Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32322d3232203d3e20323637393333.roa
File:                     34352e3136352e3232302e302f32322d3232203d3e20323637393333.roa (raw, json)
Hash identifier:          F0VLEK2dweSXj6QHySIkn7ooNiEwPfQXXC8yY1wLCe4=
Subject key identifier:   30:45:28:44:22:DC:57:4C:59:19:35:D5:F1:89:7B:62:AA:09:A0:08
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       0EA52F3870A404C3DF4A777C43507244C7891940
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32322d3232203d3e20323637393333.roa
Signing time:             Sun 07 Jul 2024 12:08:40 +0000
ROA not before:           Sun 07 Jul 2024 12:03:40 +0000
ROA not after:            Sun 06 Jul 2025 12:08:40 +0000
asID:                     267933
IP address blocks:        45.165.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 20:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a5:2f:38:70:a4:04:c3:df:4a:77:7c:43:50:72:44:c7:89:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Jul  7 12:03:40 2024 GMT
            Not After : Jul  6 12:08:40 2025 GMT
        Subject: CN=3045284422DC574C591935D5F1897B62AA09A008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:bd:62:5d:9e:ab:d7:22:ec:79:24:99:65:
                    06:9d:33:90:5a:24:bf:13:47:0f:7d:da:0e:71:30:
                    0e:4e:7f:9e:8b:4b:62:3e:5d:47:90:5e:32:80:a1:
                    a8:e0:44:b2:87:f1:b9:61:45:c0:c0:36:94:d0:2e:
                    d2:87:a8:3a:84:c6:99:e7:8b:f3:dc:ee:18:2d:7e:
                    0a:58:68:76:e9:c3:d2:d4:c2:46:ed:ed:b3:82:dc:
                    de:0d:e1:95:80:fb:1c:b9:fc:53:df:cd:78:c5:c9:
                    f2:de:b6:95:5b:78:94:18:05:5f:c8:31:f5:e3:e0:
                    cf:7a:b9:d9:8f:3f:e9:e2:55:3a:ca:b0:fc:c6:14:
                    87:79:90:9e:60:ee:eb:7c:3c:bc:e7:42:50:91:97:
                    3c:3b:00:af:36:85:fa:7a:e1:c1:9d:e8:85:55:1a:
                    0e:12:64:18:bd:83:8b:39:df:02:60:f7:c7:9d:d8:
                    30:9a:03:ee:2c:f4:56:9e:58:e8:c9:b8:e2:a0:53:
                    2f:9e:47:ca:d6:a1:e8:b5:6f:40:b6:a3:24:95:20:
                    f1:79:7a:9e:07:55:47:02:ab:c4:f4:c0:88:89:35:
                    88:50:88:b1:52:23:4d:29:a7:1a:d8:95:3b:bd:25:
                    46:d2:64:86:c0:0a:cd:03:ba:ac:2a:3b:ea:e2:79:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:45:28:44:22:DC:57:4C:59:19:35:D5:F1:89:7B:62:AA:09:A0:08
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32322d3232203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:18:9d:a5:e0:8e:d4:b2:cb:71:ee:f2:dd:20:16:20:65:cf:
         df:7b:bf:a9:82:d4:4d:62:e1:8d:4c:4f:7b:15:9a:e0:0e:51:
         64:0f:15:d7:f6:dd:84:71:00:2a:0b:ff:c4:13:de:15:34:71:
         f4:86:c8:f1:f8:e8:0c:da:d8:04:2f:4c:a7:ef:4f:56:30:a9:
         d8:1a:95:8e:b5:3f:09:90:df:4a:a8:97:67:7b:c9:4c:19:86:
         23:79:89:5b:0e:a5:83:17:84:95:bc:79:90:20:f9:1b:3f:9c:
         d3:6c:d5:94:c3:0c:d4:6c:08:2e:c9:b8:13:fb:32:20:fd:50:
         29:c7:e4:c8:14:6f:6c:96:aa:e2:37:00:3c:07:cf:09:a5:19:
         f9:e1:78:40:5a:2b:b7:63:7a:1f:73:58:aa:c1:98:36:a9:39:
         46:40:40:0b:26:9e:8e:61:e3:71:d2:8a:2a:40:38:23:08:46:
         40:ac:48:7c:df:43:4b:ee:95:76:4a:87:fd:d4:d3:3d:fc:01:
         27:c0:d4:67:10:ba:6f:0a:64:31:79:21:5a:9f:85:41:d1:79:
         c9:dc:c3:00:de:63:2b:17:c1:c2:1d:ab:26:60:b2:b5:25:9e:
         b6:7e:97:14:4e:46:70:fe:bd:8d:f6:0d:3d:03:24:91:08:bb:
         d3:c4:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 23:24:05 2024 by rpki-client on console-fra.rpki-client.org