Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32342d3234203d3e20323637393633.roa
File:                     34352e3136362e3135302e302f32342d3234203d3e20323637393633.roa (raw, json)
Hash identifier:          t2eToSWDgrttMLq9ixbvuivY7PRe1SrhMscprvL9TYs=
Subject key identifier:   DC:B9:42:52:91:4D:72:FE:37:DA:88:B3:89:ED:3B:A4:18:08:83:83
Certificate issuer:       /CN=20635662A8A5867029EC359E96E65DF88B91AA83
Certificate serial:       5CD23B88EE2AB891C0C8CC492E48CBBF8F3FE6B5
Authority key identifier: 20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32342d3234203d3e20323637393633.roa
Signing time:             Thu 15 Aug 2024 16:44:45 +0000
ROA not before:           Thu 15 Aug 2024 16:39:45 +0000
ROA not after:            Thu 14 Aug 2025 16:44:45 +0000
asID:                     267963
IP address blocks:        45.166.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 17:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d2:3b:88:ee:2a:b8:91:c0:c8:cc:49:2e:48:cb:bf:8f:3f:e6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20635662A8A5867029EC359E96E65DF88B91AA83
        Validity
            Not Before: Aug 15 16:39:45 2024 GMT
            Not After : Aug 14 16:44:45 2025 GMT
        Subject: CN=DCB94252914D72FE37DA88B389ED3BA418088383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:3b:ad:b7:f1:02:07:ba:16:25:03:39:cb:
                    3e:03:7f:b5:04:da:c8:4b:f9:ef:b5:70:98:f0:cc:
                    0a:77:97:53:00:8d:f1:49:ac:c5:92:90:61:9a:96:
                    a2:e9:6e:16:da:42:28:d4:aa:37:e9:72:d9:32:21:
                    15:4c:60:40:3c:45:be:c1:a4:f2:36:c8:e1:f6:62:
                    0f:c1:7d:6a:da:e6:61:4c:bf:98:8a:45:ab:76:6b:
                    ff:30:55:45:fb:a9:14:89:74:d7:c8:24:fc:92:a0:
                    82:75:88:38:e3:cb:a1:fb:e6:d0:a5:2b:d5:91:13:
                    80:9b:8e:70:21:63:6f:21:59:94:cf:88:de:aa:79:
                    ce:fb:6a:ab:a8:dd:86:9d:65:81:33:77:6b:bc:b4:
                    36:9c:14:20:be:c1:7a:82:fe:12:7b:f5:72:57:27:
                    91:61:fc:6c:8d:04:31:fb:00:9d:0a:47:4c:af:0e:
                    f9:7a:c3:23:b6:92:18:fd:3c:0f:2b:54:d3:3a:43:
                    10:4d:22:95:1c:b5:36:54:75:f5:85:1a:6f:27:02:
                    7f:38:7c:75:44:23:53:44:3f:43:c9:73:c3:fa:1d:
                    ed:a7:97:e5:6d:99:ea:29:c5:80:46:36:b9:35:e0:
                    40:ba:01:77:9a:d2:76:1a:5f:81:dc:38:dc:7c:16:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B9:42:52:91:4D:72:FE:37:DA:88:B3:89:ED:3B:A4:18:08:83:83
            X509v3 Authority Key Identifier:
                keyid:20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32342d3234203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:59:5a:a3:40:4c:65:13:f3:a5:0c:a9:80:d8:8e:65:cc:58:
         85:4a:2a:83:65:34:de:6a:bd:b1:8a:49:9c:e4:c7:70:88:24:
         7c:a3:98:47:27:39:1e:80:ad:17:3f:b5:18:5f:b6:5b:db:f0:
         21:ac:8b:32:9f:b8:52:c7:09:f8:a3:72:c9:e4:5c:8c:80:00:
         cd:fe:a6:70:3c:0a:01:66:07:b8:79:84:6f:1e:76:3b:7e:44:
         86:63:c2:7e:13:80:ba:22:fa:06:f4:87:c2:79:ef:cb:a4:8b:
         30:4d:94:d6:1d:9c:3a:42:87:ad:c7:32:a1:7c:2b:e7:cf:b9:
         a3:6c:4e:fc:d5:5d:03:9e:bc:b0:19:2e:46:8c:68:9c:00:ae:
         86:84:2c:1e:68:f4:46:db:da:b6:48:f2:a7:4b:20:1f:d5:90:
         1a:cb:01:3d:80:ad:f1:ad:a9:c8:05:38:e0:e1:35:08:48:86:
         95:7b:31:18:c8:b6:a4:b8:01:a2:52:66:16:d9:25:9b:f7:f2:
         7c:5d:cb:4f:94:1b:57:a2:bb:4c:b9:f1:13:86:3f:c6:ea:94:
         10:09:52:00:cc:4a:dd:81:e9:70:35:bd:9e:a4:3d:07:9e:91:
         41:c8:22:63:49:5a:8d:84:86:74:7c:67:5b:14:e8:cc:d1:de:
         32:41:b6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org