Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32342d3234203d3e20323636393634.roa
File:                     34352e3232352e3233322e302f32342d3234203d3e20323636393634.roa (raw, json)
Hash identifier:          ZNuqcC46GbbbymghuQaVuCX1J06EDw+54BkEYOMj9YE=
Subject key identifier:   E7:61:6A:C7:FF:19:29:5A:EC:AA:B4:31:8E:AF:2B:33:ED:B6:A4:54
Certificate issuer:       /CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
Certificate serial:       5D438BBAB4C6E38FFFDCD109E355DD5BD2EB7461
Authority key identifier: 1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32342d3234203d3e20323636393634.roa
Signing time:             Mon 19 Aug 2024 18:44:02 +0000
ROA not before:           Mon 19 Aug 2024 18:39:02 +0000
ROA not after:            Mon 18 Aug 2025 18:44:02 +0000
asID:                     266964
IP address blocks:        45.225.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 18:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:43:8b:ba:b4:c6:e3:8f:ff:dc:d1:09:e3:55:dd:5b:d2:eb:74:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
        Validity
            Not Before: Aug 19 18:39:02 2024 GMT
            Not After : Aug 18 18:44:02 2025 GMT
        Subject: CN=E7616AC7FF19295AECAAB4318EAF2B33EDB6A454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:5d:d1:a8:33:7b:da:8b:05:1b:58:07:6d:
                    60:fe:bb:03:1f:05:f8:9e:e1:27:8b:71:80:fa:c6:
                    43:87:2e:ab:58:b6:85:45:71:0a:54:6b:1d:15:9e:
                    31:6b:4e:f4:f7:c5:3d:18:05:83:7c:75:83:8a:a9:
                    cc:cf:0f:a4:04:e9:c8:5a:23:75:12:76:b7:87:a3:
                    2e:b6:59:b9:46:b1:f7:f4:14:d1:7e:2b:03:f6:df:
                    29:ff:6e:0a:e1:6d:63:fb:10:00:72:ee:30:bc:28:
                    81:e5:31:52:5b:69:a7:0b:c0:08:b8:13:5b:3e:23:
                    c7:cc:7a:13:fe:c2:83:cf:2b:fd:8b:21:f6:0b:f2:
                    c7:d1:fa:05:da:ab:9c:55:f7:90:b8:17:0c:41:ce:
                    ee:77:c5:d3:72:ea:b2:0f:ac:4f:4c:42:0e:9b:23:
                    73:d9:f8:78:33:51:87:91:29:86:3a:d6:c7:98:ed:
                    70:86:07:61:e7:fe:2c:a6:93:10:a3:ff:17:f6:5f:
                    0a:a7:9a:97:ca:99:5c:30:74:68:a5:b8:65:d3:5a:
                    3d:0a:d1:66:d1:fa:4a:59:5c:c4:00:3f:ee:32:69:
                    14:2f:9f:6f:08:5f:35:8d:9c:f2:b9:09:ad:ce:bf:
                    4a:2d:40:19:dd:b2:01:40:b6:00:e8:a7:2f:f7:73:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:61:6A:C7:FF:19:29:5A:EC:AA:B4:31:8E:AF:2B:33:ED:B6:A4:54
            X509v3 Authority Key Identifier:
                keyid:1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32342d3234203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:14:6d:c0:10:ce:21:c0:c7:d9:e5:67:7a:37:b5:a7:16:37:
         f6:9c:49:2c:d9:af:e8:55:56:77:37:ab:cb:7e:fe:50:b4:30:
         f4:20:a1:89:46:c3:77:d4:7c:c8:4e:0d:02:a8:c0:71:c0:03:
         f5:a0:fc:6d:60:9b:28:26:f7:a7:1a:af:40:25:b2:06:60:e1:
         d7:c2:6b:c3:4b:ea:50:5b:35:af:e6:d7:e3:45:7b:1b:59:8e:
         1e:2b:56:5d:4b:8d:69:da:d9:57:ee:b4:07:95:3b:63:ba:89:
         d3:7e:b8:9d:8d:d0:9d:9c:dc:97:2a:4e:77:3e:c8:3f:fd:8f:
         7d:2d:c6:7e:21:e0:c9:f6:3a:23:86:6c:21:64:7a:64:e1:f1:
         72:81:8b:16:36:98:0d:67:57:53:5b:e4:35:82:b8:1b:fc:ec:
         14:c6:7b:25:35:de:00:42:fe:28:5e:5e:2a:34:1a:ce:af:4d:
         9e:09:72:06:ae:d4:b1:49:31:85:ae:8c:34:bd:87:dd:69:41:
         57:13:c2:7a:fd:95:fe:1b:16:8a:30:33:26:10:26:3c:c7:b5:
         96:a1:d3:49:d7:dd:d7:fd:88:7e:04:0c:3b:16:57:ec:e7:60:
         ac:63:e3:1f:45:a5:49:9f:cb:02:7c:ae:c2:dd:cf:8e:d5:4f:
         4d:97:cd:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXUOLurTG44//3NEJ41XdW9LrdGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM3MzIzOEVGNDhDNkNGNkJDRTBDOUQ3NUIzMzg3RkVE
QUEwNzVDNTAeFw0yNDA4MTkxODM5MDJaFw0yNTA4MTgxODQ0MDJaMDMxMTAvBgNV
BAMTKEU3NjE2QUM3RkYxOTI5NUFFQ0FBQjQzMThFQUYyQjMzRURCNkE0NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcnF3RqDN72osFG1gHbWD+uwMf
Bfie4SeLcYD6xkOHLqtYtoVFcQpUax0VnjFrTvT3xT0YBYN8dYOKqczPD6QE6cha
I3USdreHoy62WblGsff0FNF+KwP23yn/bgrhbWP7EABy7jC8KIHlMVJbaacLwAi4
E1s+I8fMehP+woPPK/2LIfYL8sfR+gXaq5xV95C4FwxBzu53xdNy6rIPrE9MQg6b
I3PZ+HgzUYeRKYY61seY7XCGB2Hn/iymkxCj/xf2XwqnmpfKmVwwdGiluGXTWj0K
0WbR+kpZXMQAP+4yaRQvn28IXzWNnPK5Ca3Ov0otQBndsgFAtgDopy/3c4IdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU52Fqx/8ZKVrsqrQxjq8rM+22pFQwHwYDVR0j
BBgwFoAUHHMjjvSMbPa84MnXWzOH/tqgdcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWl5bXRUTUYyblNGV1FOMnJtNXNtQ1Axd3YyQXpiS0dWdTFoeVphaVBT
REEvMS8xQzczMjM4RUY0OEM2Q0Y2QkNFMEM5RDc1QjMzODdGRURBQTA3NUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNzMyMzhFRjQ4QzZDRjZC
Q0UwQzlENzVCMzM4N0ZFREFBMDc1QzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpeW10VE1GMm5TRldRTjJybTVzbUNQMXd2MkF6YktHVnUxaHlaYWlQU0RBLzEv
MzQzNTJlMzIzMjM1MmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4egwDQYJKoZIhvcNAQELBQADggEBACsUbcAQ
ziHAx9nlZ3o3tacWN/acSSzZr+hVVnc3q8t+/lC0MPQgoYlGw3fUfMhODQKowHHA
A/Wg/G1gmygm96car0AlsgZg4dfCa8NL6lBbNa/m1+NFextZjh4rVl1LjWna2Vfu
tAeVO2O6idN+uJ2N0J2c3JcqTnc+yD/9j30txn4h4Mn2OiOGbCFkemTh8XKBixY2
mA1nV1Nb5DWCuBv87BTGeyU13gBC/iheXio0Gs6vTZ4Jcgau1LFJMYWujDS9h91p
QVcTwnr9lf4bFoowMyYQJjzHtZah00nX3df9iH4EDDsWV+znYKxj4x9FpUmfywJ8
rsLdz47VT02XzUs=
-----END CERTIFICATE-----
Generated at Thu Sep 19 19:41:12 2024 by rpki-client on console.sobornost.net