Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa
File:                     34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa (raw, json)
Hash identifier:          v6PHn3pL9QnjX930PluDNuhzOCeSRBNm6G/cJ0bRPWY=
Subject key identifier:   74:B3:DF:AE:0F:36:84:E4:A9:AA:3C:8D:A6:49:9A:3C:51:77:47:86
Certificate issuer:       /CN=2BE50025D1B09A6D839F7185D6BD694383893878
Certificate serial:       64D4D42467719ABCA2ADA1AD08C616D388C5F714
Authority key identifier: 2B:E5:00:25:D1:B0:9A:6D:83:9F:71:85:D6:BD:69:43:83:89:38:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE50025D1B09A6D839F7185D6BD694383893878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa
Signing time:             Wed 05 Aug 2026 12:27:55 +0000
ROA not before:           Wed 05 Aug 2026 12:22:55 +0000
ROA not after:            Wed 04 Aug 2027 12:27:55 +0000
asID:                     268291
IP address blocks:        45.237.224.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 05 Aug 2026 18:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d4:d4:24:67:71:9a:bc:a2:ad:a1:ad:08:c6:16:d3:88:c5:f7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE50025D1B09A6D839F7185D6BD694383893878
        Validity
            Not Before: Aug  5 12:22:55 2026 GMT
            Not After : Aug  4 12:27:55 2027 GMT
        Subject: CN=74B3DFAE0F3684E4A9AA3C8DA6499A3C51774786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:d7:84:38:93:d3:fb:f7:86:7b:43:64:6b:
                    8f:3f:82:2f:05:49:0d:c5:63:a2:ab:b8:0e:bf:1e:
                    a3:d0:72:30:4e:c5:6b:67:83:0c:01:c4:61:f4:a3:
                    97:27:b4:3c:71:81:ce:91:02:aa:df:9d:b6:02:bf:
                    e9:84:b8:92:03:1a:ba:e0:28:87:b9:ab:c3:f8:5e:
                    4c:ae:85:bb:24:8d:e6:f2:19:b6:4d:81:6e:d5:2a:
                    d2:67:fa:60:1f:11:85:ab:d3:61:16:77:f2:96:a9:
                    d6:eb:d9:91:10:88:f0:49:a2:97:ab:11:a0:85:2c:
                    78:22:0f:0b:5a:06:23:30:4f:2a:13:30:0e:92:28:
                    4a:47:67:b7:12:37:ba:72:88:be:3b:3e:65:fd:b9:
                    22:57:be:cf:7a:96:35:3f:91:d9:59:7d:b6:1c:34:
                    73:ad:96:05:80:9a:7d:48:fe:19:0a:df:cd:40:6b:
                    3c:f9:96:5c:66:dd:2c:46:d0:61:3c:1b:ff:b2:24:
                    1c:6f:5d:b0:75:20:90:e1:12:ca:75:90:6c:4f:61:
                    c2:ac:6b:5a:a3:0c:8f:86:7b:17:6a:5f:ad:8c:dd:
                    58:a9:30:0f:b9:4d:20:87:17:ae:78:c5:ad:19:dc:
                    e8:69:02:26:fc:4b:92:a5:09:4f:13:f5:b1:b8:63:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B3:DF:AE:0F:36:84:E4:A9:AA:3C:8D:A6:49:9A:3C:51:77:47:86
            X509v3 Authority Key Identifier:
                keyid:2B:E5:00:25:D1:B0:9A:6D:83:9F:71:85:D6:BD:69:43:83:89:38:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/2BE50025D1B09A6D839F7185D6BD694383893878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE50025D1B09A6D839F7185D6BD694383893878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:c1:1c:af:29:d7:7a:75:d5:c7:f8:83:49:70:b9:2e:24:65:
         f6:f7:f5:8d:c4:71:af:6f:c5:d3:3e:77:e9:0b:dd:f1:76:ba:
         de:74:be:fa:83:0f:af:47:bf:97:38:07:07:23:36:d5:a1:0a:
         24:fa:8e:68:eb:c9:ed:dc:fe:97:f9:9b:e3:90:f8:f0:35:91:
         06:f1:2f:05:af:39:49:ce:61:42:5c:6b:80:67:6c:65:f0:7c:
         d1:76:35:93:a5:4b:ec:89:d3:7c:d5:5f:48:6b:d4:64:4f:9d:
         d1:26:41:f7:6e:f4:f2:42:99:f4:de:a7:a1:9a:70:45:1c:d8:
         07:db:ab:e6:c0:79:51:a2:1b:22:5b:5d:cb:2a:33:c3:5f:bd:
         61:fa:65:1b:11:d8:b1:b5:34:25:8d:04:d0:15:0d:dc:b0:a8:
         88:01:7e:54:74:3b:0c:be:f2:09:aa:de:ec:f0:b7:c3:e2:92:
         ea:70:77:ad:e5:ec:ae:cb:de:f0:31:b1:d8:63:6a:e7:32:63:
         13:2d:f0:d3:0d:a9:0f:aa:be:a4:75:5a:40:8e:f0:50:0b:68:
         87:74:d3:46:f1:69:3a:18:86:0b:39:91:42:d2:27:a9:31:76:
         49:57:b6:5f:ad:92:d3:b3:80:09:0c:ef:70:85:26:07:a4:af:
         d9:fd:6e:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZNTUJGdxmryiraGtCMYW04jF9xQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJFNTAwMjVEMUIwOUE2RDgzOUY3MTg1RDZCRDY5NDM4
Mzg5Mzg3ODAeFw0yNjA4MDUxMjIyNTVaFw0yNzA4MDQxMjI3NTVaMDMxMTAvBgNV
BAMTKDc0QjNERkFFMEYzNjg0RTRBOUFBM0M4REE2NDk5QTNDNTE3NzQ3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kdeEOJPT+/eGe0Nka48/gi8F
SQ3FY6KruA6/HqPQcjBOxWtngwwBxGH0o5cntDxxgc6RAqrfnbYCv+mEuJIDGrrg
KIe5q8P4XkyuhbskjebyGbZNgW7VKtJn+mAfEYWr02EWd/KWqdbr2ZEQiPBJoper
EaCFLHgiDwtaBiMwTyoTMA6SKEpHZ7cSN7pyiL47PmX9uSJXvs96ljU/kdlZfbYc
NHOtlgWAmn1I/hkK381Aazz5llxm3SxG0GE8G/+yJBxvXbB1IJDhEsp1kGxPYcKs
a1qjDI+GexdqX62M3VipMA+5TSCHF654xa0Z3OhpAib8S5KlCU8T9bG4Y0E7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdLPfrg82hOSpqjyNpkmaPFF3R4YwHwYDVR0j
BBgwFoAUK+UAJdGwmm2Dn3GF1r1pQ4OJOHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFranFvdUFicWd1bWZLZWgzZXFHNFFOSzJhTnZhb1h3TVhpN2RFblZp
aDUvMC8yQkU1MDAyNUQxQjA5QTZEODM5RjcxODVENkJENjk0MzgzODkzODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRTUwMDI1RDFCMDlBNkQ4
MzlGNzE4NUQ2QkQ2OTQzODM4OTM4NzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBa2pxb3VBYnFndW1mS2VoM2VxRzRRTksyYU52YW9Yd01YaTdkRW5WaWg1LzAv
MzQzNTJlMzIzMzM3MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7eAwDQYJKoZIhvcNAQELBQADggEBACHBHK8p
13p11cf4g0lwuS4kZfb39Y3Eca9vxdM+d+kL3fF2ut50vvqDD69Hv5c4BwcjNtWh
CiT6jmjrye3c/pf5m+OQ+PA1kQbxLwWvOUnOYUJca4BnbGXwfNF2NZOlS+yJ03zV
X0hr1GRPndEmQfdu9PJCmfTep6GacEUc2Afbq+bAeVGiGyJbXcsqM8NfvWH6ZRsR
2LG1NCWNBNAVDdywqIgBflR0Owy+8gmq3uzwt8Pikupwd63l7K7L3vAxsdhjaucy
YxMt8NMNqQ+qvqR1WkCO8FALaId000bxaToYhgs5kULSJ6kxdklXtl+tktOzgAkM
73CFJgekr9n9bko=
-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:12 2026 by rpki-client