Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136312e302f32342d3234203d3e20323637343230.roa
File:                     34352e3233352e3136312e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          t4e7sExAxKnL4lPQaoDf0EYRT6/Mk1y6hRw66RlBjO4=
Subject key identifier:   FB:46:82:40:1A:C9:DB:D6:88:4D:8E:77:10:39:14:1B:C6:8A:88:C9
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       6244E2AF65779DCC430288933B49A1ADD853CA51
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136312e302f32342d3234203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:38 +0000
ROA not before:           Fri 05 Apr 2024 01:55:38 +0000
ROA not after:            Fri 04 Apr 2025 02:00:38 +0000
asID:                     267420
IP address blocks:        45.235.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:44:e2:af:65:77:9d:cc:43:02:88:93:3b:49:a1:ad:d8:53:ca:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:38 2024 GMT
            Not After : Apr  4 02:00:38 2025 GMT
        Subject: CN=FB4682401AC9DBD6884D8E771039141BC68A88C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:75:38:4a:69:4d:28:8d:3f:c8:3c:e1:d0:13:
                    17:5e:08:75:c7:01:ce:3f:d9:c9:0b:f6:24:0c:08:
                    a8:fa:56:d0:3d:fb:79:3e:77:44:3c:e0:7c:f6:b9:
                    15:0f:d6:de:96:ca:a9:ea:18:c2:cd:ba:c4:d2:d3:
                    77:31:59:9a:2e:5a:81:35:cd:d4:b7:1b:7f:82:c2:
                    bb:e2:00:69:13:ad:e1:de:47:b8:ee:b5:78:e9:15:
                    5f:97:3c:3f:75:1d:eb:9c:ad:64:db:ca:3c:9a:1d:
                    56:d5:27:9f:70:00:65:cd:14:2c:ab:16:5e:76:7c:
                    dd:bc:53:e0:12:d1:64:98:24:1e:6d:a0:29:d7:1e:
                    17:d6:43:c5:13:03:39:38:18:0e:70:71:1a:b8:2f:
                    8e:88:bb:c7:67:ce:07:38:72:9c:ce:f1:e3:0c:59:
                    75:9d:01:32:c3:69:34:1b:ba:46:63:59:06:bf:36:
                    02:f7:5a:89:21:e8:38:63:fa:10:c6:46:bc:7d:02:
                    3b:0c:3f:6f:b2:59:22:9f:11:7c:99:40:6a:e1:47:
                    d1:f0:7c:eb:c7:ac:0c:75:81:aa:2e:d9:fb:52:48:
                    22:4f:b9:cb:ea:9c:0b:39:f2:1c:b4:0b:2e:d9:a7:
                    4c:85:80:a9:53:2f:ca:26:2a:9b:49:cd:13:39:cf:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:46:82:40:1A:C9:DB:D6:88:4D:8E:77:10:39:14:1B:C6:8A:88:C9
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/34352e3233352e3136312e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:74:84:ff:4d:45:2e:cb:e6:bf:1e:41:ff:51:e1:b2:08:d6:
         cb:89:a9:67:ba:52:fb:c9:2c:54:51:c8:04:ce:83:c8:40:f7:
         39:01:c5:29:ae:37:fd:ca:dc:09:d4:41:70:9f:40:47:11:cf:
         aa:a2:9c:3e:70:66:5b:93:17:28:9f:81:e0:15:03:9c:86:e3:
         67:a0:2d:be:0a:c2:45:a6:e6:0d:fd:36:e0:84:7d:a1:ed:e6:
         32:0d:43:42:21:ad:31:74:66:88:1a:dc:8c:17:84:b5:b4:26:
         c9:8c:90:f7:45:01:91:d4:3e:a2:41:63:3e:e9:a7:c4:bf:77:
         65:d4:15:31:3a:d8:c9:3d:55:1a:5a:a4:41:66:d5:ab:e7:73:
         62:32:c7:33:25:29:e8:d0:45:da:30:b5:e4:c1:99:0a:22:05:
         d2:b5:14:84:cb:f8:3d:74:42:b0:8d:30:d8:61:dc:0c:df:58:
         ed:15:d5:f2:08:6c:e5:6d:37:49:06:22:2c:08:4a:d1:f4:9a:
         1b:2e:48:05:c3:49:e8:6d:af:ff:75:76:9c:3a:1c:ff:42:a6:
         42:0b:0d:cd:93:db:02:4e:49:14:80:ae:46:e2:95:49:98:76:
         f7:3a:d0:e9:8d:02:0e:ee:6c:c1:a3:12:4a:c4:42:21:96:40:
         51:7c:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org