Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32342d3234203d3e203631363231.roa
File:                     34352e3233352e3136322e302f32342d3234203d3e203631363231.roa (raw, json)
Hash identifier:          oilUfgtk2WDNFN0bAnwA5/pSp70lBN/VDaJ1NijyT2U=
Subject key identifier:   A6:BA:0E:20:56:87:45:7B:CB:30:63:A0:33:5C:C3:9D:A3:0F:6E:FB
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       6177B363940AFD521147ED07FC86937F0BC838C1
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32342d3234203d3e203631363231.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     61621
IP address blocks:        45.235.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 13:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:77:b3:63:94:0a:fd:52:11:47:ed:07:fc:86:93:7f:0b:c8:38:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=A6BA0E205687457BCB3063A0335CC39DA30F6EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:db:3b:51:a1:87:68:6f:7b:07:e8:e6:e9:6b:
                    50:45:9a:86:97:0b:a7:87:02:4d:7f:6e:58:cb:10:
                    fd:22:86:a9:5e:99:50:87:74:55:86:51:cb:81:6e:
                    d0:91:8e:5d:fe:d1:eb:ee:9f:e3:b6:12:2b:cb:8b:
                    7f:b3:b6:7c:1c:e3:00:93:1c:3f:5e:0c:aa:0a:47:
                    cb:a7:86:d5:e0:89:31:33:ee:3e:91:24:04:63:96:
                    d9:86:fd:bb:59:8e:a3:d5:44:f5:f2:4c:e4:63:5f:
                    72:64:94:40:9f:26:1d:d5:23:8f:e9:73:f0:53:32:
                    c1:b9:dc:8a:8e:38:85:5b:97:96:19:33:a4:c8:a7:
                    cb:db:4a:fb:5c:cd:63:68:9c:82:12:e9:39:44:16:
                    02:f6:1b:59:2c:a6:c8:ee:32:60:95:01:bd:30:cc:
                    7d:39:e6:b2:0f:d5:d7:54:9c:4a:1d:55:5c:93:7b:
                    02:02:a6:04:0e:85:8a:27:be:09:d5:36:c5:83:22:
                    26:10:b1:b1:4b:56:3d:8b:2b:79:13:18:19:24:0a:
                    c6:6b:a3:31:bf:96:45:2c:47:c6:d5:4b:7c:e3:52:
                    d6:fa:e9:27:7f:65:5e:15:34:d2:92:90:a1:9e:10:
                    4a:51:d0:dc:5c:9b:ed:76:36:b1:e8:80:35:ad:47:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BA:0E:20:56:87:45:7B:CB:30:63:A0:33:5C:C3:9D:A3:0F:6E:FB
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136322e302f32342d3234203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:b9:a1:c0:58:81:95:1b:b5:d8:6b:d9:c0:c8:a6:02:04:
         87:ae:f7:16:3a:75:cd:9a:82:da:fc:6f:5c:a3:09:c6:6c:f6:
         68:a9:f6:3d:29:d4:37:a4:8f:a3:dd:e1:92:20:1a:d6:8d:32:
         73:02:ee:cb:ac:5a:5c:e0:66:03:a0:6a:24:70:32:cd:ba:66:
         82:c8:23:83:20:9c:71:be:32:be:b7:5d:da:e8:4f:b8:3c:f8:
         69:80:63:df:ff:d6:17:2a:0a:d4:05:2f:12:eb:4e:2e:8f:56:
         d2:dd:89:f0:87:0a:ad:d2:57:1f:66:fe:10:e7:d5:6e:34:59:
         5b:e2:f8:ac:39:97:7c:1a:57:f5:10:b7:ff:77:ce:a2:d9:57:
         49:6b:7c:6a:de:1c:57:f2:00:3b:50:de:c3:75:e7:3e:53:f5:
         e8:77:53:8f:d4:66:ca:57:10:2e:3a:9d:40:03:11:80:51:0a:
         be:0d:d4:34:43:21:07:b7:4f:e7:b0:57:37:14:1c:1d:74:19:
         9f:27:05:71:25:89:f7:f5:2f:06:6d:42:e6:ef:50:52:10:c5:
         f7:6c:b6:ff:b1:c6:33:fc:82:38:15:f6:86:52:b9:3f:4c:a4:
         2a:e1:fb:5a:c9:75:79:56:bf:b0:78:41:27:fb:3e:8d:56:1b:
         91:92:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:21 2024 by rpki-client on console-ams.rpki-client.org