Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32322d3232203d3e203631383332.roa
File:                     34352e3136392e342e302f32322d3232203d3e203631383332.roa (raw, json)
Hash identifier:          hIyNNO6gd7wxRDbdoGfAE4SwjY7lAMZmGHyPVIPHBu0=
Subject key identifier:   E6:C8:44:38:8B:0C:61:C0:3E:4B:73:6F:6C:37:2C:41:4A:36:76:C4
Certificate issuer:       /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial:       1297FD21C44E2F64C12C654D83C8C584FEC4920C
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32322d3232203d3e203631383332.roa
Signing time:             Wed 19 Feb 2025 11:44:01 +0000
ROA not before:           Wed 19 Feb 2025 11:39:01 +0000
ROA not after:            Wed 18 Feb 2026 11:44:01 +0000
asID:                     61832
IP address blocks:        45.169.4.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Sat 22 Feb 2025 14:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:97:fd:21:c4:4e:2f:64:c1:2c:65:4d:83:c8:c5:84:fe:c4:92:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
        Validity
            Not Before: Feb 19 11:39:01 2025 GMT
            Not After : Feb 18 11:44:01 2026 GMT
        Subject: CN=E6C844388B0C61C03E4B736F6C372C414A3676C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:be:3b:f5:e6:17:24:bc:b3:7d:d0:5b:f9:
                    99:c9:23:34:e1:43:4a:c4:38:28:97:a7:dd:15:28:
                    b2:42:65:ac:31:4d:0b:89:b0:34:ca:36:a8:1c:f9:
                    69:69:98:c7:96:26:e0:99:95:e4:88:3b:ec:23:36:
                    a3:86:a1:2e:97:d3:82:25:e7:48:89:65:84:4b:2d:
                    43:e9:20:d3:81:39:28:89:fd:b9:c1:e5:dd:e8:b6:
                    62:32:78:b7:48:78:10:70:a1:d3:d0:97:33:a7:87:
                    39:fb:55:d0:5d:39:35:f5:6f:b6:36:45:8e:92:06:
                    41:22:84:e1:af:f1:d9:2a:eb:84:88:3a:07:76:43:
                    df:b4:60:ca:5f:b3:99:3f:99:f1:3c:5a:06:f6:1c:
                    ef:a1:81:3a:ad:3e:ef:8b:0a:d9:6d:48:79:ec:97:
                    4a:76:8d:48:11:0e:0d:d6:6a:ff:78:ec:d2:38:5a:
                    d9:45:f2:fe:35:ee:22:45:37:2a:7e:e8:26:3e:47:
                    50:19:16:75:6f:cc:db:a8:31:15:d9:40:b1:2b:92:
                    7c:4c:4d:2e:ce:ea:63:e1:2d:60:73:15:5b:47:04:
                    da:90:b3:e3:8b:06:80:a1:a0:1a:a9:93:8e:fb:0f:
                    d5:00:46:59:7c:83:13:42:6d:7d:f0:e6:ac:7d:4d:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C8:44:38:8B:0C:61:C0:3E:4B:73:6F:6C:37:2C:41:4A:36:76:C4
            X509v3 Authority Key Identifier:
                keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32322d3232203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:d7:91:df:e6:e7:31:69:d4:6d:f1:8e:c4:9d:9d:43:3e:d6:
         0c:a3:9a:de:98:cb:b7:f4:21:3b:bd:ac:e1:ec:8b:fc:3f:bb:
         35:9f:bc:7c:1d:f7:06:fe:16:9a:4f:42:96:8c:a2:bc:a8:aa:
         6f:d3:dc:47:97:c6:a7:7b:5e:f8:c5:a1:d6:4a:74:92:e0:5b:
         f7:2a:d1:cd:5b:fe:97:7b:26:9c:1d:bf:36:aa:7a:a3:81:b3:
         de:b9:2d:b1:82:b3:c6:1f:ae:4e:41:a9:bf:60:b4:37:c6:7d:
         89:24:10:f9:7d:f3:9e:27:a4:84:31:8b:e1:80:0c:4f:83:0e:
         dd:6c:80:ca:69:9a:b9:bc:c4:6a:6f:b1:97:ac:f2:21:8b:c1:
         bc:dd:f6:aa:6f:b3:41:12:d0:8b:04:58:51:f6:31:5b:8c:fa:
         ea:f7:b7:0e:ab:0b:4b:44:4e:80:f1:8e:d5:2e:0a:61:fd:28:
         ee:d6:e5:d7:76:7d:90:34:bb:a2:36:e1:00:2e:a9:06:82:51:
         3b:ea:d3:71:26:42:11:07:90:8f:7e:f1:48:93:9c:5d:50:93:
         ef:30:76:59:2f:32:37:76:12:b7:9d:b2:ef:af:42:31:be:5f:
         99:25:b8:55:e6:88:2b:71:6e:0b:f2:6b:46:68:4d:42:bc:f8:
         b5:a6:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:57:14 2025 by rpki-client