Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233372e302f32342d3234203d3e20323731373332.roa
File:                     34352e362e3233372e302f32342d3234203d3e20323731373332.roa (raw, json)
Hash identifier:          6hPz6/Nppb4WZB5O46igjXp9K1nwMigG3o5t8p5a7H8=
Subject key identifier:   F7:46:B3:EE:8B:A8:F7:78:D5:0E:80:12:98:84:E0:BA:E1:DB:C7:F2
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       7A754D2CBC63E015D475A06BF5A6BECF2960C04D
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233372e302f32342d3234203d3e20323731373332.roa
Signing time:             Tue 30 Jul 2024 19:29:41 +0000
ROA not before:           Tue 30 Jul 2024 19:24:41 +0000
ROA not after:            Tue 29 Jul 2025 19:29:41 +0000
asID:                     271732
IP address blocks:        45.6.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 13:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:75:4d:2c:bc:63:e0:15:d4:75:a0:6b:f5:a6:be:cf:29:60:c0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: Jul 30 19:24:41 2024 GMT
            Not After : Jul 29 19:29:41 2025 GMT
        Subject: CN=F746B3EE8BA8F778D50E80129884E0BAE1DBC7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:71:14:16:4b:b2:53:73:d1:34:69:84:6c:
                    76:4d:54:b4:ba:27:30:ff:7d:52:29:2b:72:ce:0d:
                    6c:08:61:da:8c:e9:65:72:1f:eb:7d:ad:ff:a6:a1:
                    e7:48:65:bd:da:1d:5a:e4:e7:a7:1f:4d:be:26:e7:
                    6a:e1:f3:c0:e7:43:69:5b:27:4e:61:b2:46:e5:f2:
                    e5:de:a0:00:c5:9b:13:9c:d0:17:9b:d8:ce:6f:42:
                    43:43:17:be:21:bf:98:83:96:b2:54:e3:90:f4:72:
                    a2:7b:18:27:7e:65:e5:e5:96:03:67:74:6d:34:0c:
                    82:71:4d:99:4b:a7:07:69:48:21:a6:38:4b:26:be:
                    b3:44:96:1b:46:b2:04:e5:8f:f7:ea:57:b0:24:43:
                    a8:e4:d2:e5:96:eb:7b:7d:7c:77:9b:ec:d7:44:80:
                    91:06:6d:09:7f:2f:b1:32:2c:9a:23:dd:6b:5d:d3:
                    1d:06:7a:e9:e2:f6:52:0e:97:83:fe:99:87:fc:63:
                    73:a2:46:6a:80:7c:49:1b:9a:16:29:af:3c:5b:91:
                    44:97:ab:c4:a3:71:71:25:84:82:4a:3e:10:e6:c2:
                    e3:03:3d:34:c1:ac:bc:95:8a:e1:84:1d:4d:8a:69:
                    6a:61:b7:33:27:0f:32:57:5f:d7:ae:88:70:14:ba:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:46:B3:EE:8B:A8:F7:78:D5:0E:80:12:98:84:E0:BA:E1:DB:C7:F2
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233372e302f32342d3234203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:c5:a5:8e:51:c2:ca:55:7f:09:c6:62:c8:0f:a6:e1:27:
         13:75:93:c8:96:de:d6:b9:7c:40:55:27:67:6a:82:eb:f2:8f:
         c7:b6:1f:17:e9:46:32:85:f7:03:b4:53:53:69:1a:e7:d8:bb:
         08:bc:a4:fa:f2:36:df:27:08:7a:d7:8a:d3:07:0c:2f:2c:b5:
         33:54:42:35:b8:d1:1e:e1:21:b0:0e:14:ae:40:68:14:3a:d4:
         88:bb:d2:f9:2f:3c:82:f6:b6:2d:63:c6:49:a5:27:f7:99:e5:
         fd:3d:3f:36:17:f0:9a:fa:3b:a1:3c:1c:f7:a4:c4:9a:9f:ed:
         bb:49:d5:31:db:9c:64:2a:34:fc:8c:06:12:6b:55:b6:2e:81:
         bf:ca:7d:c3:a7:c4:80:8e:e0:5f:5b:75:e2:d2:cd:01:f3:cb:
         b2:89:eb:15:fc:72:1b:70:e8:1d:75:2a:2c:27:84:61:10:60:
         8d:0d:92:16:75:96:e0:49:66:be:d0:9a:d1:71:c2:08:ae:95:
         62:fd:13:9b:96:fc:9b:25:88:62:5a:e1:92:94:13:f5:1e:bf:
         62:d0:ea:73:37:08:0d:af:b2:cd:86:a1:5c:57:34:a6:c0:c5:
         cc:db:e1:e4:e8:12:eb:59:8a:7d:c2:82:00:b8:ee:cb:da:20:
         b9:df:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 16:48:18 2024 by rpki-client on console-fra.rpki-client.org