Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32322d3234203d3e20323637363234.roa
File:                     34352e37312e3232382e302f32322d3234203d3e20323637363234.roa (raw, json)
Hash identifier:          1cM4AboncutebTPqAi5TlUpGiWpy5ygiEKyCdmfk8IY=
Subject key identifier:   6C:D1:65:BE:18:20:32:45:9C:77:88:DF:80:8C:7B:54:FA:78:EF:E8
Certificate issuer:       /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial:       69D330B2A46F6922A8C01E7AB9C80E2689785AF8
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32322d3234203d3e20323637363234.roa
Signing time:             Wed 03 Apr 2024 20:09:41 +0000
ROA not before:           Wed 03 Apr 2024 20:04:41 +0000
ROA not after:            Wed 02 Apr 2025 20:09:41 +0000
asID:                     267624
IP address blocks:        45.71.228.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 12:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d3:30:b2:a4:6f:69:22:a8:c0:1e:7a:b9:c8:0e:26:89:78:5a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
        Validity
            Not Before: Apr  3 20:04:41 2024 GMT
            Not After : Apr  2 20:09:41 2025 GMT
        Subject: CN=6CD165BE182032459C7788DF808C7B54FA78EFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:b9:8f:ab:c4:6c:90:37:32:89:f2:cb:ba:
                    b6:0b:41:78:25:86:2c:85:1c:2e:4f:76:96:50:6b:
                    d4:8b:9b:ae:81:3f:cb:08:ee:7b:d5:77:ec:da:5d:
                    3e:c6:b5:55:9d:91:19:93:91:38:1a:cb:db:68:37:
                    5a:6d:16:1a:f3:a4:81:43:72:78:a0:83:48:08:f5:
                    cf:4e:61:c0:9e:80:f8:bf:4a:41:07:35:a6:74:95:
                    c2:6b:7c:30:88:64:67:4e:e1:5b:e7:9d:a2:17:f0:
                    33:d0:cd:ec:15:05:55:d9:da:ac:ea:b3:89:3b:9f:
                    94:75:bd:13:d9:fe:65:52:50:7d:3a:b4:66:95:12:
                    9d:91:d5:61:19:6d:d0:d4:8d:b0:34:33:78:10:cb:
                    2d:cb:3b:6d:77:d2:67:bc:91:8d:fc:c0:83:0f:04:
                    94:79:2f:7e:1f:f2:0d:10:64:00:09:5f:04:35:48:
                    ce:05:53:39:e1:0a:67:fd:44:05:d3:4c:51:94:34:
                    15:c6:fb:cc:c3:de:9a:20:7c:4c:8b:35:a0:5d:64:
                    6e:ee:85:10:d8:bd:1e:1d:e6:47:8f:a0:04:ec:91:
                    87:b5:cf:69:ba:84:d3:dd:2d:b6:79:47:61:d5:cd:
                    dd:97:d6:be:c6:ba:40:cd:ee:9e:cd:85:b8:86:6f:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:65:BE:18:20:32:45:9C:77:88:DF:80:8C:7B:54:FA:78:EF:E8
            X509v3 Authority Key Identifier:
                keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32322d3234203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:3e:99:62:76:9e:55:42:df:85:e4:1e:5d:bf:76:b3:3e:48:
         23:dc:90:0a:7f:c1:85:7d:b1:f5:ba:64:5f:76:5a:49:6c:e9:
         58:7e:bd:fb:7f:33:f5:17:df:33:ac:aa:19:46:b9:e7:48:27:
         bb:27:0a:11:83:f8:b4:38:d7:18:1d:59:e3:aa:a7:e0:72:36:
         8f:01:27:72:8e:c7:cb:2b:7a:ff:c1:b1:bd:db:b0:8f:6f:81:
         70:e3:51:6c:4a:0a:7a:ec:fa:71:78:8d:05:04:cb:df:c3:57:
         27:7e:7d:68:a6:96:af:94:e7:ff:14:20:d5:96:95:eb:25:2d:
         d2:b8:45:68:bc:21:37:61:60:b2:71:d8:d8:0e:01:70:2b:02:
         a8:99:db:04:db:12:3f:31:dd:b7:d0:b8:22:1e:5a:fc:fa:00:
         7f:fe:17:69:e5:28:59:16:f2:d7:bf:6d:60:e4:db:32:d0:d8:
         bf:32:c9:08:e9:84:54:2c:f9:42:10:a1:7c:1b:0e:9a:44:b5:
         92:54:3a:3e:ce:a4:5b:5d:58:c2:11:bb:8b:9f:f6:7e:9b:9e:
         f6:ca:75:89:f6:31:13:56:4b:80:26:a1:91:20:07:26:c2:59:
         8c:59:cd:99:45:5f:dd:3c:fc:04:71:88:c5:57:25:0c:f2:fd:
         33:df:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 16:34:30 2024 by rpki-client on console-ams.rpki-client.org