Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32322d3232203d3e20323638353731.roa
File:                     34352e3136332e3136302e302f32322d3232203d3e20323638353731.roa (raw, json)
Hash identifier:          kwfHJV+jnTUbOS+bUMNc9ns8RBC/4GtyQBYcqCVZc7c=
Subject key identifier:   7B:CE:95:65:42:FA:87:12:FA:C2:E2:9F:07:E9:98:18:73:04:E0:11
Certificate issuer:       /CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
Certificate serial:       1AB4EF19FC6439B61FE154C2D52B3B9772EC8658
Authority key identifier: ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32322d3232203d3e20323638353731.roa
Signing time:             Mon 05 Aug 2024 11:45:21 +0000
ROA not before:           Mon 05 Aug 2024 11:40:21 +0000
ROA not after:            Mon 04 Aug 2025 11:45:21 +0000
asID:                     268571
IP address blocks:        45.163.160.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Mon 05 Aug 2024 13:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b4:ef:19:fc:64:39:b6:1f:e1:54:c2:d5:2b:3b:97:72:ec:86:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
        Validity
            Not Before: Aug  5 11:40:21 2024 GMT
            Not After : Aug  4 11:45:21 2025 GMT
        Subject: CN=7BCE956542FA8712FAC2E29F07E998187304E011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:f5:85:04:15:99:37:ab:4a:99:11:6b:49:ae:
                    a4:11:76:06:a3:1d:9b:6c:10:7c:36:a1:0d:94:fe:
                    b9:73:3b:2a:80:ac:0c:80:16:d2:1b:dd:5a:01:de:
                    06:0d:55:f5:f6:88:f1:8a:45:38:40:9a:20:1b:6d:
                    c6:2c:53:f2:7c:56:11:48:85:78:26:55:c9:86:c7:
                    e4:5d:dc:ac:12:cc:19:18:e3:6c:c6:7d:9a:7e:76:
                    ca:9b:93:46:8e:d0:d8:07:af:8d:c0:dd:94:9f:fa:
                    87:aa:e3:54:a3:f1:26:1a:62:c4:04:26:6b:73:71:
                    84:aa:cc:8e:50:1b:a4:c6:76:55:cd:9f:7b:75:6c:
                    1e:b0:87:81:c6:69:fb:db:a5:84:6b:ba:21:58:bb:
                    a9:cd:07:06:19:ca:97:71:57:00:eb:62:4d:07:de:
                    7f:33:d2:20:4b:ff:b6:86:25:54:9e:6a:62:87:d1:
                    09:61:f7:ef:0a:5e:04:ff:07:e8:7a:bf:72:12:a0:
                    7e:a5:43:58:5a:24:72:5f:ba:57:05:e5:ee:c8:eb:
                    bb:9c:7e:95:bf:0d:b8:b6:dc:de:9e:25:95:ec:c8:
                    7d:be:fa:46:f2:af:3e:9d:b1:dd:00:a3:d0:f7:6e:
                    7b:4c:c0:3e:64:4f:0f:4c:c7:70:02:02:5e:b6:11:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:95:65:42:FA:87:12:FA:C2:E2:9F:07:E9:98:18:73:04:E0:11
            X509v3 Authority Key Identifier:
                keyid:ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/34352e3136332e3136302e302f32322d3232203d3e20323638353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:d7:88:8d:a5:2b:97:1d:36:b6:17:75:42:41:e6:ab:b2:d9:
         55:0d:ef:b2:9b:9d:55:8d:7b:c5:51:c2:4c:00:84:c4:79:cf:
         b2:77:dd:39:39:99:5d:9f:31:3d:fd:a0:ff:95:cb:57:73:62:
         7d:cf:62:97:6b:3b:9a:e2:69:57:cc:7f:fd:03:48:ee:c7:c1:
         da:7c:85:cd:06:e6:a7:e5:d9:d1:f3:4d:95:46:96:2d:f9:c0:
         49:f8:e3:11:90:a6:a3:b1:6e:55:7b:48:06:39:09:0b:a8:bf:
         b0:d3:1c:35:57:32:db:02:b2:18:a5:7a:fc:66:dd:67:44:73:
         a2:91:aa:49:9f:1f:60:42:dc:6e:cf:6c:de:96:55:e6:30:23:
         99:cf:4f:d1:a3:4d:6c:ed:0a:13:13:7f:f9:a9:66:53:98:ff:
         06:9d:9c:cf:1c:10:b8:62:96:2d:71:19:5c:02:4c:e2:b8:f4:
         27:be:d0:91:fc:af:9f:e5:b0:62:08:cb:e5:e1:32:8a:b5:2b:
         c2:a0:7d:b1:af:6a:6d:64:26:b6:ef:66:8a:12:a7:6d:a1:e9:
         5e:7a:7c:16:56:58:c0:b4:3b:85:3a:c5:70:45:7e:83:6e:b7:
         ed:d8:b9:12:e9:94:d9:a0:e4:4f:2d:76:70:93:7e:98:b6:f8:
         bd:a8:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:50:18 2025 by rpki-client