Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135312e302f32342d3234203d3e20323637393633.roa
File:                     34352e3136362e3135312e302f32342d3234203d3e20323637393633.roa (raw, json)
Hash identifier:          e0ev9Ktw6WJy9XgwRmp3XbbeuJq0o15Xa5EChu51/7Y=
Subject key identifier:   A7:75:6D:6B:F7:8D:E2:79:2C:E3:EB:6C:1B:84:C8:39:7C:E6:69:40
Certificate issuer:       /CN=20635662A8A5867029EC359E96E65DF88B91AA83
Certificate serial:       291C77165ABEA409A07464F7C933F7696F75F715
Authority key identifier: 20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135312e302f32342d3234203d3e20323637393633.roa
Signing time:             Thu 15 Aug 2024 16:45:13 +0000
ROA not before:           Thu 15 Aug 2024 16:40:13 +0000
ROA not after:            Thu 14 Aug 2025 16:45:13 +0000
asID:                     267963
IP address blocks:        45.166.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 17:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1c:77:16:5a:be:a4:09:a0:74:64:f7:c9:33:f7:69:6f:75:f7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20635662A8A5867029EC359E96E65DF88B91AA83
        Validity
            Not Before: Aug 15 16:40:13 2024 GMT
            Not After : Aug 14 16:45:13 2025 GMT
        Subject: CN=A7756D6BF78DE2792CE3EB6C1B84C8397CE66940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:a0:fd:10:42:06:5b:13:3d:d5:9c:76:61:
                    37:1a:6c:9e:3b:ad:a9:de:3c:f6:c9:68:ef:59:ae:
                    31:e0:95:a9:c5:56:be:25:ab:c8:86:51:c5:67:e2:
                    6a:67:e5:51:94:49:38:59:c3:77:c1:39:22:9c:89:
                    4b:79:e7:f7:7f:ad:3a:f9:06:a8:c4:79:d9:81:d3:
                    a7:b4:e9:75:42:22:95:ba:80:24:66:22:f2:bd:08:
                    f9:36:65:2b:4c:25:ab:d8:1e:49:39:55:11:eb:55:
                    48:43:10:8b:3c:ca:63:af:5e:15:b8:45:94:e5:e5:
                    f0:b8:65:9d:26:42:d7:80:b1:59:97:c0:d2:5a:75:
                    95:ca:ca:31:22:57:a5:dd:10:b9:6c:e8:65:b5:e8:
                    e3:21:6a:54:31:d6:e0:a0:39:1d:11:db:7f:7f:66:
                    af:b4:06:41:0d:35:8f:b1:80:11:b1:5d:d8:e4:65:
                    c0:0c:10:e8:6f:84:3a:ce:05:8d:44:ed:c8:e3:d1:
                    d6:99:7b:9e:ce:70:04:a0:bd:5a:ab:c0:de:1d:ff:
                    27:84:a8:72:c2:38:89:1e:0b:92:46:ef:12:73:50:
                    1c:2b:7f:4d:85:35:17:83:24:36:71:fa:9b:fc:01:
                    7a:d5:63:08:2d:dd:a4:68:4a:eb:09:a4:20:8e:92:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:75:6D:6B:F7:8D:E2:79:2C:E3:EB:6C:1B:84:C8:39:7C:E6:69:40
            X509v3 Authority Key Identifier:
                keyid:20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135312e302f32342d3234203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:8d:2f:93:c6:bf:9c:2e:fd:3e:23:4b:4c:2b:1f:16:e4:
         2d:82:85:2f:0c:55:c7:b2:4a:c8:65:ec:59:63:9c:e9:86:35:
         e1:f3:ed:68:ee:74:37:58:86:cd:f6:54:30:2f:39:73:54:f7:
         49:6f:da:52:ab:84:d5:55:bc:7b:8a:75:65:be:6f:46:61:fe:
         1b:93:55:ec:82:4c:5c:38:4b:82:de:7b:11:f2:c0:b3:05:9e:
         5f:44:d2:45:a3:fd:20:40:5d:eb:d3:e4:48:f4:18:93:5a:da:
         af:ba:2f:a0:1c:a1:b0:3d:3e:75:de:72:d9:08:4c:31:5a:ae:
         0b:9a:99:0b:7f:d0:47:e0:e2:44:17:6e:24:be:02:4f:5e:54:
         24:87:a0:b3:85:47:59:42:fa:86:75:a8:9e:b1:19:13:e3:40:
         fe:41:cc:00:57:62:c6:0c:1b:1f:42:4b:34:6a:ea:eb:3e:37:
         6b:f5:e8:21:3c:75:2b:8b:27:03:14:21:f2:07:1f:49:57:fe:
         68:e4:4f:f4:20:3d:79:fc:ee:c4:ec:b5:d1:76:4f:b1:69:64:
         cb:49:d8:c6:a7:2e:97:2d:42:02:36:da:78:84:03:b1:9e:9f:
         1a:4d:c0:bb:6e:b6:96:39:e5:39:80:bb:bc:01:f7:7c:fc:73:
         9f:d2:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org