Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32332d3233203d3e20323637393333.roa
File:                     34352e3136352e3232302e302f32332d3233203d3e20323637393333.roa (raw, json)
Hash identifier:          KcnpdHPgcyFDDrqY5vd0MdLVCZp0CtfQeSkJ1SnS1Uc=
Subject key identifier:   89:0A:CD:69:4E:31:08:34:23:66:35:64:8C:92:A7:19:0A:8C:41:2B
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       1C611DFCDA6967834A3F6F88CC9F5BFE9542430B
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32332d3233203d3e20323637393333.roa
Signing time:             Tue 05 Nov 2024 20:19:34 +0000
ROA not before:           Tue 05 Nov 2024 20:14:34 +0000
ROA not after:            Tue 04 Nov 2025 20:19:34 +0000
asID:                     267933
IP address blocks:        45.165.220.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 05 Nov 2024 20:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:61:1d:fc:da:69:67:83:4a:3f:6f:88:cc:9f:5b:fe:95:42:43:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Nov  5 20:14:34 2024 GMT
            Not After : Nov  4 20:19:34 2025 GMT
        Subject: CN=890ACD694E310834236635648C92A7190A8C412B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:75:38:4e:0b:e6:fe:3d:ea:92:48:92:c0:10:
                    fd:96:3c:78:38:ee:19:ae:24:4e:1b:01:6c:6f:14:
                    70:4a:0e:8f:4a:e3:fe:9c:32:7d:d7:de:85:19:a8:
                    4e:62:a9:c7:a0:49:63:da:66:5b:07:f0:ff:30:a0:
                    84:57:72:f4:5f:ef:ee:33:fa:f9:31:c7:86:53:f6:
                    34:00:d8:2d:d4:af:1f:b3:6e:b1:ec:3a:89:26:83:
                    94:3e:ea:e0:c4:53:e3:77:e1:e3:24:de:c4:c5:e0:
                    d4:09:ac:1b:cd:59:a6:22:aa:65:75:3d:58:1e:c6:
                    7f:80:1d:b5:a2:9b:22:6b:99:24:17:d0:c0:45:ca:
                    d2:39:1e:bc:4f:32:c8:1e:10:64:58:8f:bf:38:13:
                    0c:6f:88:20:01:90:83:16:34:e8:6f:ea:6d:3f:54:
                    2f:5f:e4:50:6d:8f:d7:e1:89:8a:df:cc:0f:cd:4b:
                    b9:cc:f2:9f:25:61:68:8e:e8:93:65:08:45:db:5d:
                    e1:94:a6:61:ec:58:47:2d:0a:83:37:e1:ef:2e:2b:
                    67:10:fa:46:31:b6:8d:90:4b:5e:51:0e:cc:3f:f2:
                    e4:fc:e9:f6:80:3f:11:a3:20:f0:1b:f8:e6:bd:e4:
                    cf:bd:cd:2a:c1:f1:c3:25:b8:1d:a6:45:9c:d8:43:
                    44:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0A:CD:69:4E:31:08:34:23:66:35:64:8C:92:A7:19:0A:8C:41:2B
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32332d3233203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:16:78:fb:ea:4f:02:86:ad:96:ad:a7:9d:0b:0d:6f:0a:5f:
         3c:b3:ab:b3:bd:3f:ff:d7:cb:bd:85:de:21:44:21:a4:e2:c5:
         07:ff:61:57:03:f8:9a:b2:71:e8:1d:29:1e:e0:dc:0e:43:f1:
         2f:21:00:1b:8f:b0:e5:63:06:98:08:f5:03:39:7d:1b:eb:d5:
         51:dd:94:4e:16:ed:15:c1:af:78:91:e5:5d:e9:35:3e:ac:37:
         05:b5:38:87:82:6e:e9:e5:eb:f2:19:38:1b:45:3c:d0:25:46:
         ce:be:44:b6:26:67:8b:f5:b8:13:82:c3:2c:87:1b:2b:35:c4:
         05:21:6d:03:3c:5a:3a:5b:47:df:76:f0:a0:0d:89:c8:81:be:
         8e:9b:3d:5b:c3:fb:1b:d9:9c:f9:0c:21:6a:35:09:df:04:0f:
         e4:97:84:88:11:31:b0:1b:78:66:9a:7b:4d:70:ce:e9:a0:d0:
         cb:0e:64:e7:2d:67:10:35:e0:74:18:e8:88:fc:7c:5e:7f:c7:
         12:45:58:ce:b0:cd:15:ec:88:f8:b9:06:ed:7b:d7:33:fb:e6:
         72:74:fb:4d:7a:9f:60:d3:e5:43:7e:3f:8d:2b:d0:a4:9f:76:
         74:69:e2:a6:b6:9e:6f:0e:2d:c4:7b:7f:c7:1c:3e:32:01:5a:
         c9:f0:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:10:14 2025 by rpki-client