Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3234203d3e20323634323730.roa
File:                     34352e3233342e32342e302f32322d3234203d3e20323634323730.roa (raw, json)
Hash identifier:          NPaWahcF5dk/Ctpeav5QLDPXA9Rr3cdXiY+aUTDwIOo=
Subject key identifier:   23:4A:AA:6E:72:3D:44:35:4A:28:DC:9C:14:56:FA:48:20:79:04:C9
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       6527BF29118CC4BE03A3F8225BBBD52CD0CE885F
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3234203d3e20323634323730.roa
Signing time:             Thu 04 Apr 2024 07:49:45 +0000
ROA not before:           Thu 04 Apr 2024 07:44:45 +0000
ROA not after:            Thu 03 Apr 2025 07:49:45 +0000
asID:                     264270
IP address blocks:        45.234.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 19:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:27:bf:29:11:8c:c4:be:03:a3:f8:22:5b:bb:d5:2c:d0:ce:88:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Apr  4 07:44:45 2024 GMT
            Not After : Apr  3 07:49:45 2025 GMT
        Subject: CN=234AAA6E723D44354A28DC9C1456FA48207904C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:cc:28:e4:0c:2f:4a:ff:96:66:86:13:c4:
                    fa:8a:9a:07:38:d1:98:58:fc:66:d5:7e:2e:6f:5a:
                    47:38:a1:6b:40:08:e2:0c:f4:63:7f:21:1e:e6:5e:
                    ea:76:85:2d:c2:a8:57:24:85:9e:ef:7b:d8:ba:35:
                    51:ba:52:13:bd:c7:3a:87:fa:36:23:ad:a8:50:7a:
                    39:50:30:7a:92:cb:a8:e0:56:c0:ff:d4:5a:35:0c:
                    a2:92:ff:92:7b:69:8f:5a:03:27:8a:7d:1d:0b:6c:
                    e9:7f:a8:fd:13:13:35:6f:06:b0:c4:1c:2a:d0:a9:
                    06:0b:80:23:6c:f2:c2:55:69:2e:9e:ef:21:2e:e8:
                    f4:c5:86:54:a7:74:ac:24:e8:d3:35:d3:e7:0e:b5:
                    fa:8e:b7:4b:91:9e:61:c7:bb:c4:38:61:90:4e:bf:
                    3d:22:43:04:6f:6b:a0:4f:01:d1:17:26:f0:b7:e2:
                    43:9f:b8:be:5b:0b:db:4f:87:55:2f:f1:93:28:0d:
                    de:f0:29:66:90:f5:4c:0f:e6:80:c0:6c:62:e7:c5:
                    6e:35:27:51:47:a0:36:ba:d5:dc:f3:cd:72:94:fe:
                    71:24:c9:48:98:36:18:64:be:56:1a:25:11:e8:6d:
                    70:69:ce:48:b7:9e:f9:90:41:09:49:9c:be:47:81:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:AA:6E:72:3D:44:35:4A:28:DC:9C:14:56:FA:48:20:79:04:C9
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3234203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:68:f3:22:0d:1b:3f:66:d2:4e:f2:ec:f2:42:5b:70:11:cf:
         58:19:6e:e5:34:c3:0a:fb:37:6d:bc:09:04:fe:1e:0f:0f:75:
         e7:72:06:df:76:31:e4:83:d9:60:03:65:33:81:69:ce:de:bc:
         71:8c:17:6f:43:f0:46:f9:58:1f:36:68:95:e4:72:15:79:00:
         86:f2:6d:8a:ce:87:0f:2d:9e:9b:7c:93:6a:c9:a7:d0:23:aa:
         7f:6d:a1:ef:b9:dc:9c:b1:24:ef:fa:82:48:76:d9:7f:11:5e:
         d7:00:7a:9b:3c:38:15:7b:2e:79:ab:15:1b:98:60:7d:0a:52:
         18:55:44:c7:87:90:2c:c9:17:00:18:2e:2f:78:d0:10:e4:a3:
         a9:50:8e:52:7e:48:1c:03:5b:d6:84:e0:77:c5:9c:c2:12:4e:
         e8:d6:84:2b:e4:0f:78:ec:f6:eb:5b:a9:c4:8c:7e:ef:cf:60:
         01:41:cd:2d:99:02:5c:0d:f9:91:e7:03:85:2f:e1:a9:a9:87:
         4b:b8:fa:4e:9e:92:25:8f:53:cb:b2:fb:41:40:07:24:79:16:
         27:64:b1:11:87:91:13:e4:4f:a9:40:3f:7e:a5:79:fd:cc:7e:
         6b:a0:e6:7a:fd:2a:b7:7d:e4:37:a1:a1:d5:2b:5c:d9:b9:bd:
         78:b2:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 00:10:44 2024 by rpki-client on console.sobornost.net