Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134352e302f32342d3234203d3e20323632373733.roa
File:                     34352e3232382e3134352e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          zr8wc7fyQPBWg4bIFLvSxaidJWqHY7BPeCyrgPPCqkk=
Subject key identifier:   B6:D3:45:3F:8A:35:61:59:88:CA:FD:5A:DE:84:5B:64:0A:BB:C8:0F
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       5E709DAD7AD960D60F015DADC60971229B4453C5
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134352e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:27 +0000
ROA not before:           Wed 14 Aug 2024 12:03:27 +0000
ROA not after:            Wed 13 Aug 2025 12:08:27 +0000
asID:                     262773
IP address blocks:        45.228.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:70:9d:ad:7a:d9:60:d6:0f:01:5d:ad:c6:09:71:22:9b:44:53:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:27 2024 GMT
            Not After : Aug 13 12:08:27 2025 GMT
        Subject: CN=B6D3453F8A35615988CAFD5ADE845B640ABBC80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:e2:d2:d7:be:a4:59:a3:db:3c:c9:79:71:
                    dd:eb:75:14:5b:14:d0:6d:cc:e3:86:71:29:17:ce:
                    aa:cb:af:2f:bb:a3:bd:d3:58:c1:85:6c:13:1e:df:
                    3e:5f:47:20:33:80:9f:62:e2:1f:bc:d8:88:d9:6d:
                    ee:d4:6f:98:e3:f5:94:46:1b:bd:85:8e:c5:28:2a:
                    d1:73:c5:83:7d:44:6c:a9:70:ee:19:f8:6d:a5:bb:
                    1b:15:b8:8e:f7:b9:72:42:c2:04:aa:52:7d:be:d2:
                    9b:29:59:eb:b4:88:38:ca:80:24:bd:5d:02:cd:24:
                    7b:a5:c5:cd:3b:f8:1e:f3:d6:0c:1c:5f:dd:e1:fa:
                    fe:54:61:5f:4c:30:a0:c2:dc:0d:00:ea:0a:ef:26:
                    2b:55:d5:08:90:1a:88:cb:90:5c:2a:46:55:de:0d:
                    c6:f0:ff:36:b6:5f:22:82:b5:18:26:19:a4:06:91:
                    01:8c:d2:9e:ae:73:56:e2:83:cf:3d:09:91:2d:58:
                    61:bf:51:0b:63:0c:37:81:92:4d:75:26:50:9b:01:
                    61:2f:58:72:cc:cf:e6:1f:0a:62:fa:de:1e:0a:fb:
                    da:ea:f8:3b:70:d9:4b:40:7e:0f:c1:20:f4:72:6a:
                    ee:ac:ec:2c:8b:85:99:c2:da:78:43:72:e8:20:55:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D3:45:3F:8A:35:61:59:88:CA:FD:5A:DE:84:5B:64:0A:BB:C8:0F
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134352e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a1:8e:81:e8:af:96:17:3e:34:31:ad:1f:e2:9e:9d:ec:f7:
         3e:a4:24:a6:f5:7f:1d:6d:87:9c:b4:ad:0d:af:20:46:eb:c0:
         80:5f:52:bd:56:f6:4b:4b:b4:c0:8b:4c:30:2b:7e:e4:15:7e:
         85:e9:f9:a0:13:f6:d1:f0:8d:87:f6:7e:cd:66:a5:91:3f:af:
         9e:1d:7b:48:8b:40:ff:ce:56:85:75:69:5d:54:87:d6:45:e6:
         05:29:73:e8:ca:29:0c:e8:26:cc:5f:13:8b:4c:e3:02:7f:74:
         88:5f:16:77:06:2e:c0:36:a8:53:8d:cf:42:6d:55:9d:b5:7c:
         5e:17:70:78:d2:aa:ac:0b:0b:3f:09:55:fb:6f:ec:7e:f5:ce:
         bd:b6:c7:bc:29:71:d7:9f:38:75:ff:e1:c3:c9:5a:92:4b:7e:
         6a:44:d2:42:2f:14:d3:ef:e9:68:13:b1:69:05:52:5b:5f:a6:
         1a:ac:f6:16:1b:fa:f4:f9:8b:8b:0a:f3:a0:4c:72:83:74:dc:
         64:1b:49:a6:3e:99:6f:01:89:ae:8f:10:57:27:40:3b:14:f7:
         ab:4f:dc:5c:06:72:f0:a2:a1:38:ad:03:5c:42:75:ae:14:e6:
         3d:42:35:ed:c3:95:b8:e3:d5:39:79:ae:46:e3:7b:82:21:28:
         e5:94:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org