Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131362e302f32322d3232203d3e20323638383130.roa
File:                     34352e3137332e3131362e302f32322d3232203d3e20323638383130.roa (raw, json)
Hash identifier:          qR/mV4R5w/wzo3mDmqxh26a9RMuS3FgABo7oA2rQoeA=
Subject key identifier:   D0:7F:31:93:36:80:64:65:2C:DE:16:D8:B0:D4:75:A4:76:5B:BE:25
Certificate issuer:       /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Certificate serial:       33D5646EE7E9A6D0A14E9176427CE8A66CDAC207
Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131362e302f32322d3232203d3e20323638383130.roa
Signing time:             Mon 16 Dec 2024 17:18:03 +0000
ROA not before:           Mon 16 Dec 2024 17:13:03 +0000
ROA not after:            Mon 15 Dec 2025 17:18:03 +0000
asID:                     268810
IP address blocks:        45.173.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 17 Dec 2024 14:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d5:64:6e:e7:e9:a6:d0:a1:4e:91:76:42:7c:e8:a6:6c:da:c2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
        Validity
            Not Before: Dec 16 17:13:03 2024 GMT
            Not After : Dec 15 17:18:03 2025 GMT
        Subject: CN=D07F3193368064652CDE16D8B0D475A4765BBE25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:24:71:98:79:b3:f8:7d:a9:45:d7:73:55:
                    fa:97:ae:e6:3d:69:6c:e2:e9:f9:ae:32:df:23:2c:
                    3e:74:54:35:75:ae:96:97:48:36:97:84:41:ba:58:
                    29:4f:5d:20:ac:5c:f0:86:a6:bf:6f:83:1b:a9:fb:
                    5f:4d:4b:b3:ac:68:2e:80:5e:dd:fc:6a:70:35:3d:
                    a5:c2:e4:43:57:58:f6:89:dd:51:f9:7d:af:d6:ed:
                    fe:e2:9c:7c:c0:46:ac:fc:37:5a:b6:26:3d:e8:3e:
                    96:e1:29:a3:f1:12:72:61:29:12:bd:87:85:e0:bc:
                    63:4f:ac:73:8a:85:29:3f:58:b4:1a:8a:88:5b:9b:
                    ef:93:6e:6c:4b:49:ef:a3:64:b5:0f:6e:4a:9b:66:
                    99:d5:be:ff:47:4e:95:c9:2b:cc:a1:47:74:1c:4b:
                    47:11:34:ff:a3:85:69:0e:a6:d8:4a:39:26:d5:cd:
                    03:c7:ab:c2:7a:49:59:8a:fc:fb:94:df:8e:83:fb:
                    2a:34:42:ef:4e:3d:12:e0:d8:e9:ac:67:7d:8c:11:
                    24:40:cd:3f:cb:9e:9c:75:37:70:7f:8a:89:27:c8:
                    ff:53:60:30:08:5f:3e:a3:e1:06:28:58:83:2e:27:
                    ab:1d:48:46:45:64:dc:16:29:ab:07:25:df:21:23:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7F:31:93:36:80:64:65:2C:DE:16:D8:B0:D4:75:A4:76:5B:BE:25
            X509v3 Authority Key Identifier:
                keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/34352e3137332e3131362e302f32322d3232203d3e20323638383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:21:1d:81:a5:9e:8e:6c:9b:58:92:6b:2d:c8:7b:9f:fb:3e:
         8d:ba:bd:72:12:86:82:03:7d:f6:ce:9c:3e:7d:4e:63:30:d6:
         2b:57:01:9e:79:84:e7:69:81:00:68:84:2b:ec:b2:af:a1:59:
         45:e7:14:2b:d3:08:6b:08:63:aa:9c:b6:dc:e9:f2:d6:fb:40:
         09:ca:84:4d:12:1e:60:ea:d8:11:05:d7:32:65:eb:fa:1f:d3:
         e4:21:e5:7d:cd:f1:56:51:d8:25:fc:3f:5f:88:cc:12:48:52:
         45:19:8d:c0:3c:5a:69:ae:4f:d3:fb:b9:fe:97:24:f0:f6:bb:
         d9:5e:9d:73:db:ef:ea:27:09:06:98:46:c0:30:76:6b:33:d9:
         2b:43:2a:60:c6:8e:f2:12:88:90:0e:73:27:05:c1:b5:f0:65:
         84:48:3a:3f:16:39:55:4b:0c:59:b0:1b:8b:0b:ec:52:6a:ea:
         37:7f:b4:d9:f6:64:74:2d:12:80:98:25:6f:f9:77:9d:9d:54:
         18:c8:3f:ed:39:18:11:98:fa:da:a1:c3:ab:c8:10:81:a5:b8:
         dd:b1:fa:49:f7:7c:3a:47:89:f4:ed:92:45:65:0a:5d:a3:89:
         52:21:95:3a:60:6c:81:42:80:63:54:15:9c:3b:38:da:64:01:
         c8:2f:15:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM9VkbufpptChTpF2QnzopmzawgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThFMzE2NEVGQTZFQTlBQTlEODhCNzJFQUZGQTBDQ0ZF
OTNDNDRFMjAeFw0yNDEyMTYxNzEzMDNaFw0yNTEyMTUxNzE4MDNaMDMxMTAvBgNV
BAMTKEQwN0YzMTkzMzY4MDY0NjUyQ0RFMTZEOEIwRDQ3NUE0NzY1QkJFMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtCRxmHmz+H2pRddzVfqXruY9
aWzi6fmuMt8jLD50VDV1rpaXSDaXhEG6WClPXSCsXPCGpr9vgxup+19NS7OsaC6A
Xt38anA1PaXC5ENXWPaJ3VH5fa/W7f7inHzARqz8N1q2Jj3oPpbhKaPxEnJhKRK9
h4XgvGNPrHOKhSk/WLQaiohbm++TbmxLSe+jZLUPbkqbZpnVvv9HTpXJK8yhR3Qc
S0cRNP+jhWkOpthKOSbVzQPHq8J6SVmK/PuU346D+yo0Qu9OPRLg2OmsZ32MESRA
zT/Lnpx1N3B/ioknyP9TYDAIXz6j4QYoWIMuJ6sdSEZFZNwWKasHJd8hI8FbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0H8xkzaAZGUs3hbYsNR1pHZbviUwHwYDVR0j
BBgwFoAUmOMWTvpuqaqdiLcur/oMz+k8ROIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5
dDIvMC85OEUzMTY0RUZBNkVBOUFBOUQ4OEI3MkVBRkZBMENDRkU5M0M0NEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RTMxNjRFRkE2RUE5QUE5
RDg4QjcyRUFGRkEwQ0NGRTkzQzQ0RTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUNjdWd2M0U1Z6QlhFR3ZYd2ZiekFXWVBXcXIySHhONFJ6QmU3bzdaOXQyLzAv
MzQzNTJlMzEzNzMzMmUzMTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzODMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrXQwDQYJKoZIhvcNAQELBQADggEBAFYhHYGl
no5sm1iSay3Ie5/7Po26vXIShoIDffbOnD59TmMw1itXAZ55hOdpgQBohCvssq+h
WUXnFCvTCGsIY6qcttzp8tb7QAnKhE0SHmDq2BEF1zJl6/of0+Qh5X3N8VZR2CX8
P1+IzBJIUkUZjcA8WmmuT9P7uf6XJPD2u9lenXPb7+onCQaYRsAwdmsz2StDKmDG
jvISiJAOcycFwbXwZYRIOj8WOVVLDFmwG4sL7FJq6jd/tNn2ZHQtEoCYJW/5d52d
VBjIP+05GBGY+tqhw6vIEIGluN2x+kn3fDpHifTtkkVlCl2jiVIhlTpgbIFCgGNU
FZw7ONpkAcgvFbk=
-----END CERTIFICATE-----
Generated at Tue Dec 17 15:46:04 2024 by rpki-client on console.sobornost.net