Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3139312e302f32342d3234203d3e20323637363238.roa
File:                     34352e37312e3139312e302f32342d3234203d3e20323637363238.roa (raw, json)
Hash identifier:          SyDQYvYEie3CwnmqJsbS7AVVPMtWLP4VW1f+WiWPCkI=
Subject key identifier:   CE:E0:87:E4:C1:40:1D:5E:29:C8:77:82:6A:78:5B:8F:6C:7C:A2:F9
Certificate issuer:       /CN=CC4C58019807553918DEAD8A63DFB7011B89945A
Certificate serial:       7EB210CA052DD362FEE23514E66227D0B7FA8CB2
Authority key identifier: CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3139312e302f32342d3234203d3e20323637363238.roa
Signing time:             Thu 15 May 2025 14:19:12 +0000
ROA not before:           Thu 15 May 2025 14:14:12 +0000
ROA not after:            Thu 14 May 2026 14:19:12 +0000
asID:                     267628
IP address blocks:        45.71.191.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 18:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b2:10:ca:05:2d:d3:62:fe:e2:35:14:e6:62:27:d0:b7:fa:8c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4C58019807553918DEAD8A63DFB7011B89945A
        Validity
            Not Before: May 15 14:14:12 2025 GMT
            Not After : May 14 14:19:12 2026 GMT
        Subject: CN=CEE087E4C1401D5E29C877826A785B8F6C7CA2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:cf:37:b9:b8:49:2e:c1:71:1f:dc:4c:41:
                    14:51:42:44:63:ad:78:8d:5b:d0:18:73:99:36:1c:
                    25:ac:62:41:dd:b5:18:bc:17:b9:57:e5:69:33:c6:
                    bc:e7:d5:64:37:aa:1b:f8:82:93:c5:28:5a:09:11:
                    2b:b4:62:79:d2:1e:75:4c:14:4c:a9:73:4a:c9:77:
                    92:02:98:19:9b:e6:1d:0f:a3:7a:88:08:32:24:f1:
                    eb:d4:52:7a:86:94:f1:22:5c:26:7a:2e:d5:87:1d:
                    63:92:46:11:7c:e5:5c:32:e4:52:a0:8d:0c:42:fc:
                    03:de:82:b0:1d:5b:55:0d:d8:bb:c3:db:a1:55:f4:
                    55:a5:d0:64:55:4d:06:68:c9:ea:dd:b2:99:77:32:
                    17:2a:35:68:f2:ee:ba:35:cc:ad:81:40:42:50:86:
                    69:f4:b6:d8:3c:0d:89:c3:53:2c:e6:48:a1:38:4d:
                    42:37:24:db:df:17:08:65:b4:49:ba:0d:f2:52:e2:
                    9f:f6:e9:97:12:a0:a5:53:7a:e4:aa:b8:b0:f3:e1:
                    3a:01:93:01:4b:f9:da:3e:2b:ad:18:98:1f:ba:6c:
                    68:35:65:30:fc:71:bc:a8:43:f3:8e:d5:16:ac:cc:
                    42:8d:2e:c9:e9:60:64:ac:74:6d:ae:99:bf:a8:d8:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E0:87:E4:C1:40:1D:5E:29:C8:77:82:6A:78:5B:8F:6C:7C:A2:F9
            X509v3 Authority Key Identifier:
                keyid:CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/CC4C58019807553918DEAD8A63DFB7011B89945A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3139312e302f32342d3234203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:37:ee:8a:9d:92:1c:c4:1a:8d:68:c1:e2:cb:c4:fa:4b:
         5d:d2:7c:1a:ac:45:34:9c:55:bf:36:30:ed:9f:a7:e6:b0:fe:
         93:88:f4:56:d8:87:26:23:f2:43:4b:09:62:d6:d7:f2:f3:bb:
         ee:97:a3:e9:7f:71:fc:5e:23:c0:cb:fa:89:20:a5:57:7d:ae:
         c4:81:af:99:5a:60:d5:98:76:9c:48:65:b5:28:0a:4f:f5:29:
         d8:c2:af:88:8b:60:e9:68:6a:f6:a8:53:4f:f4:45:7d:1f:47:
         da:0a:33:ac:9e:10:39:87:66:c0:63:93:98:e8:60:3a:8a:57:
         1c:d6:d8:ec:a4:b7:bf:01:34:6a:55:ed:25:29:4a:03:57:77:
         52:b5:65:c8:14:8c:dc:50:83:97:83:28:54:ae:6d:79:6e:28:
         b5:31:a9:e0:d9:2a:9f:0b:4a:e5:8c:dc:ce:a0:ab:0a:61:15:
         c1:55:8e:47:16:35:67:29:82:04:2c:db:12:8a:c6:0b:29:69:
         c6:28:57:1a:25:1d:4b:22:f5:90:c9:e0:52:50:b7:e8:57:54:
         9f:36:60:83:67:05:b4:73:3e:cf:68:98:24:ee:72:e4:00:95:
         8c:16:5a:a0:52:05:ab:5b:01:38:fc:f4:99:18:d7:a4:79:e3:
         7b:97:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:30 2025 by rpki-client