Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134362e302f32342d3234203d3e20323632373733.roa
File:                     34352e3232382e3134362e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          3aig4ZWyjdhrWiP5RfW+Ef9ga2D5kC7WRIDL7m59FcI=
Subject key identifier:   26:A0:3F:66:5A:EC:BC:C6:02:AF:0B:72:F7:F9:B4:B6:C7:5B:C5:68
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       6BAF4DD46AD327C69B359F7B0F62B99849D0DFBC
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134362e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:22 +0000
ROA not before:           Wed 14 Aug 2024 12:03:22 +0000
ROA not after:            Wed 13 Aug 2025 12:08:22 +0000
asID:                     262773
IP address blocks:        45.228.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:af:4d:d4:6a:d3:27:c6:9b:35:9f:7b:0f:62:b9:98:49:d0:df:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:22 2024 GMT
            Not After : Aug 13 12:08:22 2025 GMT
        Subject: CN=26A03F665AECBCC602AF0B72F7F9B4B6C75BC568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:fb:c4:9f:37:6d:d4:da:19:63:41:fb:67:
                    da:79:20:28:96:b7:76:d3:20:92:89:0f:9e:3f:ec:
                    0b:35:aa:59:d2:05:aa:f6:ac:44:8d:24:a7:b7:e8:
                    6a:9b:29:50:b7:54:61:59:4f:2e:b9:c6:f7:08:49:
                    66:fd:16:1a:8f:e9:a2:11:a9:3c:0f:e4:f0:a2:6a:
                    27:be:3a:96:d0:b8:00:ac:ba:2d:4b:a4:0a:c1:ca:
                    ff:d9:b5:72:55:2a:e6:df:0e:0d:07:1f:05:d4:a8:
                    53:83:45:07:77:1f:52:4d:41:ac:03:8b:76:32:49:
                    3c:29:50:97:63:a7:5a:b3:15:46:ce:ca:97:12:f1:
                    00:62:5d:5f:3c:c4:fe:8a:c2:a1:40:03:83:37:fd:
                    a1:5b:71:11:75:f7:c5:62:ab:c3:63:b9:45:cc:74:
                    ad:c9:c2:d5:24:50:35:2f:3a:68:c6:1e:d4:b6:86:
                    a1:05:2f:6c:19:75:0c:2e:db:ca:53:91:be:99:30:
                    5b:ca:de:f9:71:ee:0e:09:44:78:86:00:04:95:47:
                    4d:26:51:0b:49:b4:46:3f:96:e0:21:57:28:92:a2:
                    c6:94:1f:5a:f4:96:52:34:54:a2:07:6e:45:cd:63:
                    ad:f2:46:6b:6c:1c:35:d6:d0:c9:ea:ef:8a:23:eb:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:3F:66:5A:EC:BC:C6:02:AF:0B:72:F7:F9:B4:B6:C7:5B:C5:68
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134362e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:1a:e8:4d:a4:e7:f2:81:17:14:a6:07:b8:4b:12:d6:c0:
         5d:7a:f7:84:63:f7:e5:86:ce:38:ae:d4:f9:44:03:16:e7:ad:
         59:a2:6a:7c:79:69:42:fb:11:d8:ad:4f:b2:1b:9f:61:ae:a3:
         46:67:c4:4a:99:7f:9d:d6:55:14:92:e7:a0:e5:31:cc:e5:68:
         5d:ed:ee:90:2a:9a:fa:36:0c:d2:9d:f2:58:72:de:48:89:bf:
         6b:8c:a2:03:2c:a4:37:8f:c0:52:64:cc:3b:a5:33:83:32:5a:
         24:d5:92:f0:51:50:3a:57:bd:19:a9:4a:3d:17:96:aa:5c:76:
         86:6b:33:0c:4f:99:0a:6c:87:77:c3:a2:83:25:0f:51:67:4a:
         47:ee:e4:f0:0a:52:39:8e:2c:97:75:2f:67:5a:3c:e3:69:58:
         9f:c1:71:39:c9:f8:8b:15:60:07:33:ea:3e:bd:ab:00:71:53:
         10:01:1d:c2:ae:e0:51:05:9f:30:97:35:f4:f1:16:eb:d4:ca:
         05:c3:42:36:c5:02:a7:d9:11:02:bc:15:c3:6c:4d:78:81:3f:
         81:a9:f8:17:d4:e4:c4:50:a4:f8:64:73:24:ad:c2:33:a7:d3:
         b3:3b:61:89:e4:de:44:35:e4:53:72:d6:81:1b:f6:f4:7c:b7:
         46:21:8d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org