Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3137352e3231362e302f32322d3234203d3e20323632373733.roa
File:                     34352e3137352e3231362e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          ayTisG20tvfsC/dg0Ck4C/SkZIhbPUtu0tXwvt6Nroo=
Subject key identifier:   99:40:17:54:1D:DD:A6:25:F7:A7:4A:19:08:57:ED:57:8E:FA:5C:43
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       5ADB643B98735FEB35F81A1FF7C2F8AE83B4774F
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3137352e3231362e302f32322d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:22 +0000
ROA not before:           Wed 14 Aug 2024 12:03:22 +0000
ROA not after:            Wed 13 Aug 2025 12:08:22 +0000
asID:                     262773
IP address blocks:        45.175.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:db:64:3b:98:73:5f:eb:35:f8:1a:1f:f7:c2:f8:ae:83:b4:77:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:22 2024 GMT
            Not After : Aug 13 12:08:22 2025 GMT
        Subject: CN=994017541DDDA625F7A74A190857ED578EFA5C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:e3:6c:3d:fc:d9:71:23:07:f1:11:66:95:
                    fc:ce:a2:88:16:40:89:81:0c:ef:3a:cc:3e:57:2b:
                    b4:08:c3:e2:61:41:18:51:99:f7:bd:7e:21:aa:74:
                    86:e8:8a:a7:34:2a:44:32:81:27:25:fe:a6:17:18:
                    6d:55:a5:5a:c8:a2:54:85:e1:44:e7:ad:bf:57:75:
                    3f:cc:50:df:01:4a:c4:a7:4c:6d:9a:df:4c:ca:ea:
                    be:56:d0:c3:a6:e7:27:95:c5:42:6b:84:43:b7:d6:
                    7f:f3:95:29:42:6a:8e:39:86:1f:de:12:e7:91:4c:
                    a1:c2:09:b5:3f:eb:06:7f:58:48:be:4a:4a:65:62:
                    2b:7b:3c:ca:5f:94:fa:d6:f4:8c:89:74:7b:cb:c8:
                    13:f6:55:79:11:af:f6:c7:a8:05:06:f7:1a:cb:ab:
                    5b:0b:2b:63:0f:d1:30:27:58:c4:09:ea:a8:2e:c5:
                    8d:cc:9a:32:37:28:10:f6:2e:b7:3e:b7:ea:1a:3f:
                    d9:3d:d7:66:f2:07:91:36:6c:13:f9:4f:6c:07:11:
                    3d:83:52:3a:29:75:eb:05:31:f5:16:ba:a7:14:a1:
                    a5:e3:25:df:bb:4f:59:56:fd:d7:fb:12:24:9e:9b:
                    49:3a:ba:4b:96:03:02:66:b2:94:87:f0:81:e3:e4:
                    cc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:40:17:54:1D:DD:A6:25:F7:A7:4A:19:08:57:ED:57:8E:FA:5C:43
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3137352e3231362e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:2d:7d:f4:89:da:e2:66:0d:aa:3e:cf:5a:81:bb:8c:43:03:
         9e:2f:0c:d2:07:6a:6f:9d:48:c8:11:1b:96:9f:cc:6f:9b:eb:
         81:c2:69:97:37:29:91:ca:00:67:a0:9c:d3:25:2e:9a:90:28:
         ae:b6:d3:3d:77:6e:63:f3:f8:19:f6:f0:65:ab:e1:f7:a4:dd:
         94:9c:f8:6b:a6:ad:b4:01:6a:54:f2:08:92:d7:7e:8f:2b:3d:
         a0:2e:00:09:85:59:50:80:d2:68:38:10:75:42:5f:a0:cb:42:
         a1:dc:50:72:96:ce:02:e9:51:08:51:e1:48:24:08:a5:2d:d4:
         45:65:32:af:d2:ef:ee:cf:ca:1b:90:f0:99:7b:e2:f6:55:11:
         01:24:73:19:68:cb:96:7c:af:fd:02:3f:d8:44:c4:4a:a3:6e:
         eb:16:77:6a:27:2e:31:d9:89:43:a5:6f:b6:72:7d:20:25:70:
         23:f4:7e:0e:dc:f3:ac:fa:da:2e:0b:a5:fa:e1:87:f7:62:b5:
         97:7d:bc:36:61:60:d9:a9:ac:5f:c6:ff:6d:b3:79:17:38:4a:
         51:85:b7:b8:50:81:f5:44:11:6a:45:64:09:f1:18:23:82:7b:
         fe:3a:41:55:1f:40:0b:69:e3:b3:cb:ee:15:79:fb:08:72:cb:
         c1:f5:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org