Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          Mv8mC9YxEL2vJPaQyu3lOzPMKNovFdMTZ2MZ352z+e0=
Subject key identifier:   4F:D4:80:FA:6D:14:03:32:E2:94:EE:BB:9C:AC:99:71:87:2A:1B:AB
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       15E3B162AD99134C847CD5B69D85BF4E7D70AC4D
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
Signing time:             Mon 11 Aug 2025 13:19:37 +0000
ROA not before:           Mon 11 Aug 2025 13:14:37 +0000
ROA not after:            Mon 10 Aug 2026 13:19:37 +0000
asID:                     267027
IP address blocks:        45.227.171.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e3:b1:62:ad:99:13:4c:84:7c:d5:b6:9d:85:bf:4e:7d:70:ac:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Aug 11 13:14:37 2025 GMT
            Not After : Aug 10 13:19:37 2026 GMT
        Subject: CN=4FD480FA6D140332E294EEBB9CAC9971872A1BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:c1:bf:01:e5:43:de:b4:7b:10:65:f8:2c:
                    86:97:c9:25:f6:4a:6e:3d:6e:a9:af:81:2f:b2:de:
                    0b:21:26:ed:5f:ca:31:12:d5:15:99:4a:0b:fa:e3:
                    9b:53:2f:55:5c:b3:75:86:37:6f:ba:99:68:b1:dd:
                    ff:86:2f:f0:d9:c8:d8:0c:8a:90:ee:e7:f1:98:f3:
                    70:1b:50:ed:1d:f4:2f:50:03:c1:80:c1:27:fb:f9:
                    76:7e:d1:4b:70:b3:91:cd:a3:43:4a:c7:a3:9b:82:
                    46:c8:84:5d:51:d6:95:34:a4:6f:d7:e4:64:d4:5d:
                    c5:f2:6f:54:1a:84:7e:40:16:45:28:76:a5:48:4c:
                    de:15:9a:ed:cc:cd:c8:30:ea:f5:ef:de:cd:61:8c:
                    32:f5:e4:3f:d7:09:9b:df:41:8a:b7:61:3d:25:3b:
                    5e:70:7f:d9:84:7c:be:98:ec:95:f1:96:2b:3d:1a:
                    a4:e3:7a:0b:ce:5f:44:9e:fd:ce:92:84:20:ec:fd:
                    34:22:33:d5:ea:e9:64:15:2a:81:6f:6d:87:26:10:
                    d2:7f:2a:8b:f2:24:bb:56:8d:5d:b3:03:ba:66:df:
                    f4:40:29:9f:b6:89:57:d8:0e:b2:bd:9b:2a:f5:42:
                    71:31:87:62:f4:4a:2b:e6:6b:40:18:53:d4:92:ea:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D4:80:FA:6D:14:03:32:E2:94:EE:BB:9C:AC:99:71:87:2A:1B:AB
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:c4:81:66:87:5b:b1:4d:14:ee:e6:3f:9c:f6:e9:8f:8a:
         77:6d:be:26:35:bf:67:c2:75:72:c4:8d:12:04:17:9d:20:1a:
         24:de:24:21:c7:ac:1c:03:fc:4a:d4:73:5a:bb:21:a2:b2:76:
         96:7f:81:c6:4f:71:d4:e1:66:ff:21:90:c6:36:01:8e:9c:23:
         0f:c7:e6:64:0f:1c:5c:e2:85:d3:12:73:81:4c:2f:2e:2c:99:
         67:06:9a:80:67:19:55:ae:f4:90:c6:d8:c1:5b:1b:64:0a:85:
         98:ff:b7:1e:56:f0:af:86:41:45:e9:dc:a5:15:50:d2:b9:5c:
         f5:b1:a6:30:a2:49:d7:80:a0:8e:29:f1:6c:19:43:8e:8b:e2:
         f5:eb:9a:a9:e5:a7:ec:73:08:7c:07:3f:78:10:e1:69:dc:f0:
         89:d6:03:5d:fa:ad:e5:2b:0e:31:42:f4:0b:54:9a:f8:d0:c2:
         10:9f:b2:52:c5:81:03:9c:10:ab:35:3d:a2:7f:75:1e:6f:a9:
         39:7d:48:4c:ac:8d:d6:d7:6c:05:da:61:cf:d5:dc:c1:ec:f7:
         22:01:3e:ad:6a:17:8d:60:1a:dc:56:99:22:5c:1f:62:66:12:
         ef:e2:d0:da:1f:4e:07:82:7e:cc:5a:75:71:64:0d:29:c0:7a:
         27:19:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:22:01 2025 by rpki-client