Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e362e302f32342d3234203d3e20323638303830.roa
File:                     34352e3136392e362e302f32342d3234203d3e20323638303830.roa (raw, json)
Hash identifier:          Am3JZIBK+mwfCCt0UvzZQjzInm/qwCNCKM3gVyIqUeY=
Subject key identifier:   02:A2:8A:EB:73:9D:C0:8B:98:C6:4F:9C:4F:9B:51:77:F5:E3:0A:6B
Certificate issuer:       /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial:       70C256C25A4B1DECBCC8D29AB9CEF14BD5C7A497
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e362e302f32342d3234203d3e20323638303830.roa
Signing time:             Wed 19 Feb 2025 11:43:59 +0000
ROA not before:           Wed 19 Feb 2025 11:38:59 +0000
ROA not after:            Wed 18 Feb 2026 11:43:59 +0000
asID:                     268080
IP address blocks:        45.169.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 22 Feb 2025 14:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c2:56:c2:5a:4b:1d:ec:bc:c8:d2:9a:b9:ce:f1:4b:d5:c7:a4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
        Validity
            Not Before: Feb 19 11:38:59 2025 GMT
            Not After : Feb 18 11:43:59 2026 GMT
        Subject: CN=02A28AEB739DC08B98C64F9C4F9B5177F5E30A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:53:fa:cb:45:d5:08:e7:7a:78:6b:6e:89:
                    a1:4c:34:d0:33:d1:7d:68:e2:e0:4e:0e:50:a7:09:
                    38:a5:87:a1:5a:65:0e:c2:b4:8a:98:11:40:4b:dd:
                    73:80:2b:d5:8d:16:a7:03:7d:19:31:d9:e5:6c:1c:
                    93:33:29:b6:ec:18:b8:41:b7:ff:f4:39:ab:13:15:
                    dd:99:e8:3a:f9:33:eb:be:00:1e:f7:e7:7a:12:8c:
                    fb:f0:9e:30:ad:29:cb:53:1e:39:6e:43:44:ec:2c:
                    9c:f7:8c:7e:64:a1:a7:e6:33:3d:ed:3f:b4:63:6c:
                    f4:44:8f:97:34:a3:32:33:02:2a:61:4f:03:ef:ef:
                    79:cd:e6:dd:14:33:a5:79:96:83:66:d9:4b:1d:d8:
                    b4:fa:15:f0:c3:8e:18:6e:83:d2:72:ad:ed:ed:99:
                    d1:8a:bd:fc:f3:2b:38:8f:6d:3e:ee:c3:1d:43:48:
                    88:7d:bb:80:3d:fe:ff:3d:c1:52:dc:8e:e1:4d:c2:
                    18:5b:af:bd:58:9c:b0:f0:6b:1a:94:e2:26:07:23:
                    ca:7e:1b:c8:5d:02:ea:26:d7:a3:ee:ce:f4:d0:92:
                    54:b7:8d:9c:d4:c7:07:c1:ff:92:b4:04:fd:ef:79:
                    74:36:6c:09:1f:73:68:d2:ce:90:f6:89:e1:5e:34:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A2:8A:EB:73:9D:C0:8B:98:C6:4F:9C:4F:9B:51:77:F5:E3:0A:6B
            X509v3 Authority Key Identifier:
                keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e362e302f32342d3234203d3e20323638303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:a6:19:23:c7:f9:4a:9a:b8:fe:ea:36:1f:25:57:eb:2d:
         2a:1b:13:13:f7:52:e9:8d:7b:a8:fc:b8:f2:e3:fd:8a:9d:90:
         cc:dc:10:22:09:bf:93:70:ff:d3:98:56:e0:38:be:76:9f:93:
         49:5a:16:c0:84:18:88:4c:2a:e6:28:ac:ce:bc:19:40:d2:17:
         61:45:4a:81:45:7b:e6:6c:91:12:1b:48:8c:86:40:59:8d:3c:
         a3:b5:b1:df:57:71:5d:57:c0:a7:48:b2:e8:ac:1f:b8:fb:34:
         f9:2e:48:8f:49:26:c7:56:3a:0f:d0:cc:a5:48:e9:7c:8a:2c:
         b7:0a:cd:5d:49:0d:b1:35:00:57:6f:aa:2c:2d:c7:82:a0:76:
         84:48:cd:7b:8e:d0:f5:85:33:ea:17:94:35:56:be:ac:bb:06:
         8b:05:df:2c:f8:87:32:99:d4:e6:02:66:d8:da:89:b7:c9:c2:
         64:b1:a9:97:ec:1b:c9:08:0a:33:44:b5:4a:3a:93:d6:63:89:
         88:73:18:64:3c:da:50:58:a3:62:47:b9:b6:17:c2:91:5c:f9:
         cb:b7:b8:bd:f5:af:80:ef:93:19:8e:b1:eb:4a:5a:02:43:46:
         bc:0d:83:bd:c5:e0:74:5e:a5:9c:e9:a1:3d:31:e2:af:2d:7f:
         84:df:ff:81
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUcMJWwlpLHey8yNKauc7xS9XHpJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ3MkVENTRCNzg4MTYyQTFDODYyNEI5NERCMjdENzVG
OTNGQzFFRTAeFw0yNTAyMTkxMTM4NTlaFw0yNjAyMTgxMTQzNTlaMDMxMTAvBgNV
BAMTKDAyQTI4QUVCNzM5REMwOEI5OEM2NEY5QzRGOUI1MTc3RjVFMzBBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaFP6y0XVCOd6eGtuiaFMNNAz
0X1o4uBODlCnCTilh6FaZQ7CtIqYEUBL3XOAK9WNFqcDfRkx2eVsHJMzKbbsGLhB
t//0OasTFd2Z6Dr5M+u+AB7353oSjPvwnjCtKctTHjluQ0TsLJz3jH5koafmMz3t
P7RjbPREj5c0ozIzAiphTwPv73nN5t0UM6V5loNm2Usd2LT6FfDDjhhug9Jyre3t
mdGKvfzzKziPbT7uwx1DSIh9u4A9/v89wVLcjuFNwhhbr71YnLDwaxqU4iYHI8p+
G8hdAuom16PuzvTQklS3jZzUxwfB/5K0BP3veXQ2bAkfc2jSzpD2ieFeNPplAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAqKK63OdwIuYxk+cT5tRd/XjCmswHwYDVR0j
BBgwFoAUhHLtVLeIFiochiS5TbJ9dfk/we4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXo2dUpuQTJCampKQkYyUFZOVkZrSnlWRG9pVmIxU05hR3pHeG5iWmRX
ODcvMC84NDcyRUQ1NEI3ODgxNjJBMUM4NjI0Qjk0REIyN0Q3NUY5M0ZDMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0NzJFRDU0Qjc4ODE2MkEx
Qzg2MjRCOTREQjI3RDc1RjkzRkMxRUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V6NnVKbkEyQmpqSkJGMlBWTlZGa0p5VkRvaVZiMVNOYUd6R3huYlpkVzg3LzAv
MzQzNTJlMzEzNjM5MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMw
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC2pBjANBgkqhkiG9w0BAQsFAAOCAQEAnQemGSPH+Uqa
uP7qNh8lV+stKhsTE/dS6Y17qPy48uP9ip2QzNwQIgm/k3D/05hW4Di+dp+TSVoW
wIQYiEwq5iiszrwZQNIXYUVKgUV75myREhtIjIZAWY08o7Wx31dxXVfAp0iy6Kwf
uPs0+S5Ij0kmx1Y6D9DMpUjpfIostwrNXUkNsTUAV2+qLC3HgqB2hEjNe47Q9YUz
6heUNVa+rLsGiwXfLPiHMpnU5gJm2NqJt8nCZLGpl+wbyQgKM0S1SjqT1mOJiHMY
ZDzaUFijYke5thfCkVz5y7e4vfWvgO+TGY6x60paAkNGvA2DvcXgdF6lnOmhPTHi
ry1/hN//gQ==
-----END CERTIFICATE-----
Generated at Tue Feb 25 03:42:55 2025 by rpki-client on console.sobornost.net