Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa
File:                     34352e3232382e38352e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier:          EjEUxBtwF3mgdzFxdAKXRvpdtN9pyuYcBsbdQUYZ+gM=
Subject key identifier:   E0:E6:1E:15:B2:AB:90:BB:91:80:23:FB:48:D0:E6:84:53:4F:10:60
Certificate issuer:       /CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
Certificate serial:       35F70D9F04E0364EAE06C40B0A434CDBFC9A51A3
Authority key identifier: E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa
Signing time:             Mon 09 Sep 2024 12:37:09 +0000
ROA not before:           Mon 09 Sep 2024 12:32:09 +0000
ROA not after:            Mon 08 Sep 2025 12:37:09 +0000
asID:                     267067
IP address blocks:        45.228.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 11:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f7:0d:9f:04:e0:36:4e:ae:06:c4:0b:0a:43:4c:db:fc:9a:51:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
        Validity
            Not Before: Sep  9 12:32:09 2024 GMT
            Not After : Sep  8 12:37:09 2025 GMT
        Subject: CN=E0E61E15B2AB90BB918023FB48D0E684534F1060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:3d:53:79:6f:8b:0d:48:e2:c8:ac:38:70:
                    b2:4f:c1:37:ac:71:26:b5:75:bd:22:90:ed:61:88:
                    1e:d3:13:25:69:55:67:96:0b:b1:23:e5:19:09:61:
                    fb:8a:e6:40:bf:de:67:2f:44:ee:cf:7d:23:a4:12:
                    b8:3c:3c:d4:0e:4d:60:37:9e:61:4e:93:55:74:6f:
                    62:87:07:d5:36:87:55:a7:36:ea:a9:25:fb:25:e8:
                    95:3c:f9:78:6a:3f:b2:5b:71:b8:a3:ff:50:d1:2f:
                    7a:a1:7b:46:f7:36:d3:7c:75:c2:13:eb:ad:dd:83:
                    17:6d:3f:54:87:49:bc:37:f7:7f:b3:c4:97:e6:90:
                    7c:1d:8c:81:8b:31:74:aa:b1:44:b7:ed:9a:98:5e:
                    1f:5d:c1:57:86:35:a3:72:ed:a0:70:74:61:a2:34:
                    e5:a6:d0:45:65:c3:c8:45:da:fb:5f:cf:95:f4:04:
                    0c:e2:29:41:1f:d8:c4:18:b4:c9:55:1e:48:4a:22:
                    a2:3f:65:a6:de:82:1a:f7:d3:c2:50:34:35:15:69:
                    9f:8a:9f:71:f2:f2:36:eb:ce:c1:19:95:db:cc:a8:
                    dc:ff:60:0a:e6:6b:bd:b8:eb:15:67:6e:06:f7:52:
                    79:b4:cd:35:90:71:75:76:ac:bf:4b:b6:3d:bb:00:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E6:1E:15:B2:AB:90:BB:91:80:23:FB:48:D0:E6:84:53:4F:10:60
            X509v3 Authority Key Identifier:
                keyid:E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:b2:ec:fe:ca:60:60:35:fc:91:4c:f5:4a:4d:b1:69:6a:
         b4:90:32:24:c3:45:6f:33:d0:76:bb:c8:78:ea:e9:17:dc:40:
         b0:8c:c7:b1:39:81:19:2a:50:2a:cb:f0:8e:f9:92:df:df:68:
         e2:46:17:2f:1d:8d:b5:70:92:cb:0c:2b:09:6b:c9:cf:39:55:
         28:25:7b:75:af:b4:99:ec:b5:8e:e2:b0:c8:00:d7:5b:28:4a:
         49:0e:ca:ee:aa:d0:5b:2c:39:36:34:c4:7a:bb:2d:fc:db:96:
         38:2b:75:ec:2e:2c:0d:7f:4d:b6:04:d6:ce:f9:58:14:aa:45:
         5c:56:37:09:8e:ff:f2:63:4e:d8:f9:fc:98:ec:18:a1:91:b4:
         12:1c:84:d1:75:5e:cc:db:10:42:64:53:81:11:c7:d7:31:1b:
         d7:7a:7c:94:98:07:4d:b2:b2:55:a7:57:a0:6a:96:b6:f8:00:
         a9:10:8d:2d:0b:0b:42:33:d0:dd:f5:45:03:15:b1:f4:32:61:
         fb:88:01:e9:e9:16:83:e1:89:3f:be:bf:52:e9:2a:90:83:8f:
         02:98:ef:94:24:5e:cc:1a:10:09:53:10:80:23:01:a9:54:10:
         5b:02:d9:5c:13:cd:50:dd:1a:0a:ce:cd:ab:83:57:3d:b5:08:
         d1:66:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 14:16:23 2024 by rpki-client on console-fra.rpki-client.org