:0a:1d:
                    55:51:7f:6f:ca:ee:1c:2a:ad:24:c3:10:a5:c4:54:
                    05:ff:6b:cd:da:6d:d4:7a:63:39:5d:20:14:27:be:
                    40:8a:d4:df:b7:69:a7:15:8a:03:07:b2:f4:75:d5:
                    1c:89:8e:90:a0:b3:fb:e2:d6:6a:7d:d8:fd:cb:af:
                    e7:b7:43:2e:b5:f5:fa:0d:d3:4e:e2:e8:99:4f:a5:
                    97:98:27:96:1d:1a:c1:d2:3a:55:04:7f:35:34:50:
                    bd:9f:c7:2f:53:4b:5e:24:11:71:6f:f4:12:d7:13:
                    ca:4b:d3:fc:ba:72:7e:70:54:9d:d6:ed:86:6f:95:
                    a7:2e:3c:3d:0c:17:12:4d:38:e8:ba:db:ed:98:b0:
                    ef:59:fc:9a:6a:53:8a:11:bc:6c:98:09:41:e8:c1:
                    81:1b:27:42:5f:9b:85:04:d1:87:da:0c:64:bd:da:
                    7d:80:9e:48:d3:d0:bc:96:d2:0b:b6:27:7c:35:2a:
                    ef:af:7d:b2:91:97:15:c2:d1:76:98:50:aa:68:29:
                    bf:0d:e5:a2:94:e9:70:35:5d:bb:8f:5a:b7:b5:94:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D6:7E:3B:2C:A6:67:39:6A:4B:88:20:66:58:EC:F5:AF:FF:9A:38
            X509v3 Authority Key Identifier:
                keyid:59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/34352e3233312e39362e302f32342d3234203d3e20323637313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:3c:03:77:ee:e7:fe:71:79:9e:5f:d3:7d:a9:82:f2:56:
         61:d7:c7:b4:17:f1:6d:5d:e8:9b:a7:fd:a7:84:67:0a:f4:56:
         46:90:36:bf:3a:ea:fe:56:32:d5:4e:89:df:82:1f:f8:5c:26:
         03:66:c3:31:49:60:3a:20:29:c7:d9:cf:29:6e:1e:1f:66:ae:
         a8:22:e7:3e:71:f4:5b:fa:02:bb:33:66:04:63:da:ed:ba:15:
         c0:4c:45:ad:d1:9d:94:b3:82:4d:76:25:bb:c0:2e:1a:03:3f:
         b2:fc:b5:25:cb:dd:5b:bf:9b:f5:21:64:1f:22:1e:5c:78:8b:
         87:e8:a6:43:1d:5a:56:b1:51:25:4a:b1:65:0e:a9:ad:f9:f8:
         d5:c8:cc:ac:a6:f0:8f:ff:e4:18:e7:8f:5b:c4:79:6f:5c:a7:
         e2:b4:8a:c2:02:2b:d5:8d:0b:ea:e0:05:29:99:43:e7:51:ca:
         81:3a:8f:06:31:31:32:f5:13:9d:a7:a7:5b:5c:cf:eb:52:09:
         d3:57:7a:d9:ec:29:ef:8c:da:01:80:a6:3d:89:c8:a8:3d:57:
         f5:09:fc:4e:8e:92:d4:a3:f7:cc:c2:d0:b2:79:3b:50:1b:ab:
         e7:bf:ac:20:46:8b:65:bf:70:c3:f9:1b:c3:ae:8e:8d:62:a7:
         69:34:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:38 2025 by rpki-client