Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232392e302f32342d3234203d3e20323637313335.roa
File:                     34352e3232392e3232392e302f32342d3234203d3e20323637313335.roa (raw, json)
Hash identifier:          GdyQMEq7yfc7BNGQQIlacsQbLidADOy79Gbr5VFwOP8=
Subject key identifier:   8D:8F:CA:88:7F:96:D4:9B:63:EF:11:56:06:02:70:5A:CE:CA:E9:89
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       19C688EF48E6A4D60B37261BCAF0B45C6A8224B0
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232392e302f32342d3234203d3e20323637313335.roa
Signing time:             Mon 20 Jan 2025 13:29:07 +0000
ROA not before:           Mon 20 Jan 2025 13:24:07 +0000
ROA not after:            Mon 19 Jan 2026 13:29:07 +0000
asID:                     267135
IP address blocks:        45.229.229.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 01 Mar 2025 12:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c6:88:ef:48:e6:a4:d6:0b:37:26:1b:ca:f0:b4:5c:6a:82:24:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Jan 20 13:24:07 2025 GMT
            Not After : Jan 19 13:29:07 2026 GMT
        Subject: CN=8D8FCA887F96D49B63EF11560602705ACECAE989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:82:81:04:74:99:51:b2:26:a6:bb:d5:b3:
                    65:3d:5a:28:95:a1:ca:0e:cf:c9:f5:01:4f:6f:47:
                    76:85:00:da:cb:93:fe:e9:32:3b:26:9d:04:f6:2d:
                    f1:7b:9a:a4:98:d9:14:ee:9f:60:27:be:45:19:14:
                    0b:f2:e9:6f:e8:b7:33:a3:58:aa:8a:66:4c:a3:f4:
                    b0:d5:53:41:45:a1:f6:08:f2:37:76:4f:f9:6a:5b:
                    d1:6c:5c:24:ff:41:1e:ac:59:f4:ca:14:b3:16:16:
                    51:15:90:57:1f:3c:2f:0d:4d:2b:be:48:d4:1e:40:
                    e5:1a:a0:b0:74:3a:37:02:2b:60:93:eb:40:cc:be:
                    29:f4:42:06:a7:3d:b6:29:58:ce:7f:b7:b5:46:f2:
                    ee:ab:74:db:92:ad:f1:84:9a:8e:01:58:a6:38:6e:
                    91:8b:45:1a:5f:ad:21:e0:a7:8b:4e:e1:22:88:9a:
                    30:2b:b2:28:31:72:6e:78:1c:9f:8e:73:d2:ac:0f:
                    39:96:4c:e3:db:97:85:5a:06:dc:dd:76:95:44:04:
                    9b:b1:c7:50:02:00:d3:df:a7:66:44:48:d0:42:31:
                    cc:0b:84:c8:2d:1c:8a:32:25:e4:bd:6f:27:24:e6:
                    ed:14:fb:89:bd:05:98:7a:fa:e0:7b:9a:09:c8:11:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8F:CA:88:7F:96:D4:9B:63:EF:11:56:06:02:70:5A:CE:CA:E9:89
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232392e302f32342d3234203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:62:51:15:df:84:32:63:db:21:c4:e5:a9:55:a6:18:b4:27:
         ec:1d:44:ec:db:6f:36:7a:c3:54:05:1f:db:2d:43:2f:ec:06:
         18:d3:ec:ee:16:43:c0:01:c6:0d:82:4c:82:fd:e4:62:ef:1a:
         b8:3d:21:7d:ca:30:60:0d:33:63:f5:49:b8:ed:29:fe:7c:18:
         5a:fd:12:d5:4f:1d:1d:ff:84:57:1a:57:ee:de:21:8f:9a:65:
         58:49:af:64:a5:27:e8:94:ac:86:9a:6e:a0:77:b1:a4:be:9a:
         4d:94:32:82:e1:3c:db:f9:c5:c8:3d:4c:8c:98:32:f4:b6:9f:
         eb:92:aa:f5:b2:46:3d:8c:19:c7:8a:d9:8a:31:bc:01:9c:52:
         98:fa:f2:2e:4c:e4:e3:95:45:0a:5f:28:86:12:fb:b1:3b:de:
         25:c8:cb:42:c5:7b:53:8b:f4:46:47:fa:9f:93:b4:e1:ae:22:
         df:cf:3f:94:c4:c2:15:ca:03:ff:ed:f6:05:bc:8e:8f:92:dc:
         ee:92:84:50:d1:07:24:60:68:00:1b:95:22:ad:76:bf:d7:52:
         6b:b5:e5:93:56:10:5b:4a:f9:d4:83:ca:52:bd:65:68:0f:66:
         b9:89:67:bd:42:c9:2f:1e:da:04:be:7b:d4:fc:0f:4f:f4:66:
         8c:b9:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:38:59 2025 by rpki-client