Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa
File:                     34352e352e3230322e302f32332d3233203d3e20323636313036.roa (raw, json)
Hash identifier:          hquAZBgDtwsMN3uBgIlny+n7wlcd/9e6044YZXN5YgA=
Subject key identifier:   67:0D:F1:F1:D7:5F:74:21:4D:54:6B:36:0D:62:EC:B1:C9:5F:88:9F
Certificate issuer:       /CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
Certificate serial:       578C97C49CFF18613B42FA3358765A950EE9EC67
Authority key identifier: 2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa
Signing time:             Wed 18 Dec 2024 00:14:18 +0000
ROA not before:           Wed 18 Dec 2024 00:09:18 +0000
ROA not after:            Wed 17 Dec 2025 00:14:18 +0000
asID:                     266106
IP address blocks:        45.5.202.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 00:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8c:97:c4:9c:ff:18:61:3b:42:fa:33:58:76:5a:95:0e:e9:ec:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
        Validity
            Not Before: Dec 18 00:09:18 2024 GMT
            Not After : Dec 17 00:14:18 2025 GMT
        Subject: CN=670DF1F1D75F74214D546B360D62ECB1C95F889F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:bf:8f:a7:31:d8:8a:d7:34:ca:87:d9:c3:
                    18:ca:37:63:23:a7:5a:22:50:05:80:7c:3d:bd:f3:
                    97:37:0a:7f:ef:f0:45:5c:e4:0a:bc:6f:83:e9:5d:
                    bb:c3:46:b7:a0:07:a9:fd:16:2a:b9:3c:3a:36:45:
                    78:a6:c1:86:42:4d:00:30:5a:b3:2a:a4:0a:78:7d:
                    ae:0b:53:31:ab:0f:0a:0d:5c:9d:36:bc:b4:63:77:
                    a0:57:39:c4:bd:c6:47:4e:b9:90:e5:42:93:4f:70:
                    f9:51:b3:de:90:29:13:cf:92:8a:24:c6:9b:7b:35:
                    72:87:43:58:80:a1:76:0b:c5:7f:9e:a9:db:1a:cb:
                    a9:d2:2e:6a:a4:96:c9:c9:f2:9e:68:b6:57:b3:2f:
                    97:18:23:aa:6a:b9:e5:ac:4e:1b:f5:96:a4:7f:31:
                    96:79:f0:1f:8a:07:d7:48:f4:4f:23:3c:3f:c5:da:
                    c0:a1:3e:d2:cc:46:63:57:db:ec:47:b1:c0:56:5d:
                    ea:94:a5:1b:17:a2:6e:2c:df:5a:b2:89:89:11:1a:
                    f6:f9:fc:a5:2a:3b:92:79:38:d5:3a:d9:46:61:4e:
                    84:db:04:d2:91:88:d5:58:aa:69:c6:2f:6f:1b:49:
                    23:af:c6:89:db:8e:f9:2c:81:c1:69:f3:b5:e4:37:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0D:F1:F1:D7:5F:74:21:4D:54:6B:36:0D:62:EC:B1:C9:5F:88:9F
            X509v3 Authority Key Identifier:
                keyid:2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:db:c6:6a:a3:21:89:1c:b0:a1:bd:73:7e:4a:d8:50:0f:43:
         a7:3c:5d:74:93:c4:55:85:2c:38:81:52:5e:d1:fc:81:02:5e:
         52:27:9b:43:31:26:88:be:33:d4:ca:07:55:42:dc:a0:95:8e:
         b8:23:a5:81:41:72:96:b2:f5:12:ee:9e:69:04:9c:27:13:f1:
         7f:7e:25:f4:fd:03:5e:d8:e3:d3:16:ec:65:61:33:c8:f9:0b:
         e3:99:89:e5:d5:1d:07:e0:64:4d:27:40:c0:b0:bc:06:86:5d:
         7d:80:fa:0c:94:3a:5f:7c:a1:7a:56:62:ab:43:34:76:89:58:
         c3:fb:20:c6:fc:52:63:b7:04:d2:39:a3:cc:b8:5c:52:34:fa:
         a8:66:41:47:f3:58:d6:e0:34:15:c9:e2:5d:50:73:2d:cd:06:
         30:8e:91:ff:63:89:73:87:67:67:57:93:d3:53:29:e6:33:88:
         0c:7a:af:a6:b2:dc:30:36:92:67:75:c1:ab:c7:e7:48:3e:2e:
         da:b8:66:bf:78:18:85:fb:4b:e2:2a:be:4d:ae:d9:35:ab:9c:
         77:01:cc:d4:84:a7:b7:cb:50:9f:51:74:2c:7f:eb:13:9c:b6:
         71:48:15:36:96:47:95:1b:ae:aa:2d:d6:3f:1d:e1:8c:ba:bf:
         f3:b0:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:18:43 2025 by rpki-client