Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3233203d3e20323637343133.roa
File:                     34352e3233352e3130342e302f32322d3233203d3e20323637343133.roa (raw, json)
Hash identifier:          MND2MzCoPGKaRMLFVZjOm+g2ElI8Pm/6eqqIRPTHKVg=
Subject key identifier:   90:DC:DF:6C:AC:F8:FA:46:D7:BD:4F:92:23:6D:73:8B:04:21:85:4D
Certificate issuer:       /CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
Certificate serial:       271594D095BC704188A9E33B8DB11840FB3A8B09
Authority key identifier: 4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3233203d3e20323637343133.roa
Signing time:             Fri 21 Mar 2025 20:11:44 +0000
ROA not before:           Fri 21 Mar 2025 20:06:44 +0000
ROA not after:            Fri 20 Mar 2026 20:11:44 +0000
asID:                     267413
IP address blocks:        45.235.104.0/22 maxlen: 23
Validation:               Failed, certificate revoked on Wed 26 Mar 2025 23:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:15:94:d0:95:bc:70:41:88:a9:e3:3b:8d:b1:18:40:fb:3a:8b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
        Validity
            Not Before: Mar 21 20:06:44 2025 GMT
            Not After : Mar 20 20:11:44 2026 GMT
        Subject: CN=90DCDF6CACF8FA46D7BD4F92236D738B0421854D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:b0:b7:61:22:5f:0e:ee:92:c0:93:f9:e5:
                    25:10:f2:6c:0f:de:aa:92:2c:cb:6d:43:82:a5:99:
                    49:0a:65:03:dd:48:70:15:e5:60:fb:be:2d:30:09:
                    82:31:95:2b:06:3c:b4:0d:49:08:74:ec:64:57:e6:
                    fd:4d:1a:77:0a:2f:aa:da:03:fa:58:3c:a5:c0:8b:
                    4e:92:85:68:27:7c:dc:33:6b:b4:b9:41:79:98:71:
                    2b:34:38:15:08:7b:72:c9:e2:c6:4b:47:82:ca:d6:
                    57:7f:f8:96:23:59:2c:78:d0:54:67:9d:b4:19:21:
                    8f:df:b3:56:e6:40:e0:ca:d7:ce:15:e8:88:10:00:
                    1d:cc:47:c9:12:5c:05:75:55:c0:22:59:e9:1f:1a:
                    bf:ca:61:57:e8:c2:80:05:0f:a9:a1:9a:e4:e6:47:
                    f8:2d:79:cb:eb:e0:a5:f0:53:b0:ae:ca:38:8e:87:
                    44:06:06:67:3c:e4:bb:f3:82:96:50:5c:53:56:38:
                    77:e6:0d:82:61:19:45:8f:bd:be:5f:0d:85:b1:80:
                    2d:12:4d:ab:20:f9:e6:7e:61:85:b5:78:30:30:df:
                    52:f7:b0:e7:89:0e:cd:82:6a:52:fe:0b:70:51:67:
                    2b:b2:18:3c:87:c1:6d:74:d9:28:25:b3:16:98:35:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:DF:6C:AC:F8:FA:46:D7:BD:4F:92:23:6D:73:8B:04:21:85:4D
            X509v3 Authority Key Identifier:
                keyid:4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3233203d3e20323637343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:10:ec:3e:95:d4:6d:23:8b:75:6a:e4:41:4e:6b:32:e7:7a:
         66:94:3c:a7:4c:e8:23:cf:cf:c3:32:43:9d:23:61:3c:fe:f4:
         e8:78:e3:87:9a:dd:1b:8b:ba:df:8c:2b:f0:b7:c8:5b:aa:40:
         70:fa:53:8d:a6:40:6f:d4:e0:12:2a:23:46:41:5f:e6:6e:e1:
         7d:5b:44:e8:9f:00:96:db:5a:34:7a:56:5c:70:15:b4:56:f3:
         3b:ed:92:ac:a0:e0:ce:cc:c3:41:35:57:e6:36:98:85:ab:09:
         53:84:3a:80:19:b6:b7:a7:1d:54:70:7a:fc:7f:7e:52:1a:19:
         c7:c4:66:e7:47:a6:bb:51:da:15:33:95:81:cf:ff:44:7f:74:
         31:9a:41:77:6f:bc:f3:3b:3a:97:15:bd:bb:8b:c3:d2:72:65:
         df:7c:4e:b8:e4:1b:6a:d3:2c:61:b9:88:2f:f9:08:9b:66:42:
         0f:67:77:e1:9b:98:cc:6a:0c:07:af:18:98:03:8f:32:9e:a1:
         94:e0:0d:e6:c9:2b:33:23:03:3a:07:1d:fb:a3:c2:da:60:1a:
         f7:fa:1b:65:ee:7b:89:a4:34:6a:6b:ea:53:6f:f1:0e:c2:fb:
         77:7f:3f:61:d4:93:06:4d:5b:32:cf:f6:88:a5:f0:af:68:59:
         1d:6f:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:44:02 2025 by rpki-client