Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32342d3234203d3e20323632373733.roa
File:                     34352e3232382e3134342e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          yPIThQq81CbQ04LaPzsgWlZC8bvARx6CtVJebP3Str4=
Subject key identifier:   AE:CA:A3:6F:D9:CF:72:2F:2E:8F:DB:52:43:0C:B2:95:A8:B0:53:E1
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       0CBE960CD5813B753BF47AB43BBDC674E1CFEC05
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:26 +0000
ROA not before:           Wed 14 Aug 2024 12:03:26 +0000
ROA not after:            Wed 13 Aug 2025 12:08:26 +0000
asID:                     262773
IP address blocks:        45.228.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:be:96:0c:d5:81:3b:75:3b:f4:7a:b4:3b:bd:c6:74:e1:cf:ec:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:26 2024 GMT
            Not After : Aug 13 12:08:26 2025 GMT
        Subject: CN=AECAA36FD9CF722F2E8FDB52430CB295A8B053E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:fc:e1:07:1a:e4:04:31:61:d1:e8:c1:5f:
                    e0:e1:14:2a:77:42:74:b1:87:0c:65:f4:1b:2a:ab:
                    a0:b5:fc:b0:cf:3a:e2:b1:07:4d:09:c6:38:36:fb:
                    4d:f0:c3:e6:f1:0c:81:30:29:79:69:00:83:50:0a:
                    6e:86:ea:12:61:b9:9e:53:25:99:70:7e:01:d1:8f:
                    8c:ec:d3:4f:41:60:27:ff:9e:29:94:fb:a9:4d:cf:
                    35:cf:19:2d:30:b8:fa:2b:78:27:1f:dd:54:20:e4:
                    e2:32:60:a5:15:5e:ce:a2:55:9f:de:bc:36:85:5c:
                    e5:fa:89:af:d4:9c:95:37:a7:f0:4e:f6:64:06:08:
                    b9:6b:05:2d:51:ba:f6:ec:33:15:4c:9f:ff:75:05:
                    aa:b1:e3:a4:3b:68:e9:2b:93:91:6a:b6:a6:7e:96:
                    d6:b6:a4:e1:e7:d5:f9:bf:4c:d0:48:b3:a1:e8:aa:
                    8d:78:53:6c:91:bf:f9:61:d5:da:a7:6f:9d:de:98:
                    47:53:87:68:a1:a4:3d:bb:2a:b3:7d:65:b0:7c:01:
                    5c:f9:13:3e:93:a9:54:1c:f2:68:c0:e4:0d:c6:af:
                    97:5b:95:40:76:2c:2d:b1:e9:c4:42:ba:04:aa:03:
                    8b:83:ea:b5:f0:bb:09:4f:e7:64:4b:61:d5:94:db:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CA:A3:6F:D9:CF:72:2F:2E:8F:DB:52:43:0C:B2:95:A8:B0:53:E1
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:82:73:cd:32:41:99:c1:eb:02:4d:7d:f1:0a:13:27:c9:
         a5:1b:5f:69:1b:4b:3a:68:ce:30:b0:93:34:7a:70:76:d0:dc:
         90:7d:bc:be:ec:3f:9c:13:fa:89:42:d8:b4:a7:a5:d8:64:8d:
         0a:1f:50:f8:48:62:44:53:25:c6:b5:2d:a1:b2:4a:b1:56:d8:
         7a:51:09:53:e5:bd:10:90:fc:98:f8:e3:04:c9:8f:f1:26:1e:
         76:05:f2:f9:1a:b2:8e:f7:bf:3d:5c:9e:11:20:d7:db:95:11:
         d9:70:3f:39:23:4d:8b:77:c5:43:28:fa:af:48:68:33:fb:1a:
         75:3b:49:f6:ee:16:32:b6:4e:21:57:97:2c:11:49:eb:55:9a:
         19:2f:a5:58:0c:11:88:92:5f:3b:23:48:ce:99:d8:80:b8:4d:
         9a:bd:dc:b9:b4:41:ea:8d:f7:26:53:df:2f:94:27:22:90:3e:
         7a:3c:cb:5b:30:98:22:b2:b9:4c:48:4a:ad:62:6f:13:1d:fe:
         b0:33:e6:80:bb:9b:83:27:af:ee:f9:57:ae:4e:f4:d7:75:ad:
         27:c2:a1:b5:b9:79:57:18:c1:06:41:9b:5e:24:a7:bf:e7:b3:
         fe:7a:8e:65:73:b1:10:2c:a0:46:b4:9a:1f:5f:75:b6:d0:71:
         cd:c2:c9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org