Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/34352e37302e3131332e302f32342d3234203d3e20323637353631.roa
File:                     34352e37302e3131332e302f32342d3234203d3e20323637353631.roa (raw, json)
Hash identifier:          VxcjlJTlNzZgTtkvggxmuH4yNiV6MyBmiDEZswcnwRo=
Subject key identifier:   95:34:1B:DC:32:EA:D6:8C:54:27:28:08:AC:0F:09:1B:A8:B2:2F:8D
Certificate issuer:       /CN=95E83C1EC29F8251CA035F581B61B808604EC59D
Certificate serial:       27CC3298060E211E2567AAE393A4CD64A9908C14
Authority key identifier: 95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/34352e37302e3131332e302f32342d3234203d3e20323637353631.roa
Signing time:             Thu 06 Mar 2025 13:59:40 +0000
ROA not before:           Thu 06 Mar 2025 13:54:40 +0000
ROA not after:            Thu 05 Mar 2026 13:59:40 +0000
asID:                     267561
IP address blocks:        45.70.113.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 27 Mar 2025 13:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cc:32:98:06:0e:21:1e:25:67:aa:e3:93:a4:cd:64:a9:90:8c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E83C1EC29F8251CA035F581B61B808604EC59D
        Validity
            Not Before: Mar  6 13:54:40 2025 GMT
            Not After : Mar  5 13:59:40 2026 GMT
        Subject: CN=95341BDC32EAD68C54272808AC0F091BA8B22F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:40:ca:d7:fb:ac:bc:85:b4:7a:b2:59:98:67:
                    16:4d:ee:de:ec:2a:59:12:fd:62:c8:7d:3a:06:36:
                    c5:54:2b:b5:8b:77:7d:95:48:3a:33:7b:e3:60:01:
                    34:44:e6:02:10:a2:23:8d:18:d4:ac:dd:80:b8:f6:
                    87:67:42:93:00:84:b6:7c:dd:ed:f4:34:54:16:0e:
                    19:2f:42:04:45:d0:e3:1f:ce:1e:f5:11:31:37:46:
                    a9:ac:06:65:06:15:c5:07:0e:a0:9c:81:ae:5b:8e:
                    4a:dd:05:02:22:b7:02:51:50:e4:1b:1b:f9:55:ab:
                    08:42:eb:a3:06:5f:ad:6c:2a:0c:65:3e:16:4d:2d:
                    4e:99:bc:35:c7:d2:0b:a8:51:ad:d1:e4:4e:0e:22:
                    69:0b:f0:fc:eb:f3:2b:59:78:46:95:e7:b8:79:b9:
                    2e:aa:31:03:1e:ca:16:a8:8d:42:09:7f:d3:3c:ee:
                    8b:54:9a:28:7b:04:81:1c:eb:42:0f:7b:da:e8:8f:
                    6a:05:05:0e:2e:71:29:60:a3:e3:e3:4b:04:7a:b2:
                    b7:46:d4:82:03:ca:3f:02:58:10:64:7a:01:fa:94:
                    b7:64:e2:a5:20:db:d0:7b:9c:42:46:e1:ed:73:c0:
                    ae:af:66:7c:06:88:91:93:68:27:71:f7:ec:37:a4:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:1B:DC:32:EA:D6:8C:54:27:28:08:AC:0F:09:1B:A8:B2:2F:8D
            X509v3 Authority Key Identifier:
                keyid:95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/34352e37302e3131332e302f32342d3234203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d0:46:44:9c:84:e4:0f:fb:10:3e:b7:29:fd:09:84:76:6b:
         1a:89:e0:02:5e:f3:0b:13:b2:29:3d:62:89:e6:58:5d:fe:c9:
         7d:d6:ed:94:3d:6c:c5:21:33:93:6c:a9:47:ee:8d:3c:2c:d6:
         d6:88:48:2a:b5:a6:c5:84:9c:ff:f1:ed:bf:01:1d:d2:24:b6:
         92:78:9b:14:65:ef:49:37:88:3d:9d:d4:1a:c1:65:72:18:a2:
         2c:3f:35:93:79:65:03:c3:83:e2:8f:e8:5f:aa:e7:6f:98:c2:
         ee:d6:05:cf:75:62:41:f5:6b:32:31:ff:1c:7c:cc:97:ba:fb:
         6c:4d:e9:53:24:23:ac:14:95:a2:7c:90:5d:0e:bc:96:6c:e2:
         de:9a:3f:1b:4b:ef:17:e7:24:d6:69:8b:53:1e:0e:d3:99:44:
         3e:dc:5b:6b:07:44:e4:8a:74:2a:7f:8e:94:3b:a2:e6:4b:6a:
         0b:de:23:51:25:6e:7f:e2:96:08:e9:ec:38:a6:5e:42:4f:df:
         95:50:cb:56:4d:97:ce:e9:2a:42:a2:bc:a7:ff:1b:42:ee:6b:
         3e:2d:a9:3f:c7:16:15:66:1a:39:cb:0d:63:b7:14:1e:c3:59:
         65:4b:5c:b7:ed:4c:51:f1:19:c6:2a:ae:0a:4e:67:3f:85:bb:
         50:6d:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:13:57 2025 by rpki-client