Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138392e302f32342d3234203d3e20323637363238.roa
File:                     34352e37312e3138392e302f32342d3234203d3e20323637363238.roa (raw, json)
Hash identifier:          EqRw4U9XpOF64+K6i566vMaw37izaLse6a1sqMCT72w=
Subject key identifier:   8B:8C:EE:0D:1E:CF:62:0D:16:74:FD:07:58:90:02:0E:D1:45:07:9F
Certificate issuer:       /CN=CC4C58019807553918DEAD8A63DFB7011B89945A
Certificate serial:       7F8E15DA39AE19509771AEEC231E81EE9D66A218
Authority key identifier: CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138392e302f32342d3234203d3e20323637363238.roa
Signing time:             Thu 15 May 2025 14:19:03 +0000
ROA not before:           Thu 15 May 2025 14:14:03 +0000
ROA not after:            Thu 14 May 2026 14:19:03 +0000
asID:                     267628
IP address blocks:        45.71.189.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 18:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8e:15:da:39:ae:19:50:97:71:ae:ec:23:1e:81:ee:9d:66:a2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4C58019807553918DEAD8A63DFB7011B89945A
        Validity
            Not Before: May 15 14:14:03 2025 GMT
            Not After : May 14 14:19:03 2026 GMT
        Subject: CN=8B8CEE0D1ECF620D1674FD075890020ED145079F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:74:f4:80:63:76:ef:8f:d6:b3:08:4a:8f:
                    c3:ae:9d:94:22:0b:11:d2:f5:6e:5a:e9:ea:b1:4b:
                    fe:f1:f6:b2:45:b5:15:f0:f4:5f:c9:3e:fe:2b:61:
                    77:5f:4b:2a:ee:8c:2c:90:02:dc:e3:dc:84:ce:e8:
                    e3:eb:f4:95:85:84:e5:d8:b2:c2:c4:f1:5e:a0:cc:
                    45:99:56:eb:5a:6e:b0:82:a0:2d:83:07:cb:f2:23:
                    b5:ab:c4:97:02:74:cb:f0:68:65:56:67:d4:15:d1:
                    8b:94:d4:fa:2f:81:31:07:b5:2c:f4:d6:00:8c:01:
                    f7:b2:d5:b4:e6:e2:1a:bc:fa:cb:b2:10:a6:85:dd:
                    7d:57:fd:85:d1:96:a8:bb:c3:11:ca:19:bf:d9:be:
                    94:1b:88:49:75:b4:64:d8:33:ab:bf:9b:d8:37:5e:
                    22:c4:36:ad:22:74:e0:4b:d9:b3:4e:88:28:c8:95:
                    49:6e:67:02:19:3a:e6:90:4e:7c:fc:f3:c1:77:36:
                    21:08:72:97:26:49:94:8a:a0:a5:53:7a:19:c6:38:
                    7b:22:24:97:72:a2:d4:be:96:ec:9c:24:94:74:50:
                    5a:5d:de:a1:5f:33:4e:10:46:5d:99:46:98:40:77:
                    48:8c:9b:ac:8e:a5:27:0b:67:fa:10:ad:0c:90:40:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:EE:0D:1E:CF:62:0D:16:74:FD:07:58:90:02:0E:D1:45:07:9F
            X509v3 Authority Key Identifier:
                keyid:CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/CC4C58019807553918DEAD8A63DFB7011B89945A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138392e302f32342d3234203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8d:43:0a:f8:88:45:3e:24:0d:eb:a5:cf:07:0b:19:4f:1a:
         ed:3f:2a:11:cc:7c:8d:fb:97:02:f7:30:5e:e7:64:0e:82:e4:
         c1:43:54:e6:3a:73:63:b9:15:21:70:fc:b8:33:8a:c5:d6:ca:
         09:f1:92:8b:fd:93:1f:a8:d0:7d:a9:ad:49:6d:65:59:80:dd:
         c5:93:72:df:3a:99:d0:2e:77:f3:17:44:4d:cd:13:c7:cd:93:
         5d:10:fa:48:ff:92:eb:92:b8:5d:ae:39:b9:5c:0f:31:3b:92:
         1f:b0:ac:0e:7c:1a:7c:3e:1d:06:27:66:df:94:75:d9:dc:b5:
         50:e5:a2:8d:ee:26:5b:d6:ee:f3:10:11:f4:9f:9c:47:fd:79:
         48:d3:5f:a3:60:e5:4e:d3:7f:f5:9e:2b:90:2b:aa:77:0a:e8:
         f9:35:f4:bf:9c:6e:20:88:ba:77:8f:ec:52:4b:b7:92:5e:96:
         4a:9c:73:b6:c8:25:47:65:5b:e0:bb:7b:18:7f:8c:54:14:82:
         6c:0e:ab:c9:04:17:eb:0f:f2:c4:33:ff:1f:86:0b:70:da:8a:
         65:8c:22:f6:2c:74:65:4a:5e:07:a0:9b:25:6d:79:14:29:20:
         d1:ed:ed:56:e9:c3:3d:2e:64:ba:a7:9f:6a:7e:e3:4b:0f:f6:
         c3:3a:88:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:39:16 2025 by rpki-client