Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132352e302f32342d3234203d3e20323636313334.roa
File:                     34352e362e3132352e302f32342d3234203d3e20323636313334.roa (raw, json)
Hash identifier:          ZlitIO1voGtqSsZTcVLENrnsG/33CoGwzA/5WqDz49o=
Subject key identifier:   DE:FE:9B:65:E1:E4:D9:3A:C3:F7:27:CE:B6:66:F9:FC:38:EF:49:B9
Certificate issuer:       /CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
Certificate serial:       78E38DDEBFDC7463F0187A7FC07F946E826939BD
Authority key identifier: 70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132352e302f32342d3234203d3e20323636313334.roa
Signing time:             Thu 06 Mar 2025 16:52:51 +0000
ROA not before:           Thu 06 Mar 2025 16:47:51 +0000
ROA not after:            Thu 05 Mar 2026 16:52:51 +0000
asID:                     266134
IP address blocks:        45.6.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Apr 2025 21:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e3:8d:de:bf:dc:74:63:f0:18:7a:7f:c0:7f:94:6e:82:69:39:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
        Validity
            Not Before: Mar  6 16:47:51 2025 GMT
            Not After : Mar  5 16:52:51 2026 GMT
        Subject: CN=DEFE9B65E1E4D93AC3F727CEB666F9FC38EF49B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c7:23:e7:61:f3:df:4b:35:46:b9:06:94:0a:
                    e7:a2:f6:42:75:8c:8f:2e:fe:10:ba:b8:8e:7d:6a:
                    46:c8:39:68:1b:6b:6f:d1:4c:c9:a5:30:1e:7f:5c:
                    5c:21:04:d5:11:15:c8:b8:e3:15:c5:3a:5e:11:77:
                    4f:ee:35:1c:db:25:f1:79:b7:e6:27:33:cd:9c:e6:
                    93:e8:a5:a9:1d:78:9b:0b:23:ed:5e:7f:96:d7:ca:
                    6a:54:e4:cd:ed:8c:f8:f3:c1:ae:38:57:81:6e:d1:
                    e6:72:de:49:98:42:e3:c2:a7:66:29:cf:27:a1:cd:
                    15:13:b2:eb:dd:0a:e5:a1:c8:23:b2:ab:3d:55:a6:
                    93:c6:f6:04:45:d9:29:26:cd:88:a4:79:f4:e6:d8:
                    27:cb:24:e4:67:00:6c:32:1c:a9:9c:7e:9b:ca:f5:
                    c9:c8:30:0f:5f:c1:8e:e2:92:26:89:e7:b7:fe:ef:
                    92:d3:a7:35:6e:90:a4:88:69:0d:ea:8e:e4:1d:7c:
                    73:5d:34:d6:19:49:3b:5a:39:a9:9d:e1:31:12:f4:
                    5f:1b:fe:c9:b0:cd:51:26:9a:b2:98:a6:b9:e8:33:
                    7c:49:06:8c:f4:55:0a:40:57:02:28:f5:b8:0a:3d:
                    4a:14:96:91:ca:48:9b:b8:98:a0:20:c2:df:51:15:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FE:9B:65:E1:E4:D9:3A:C3:F7:27:CE:B6:66:F9:FC:38:EF:49:B9
            X509v3 Authority Key Identifier:
                keyid:70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/34352e362e3132352e302f32342d3234203d3e20323636313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:bd:fd:dc:82:62:3b:5d:32:5e:37:09:44:a1:1f:e6:e7:
         31:8b:f2:fa:56:39:f9:41:a8:eb:d9:00:d3:98:9a:7e:ed:b5:
         c4:6b:d4:53:0f:3e:88:ad:49:ee:80:20:24:f4:f0:d9:aa:8f:
         86:52:53:70:01:ea:80:61:a3:0f:e7:4a:93:e9:19:ae:7c:36:
         63:96:d0:94:3d:ba:6d:e8:e3:f5:ef:52:71:f3:42:0e:04:74:
         d2:0e:21:9b:e9:12:77:6c:48:00:22:34:7e:d2:a7:a9:b8:89:
         b6:6c:cb:1e:d4:28:a0:9e:73:b0:66:6a:e6:21:38:49:51:4d:
         fc:3a:83:f9:4d:46:e4:48:6f:8a:26:1c:33:a8:3b:c3:7f:c8:
         cf:87:b7:f3:58:47:00:22:fd:14:a6:b5:92:1e:c2:42:dd:f7:
         30:e1:12:eb:a9:12:b4:f4:e4:6d:47:de:82:a9:00:67:6e:4d:
         61:59:98:12:82:49:35:ac:1a:87:84:79:a2:1d:d6:57:f6:72:
         4f:86:c3:15:d4:49:ab:e5:68:11:e8:b8:be:ac:86:26:db:b0:
         cd:85:8d:69:c4:86:55:79:5e:9b:8f:59:83:b7:7c:94:bc:5c:
         73:29:a4:29:4a:b9:44:db:f2:37:b0:1f:a4:02:6d:78:3b:00:
         9c:41:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net