Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3232203d3e20323637303132.roa
File:                     34352e3232372e3132302e302f32322d3232203d3e20323637303132.roa (raw, json)
Hash identifier:          9DYZSbyF1q4VTAegG9TaLNC95P/SkZo6gs0n0EhVfKk=
Subject key identifier:   2B:6A:CE:64:02:86:5F:40:D6:8C:C2:29:8B:D7:BD:E2:55:FF:82:E4
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       74464EA2BAF56E2305F703AC9AEE75CBC49358A0
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3232203d3e20323637303132.roa
Signing time:             Thu 11 Sep 2025 17:13:30 +0000
ROA not before:           Thu 11 Sep 2025 17:08:30 +0000
ROA not after:            Thu 10 Sep 2026 17:13:30 +0000
asID:                     267012
IP address blocks:        45.227.120.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 11 Sep 2025 17:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:46:4e:a2:ba:f5:6e:23:05:f7:03:ac:9a:ee:75:cb:c4:93:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Sep 11 17:08:30 2025 GMT
            Not After : Sep 10 17:13:30 2026 GMT
        Subject: CN=2B6ACE6402865F40D68CC2298BD7BDE255FF82E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:a3:0a:7a:74:4d:9e:fb:87:51:3f:7e:6f:
                    a9:84:38:1e:4e:ea:71:c3:3b:d1:0f:74:6e:ba:87:
                    5e:ef:f5:2e:75:bc:71:78:5f:63:7c:3c:d6:ec:f3:
                    14:88:c1:d5:b0:25:e4:4e:22:bf:ba:09:fa:45:00:
                    e6:38:cb:5f:ab:03:17:9e:7b:83:87:c9:75:d9:b4:
                    50:92:c0:69:78:40:b6:8a:0b:97:62:ac:f0:a2:9b:
                    b8:a7:15:86:45:78:18:0c:c4:06:f6:37:a5:70:74:
                    49:db:ba:61:4f:82:0e:c6:02:e7:79:cb:29:17:f0:
                    5b:99:04:86:af:52:38:a0:34:4b:20:84:0d:57:73:
                    d1:df:aa:b0:3f:35:7a:0e:7a:2e:57:89:85:a1:70:
                    a9:1c:b6:c2:a5:dd:55:99:f0:7d:48:a3:f1:cf:ee:
                    fe:f0:82:a9:6b:c5:e8:b9:bc:42:f6:1a:3f:29:70:
                    6c:cc:a0:df:36:d9:73:b1:d5:2f:52:fa:93:c3:24:
                    10:cf:89:c9:03:28:62:47:c4:e6:41:18:8b:62:2b:
                    36:0b:87:97:a1:ae:80:2f:8c:4a:1b:38:98:f0:bc:
                    db:c7:6b:e8:0e:52:4c:a5:d6:0c:06:dd:f7:24:97:
                    5f:2c:1c:02:f1:cf:6a:51:af:76:ed:8f:8c:d1:06:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6A:CE:64:02:86:5F:40:D6:8C:C2:29:8B:D7:BD:E2:55:FF:82:E4
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3232203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:da:67:11:7c:b8:d3:6b:7d:8c:af:c3:e1:5e:06:ae:4b:
         e7:36:2f:5d:a8:de:9d:8d:8c:3d:eb:f0:6f:85:38:1a:60:61:
         0c:01:06:c5:9e:69:ee:ca:83:84:67:e6:8c:6f:e2:07:66:81:
         49:33:97:0b:70:f6:da:51:d8:d8:ed:77:61:41:d5:af:6d:37:
         54:6a:9b:d4:ad:cd:f6:53:04:74:6e:8a:13:a7:4e:74:22:49:
         a9:d9:2c:7f:f4:d3:2d:91:40:f1:04:1b:47:ad:8d:86:7c:88:
         49:4f:79:46:ed:ae:fd:cd:4e:9f:d9:97:62:86:c8:c6:1b:39:
         7e:d4:c5:12:e1:15:4c:0d:e0:7d:ad:02:c1:0d:b2:e4:af:40:
         06:c7:c7:10:3c:bc:0f:9c:fe:1a:e9:3f:4e:61:59:2d:95:64:
         7b:7d:1d:c4:74:98:cb:84:df:b2:42:07:30:ee:3a:f3:1e:03:
         8e:26:42:19:4c:d5:5c:bd:03:24:28:57:6e:2a:b5:b8:8a:ec:
         b8:56:47:d7:e6:77:2e:ed:d2:46:5b:19:9c:c2:4b:b7:94:72:
         0b:d4:59:09:54:1d:c8:68:48:6e:a3:09:31:4d:76:6f:68:e2:
         9a:de:f8:61:41:12:39:35:34:28:d4:cd:2b:88:e4:6f:c7:1d:
         b6:34:b6:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdEZOorr1biMF9wOsmu51y8STWKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNTA5MTExNzA4MzBaFw0yNjA5MTAxNzEzMzBaMDMxMTAvBgNV
BAMTKDJCNkFDRTY0MDI4NjVGNDBENjhDQzIyOThCRDdCREUyNTVGRjgyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoqMKenRNnvuHUT9+b6mEOB5O
6nHDO9EPdG66h17v9S51vHF4X2N8PNbs8xSIwdWwJeROIr+6CfpFAOY4y1+rAxee
e4OHyXXZtFCSwGl4QLaKC5dirPCim7inFYZFeBgMxAb2N6VwdEnbumFPgg7GAud5
yykX8FuZBIavUjigNEsghA1Xc9HfqrA/NXoOei5XiYWhcKkctsKl3VWZ8H1Io/HP
7v7wgqlrxei5vEL2Gj8pcGzMoN822XOx1S9S+pPDJBDPickDKGJHxOZBGItiKzYL
h5ehroAvjEobOJjwvNvHa+gOUkyl1gwG3fckl18sHALxz2pRr3btj4zRBjefAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK2rOZAKGX0DWjMIpi9e94lX/guQwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzQzNTJlMzIzMjM3MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt43gwDQYJKoZIhvcNAQELBQADggEBACqF2mcR
fLjTa32Mr8PhXgauS+c2L12o3p2NjD3r8G+FOBpgYQwBBsWeae7Kg4Rn5oxv4gdm
gUkzlwtw9tpR2Njtd2FB1a9tN1Rqm9StzfZTBHRuihOnTnQiSanZLH/00y2RQPEE
G0etjYZ8iElPeUbtrv3NTp/Zl2KGyMYbOX7UxRLhFUwN4H2tAsENsuSvQAbHxxA8
vA+c/hrpP05hWS2VZHt9HcR0mMuE37JCBzDuOvMeA44mQhlM1Vy9AyQoV24qtbiK
7LhWR9fmdy7t0kZbGZzCS7eUcgvUWQlUHchoSG6jCTFNdm9o4pre+GFBEjk1NCjU
zSuI5G/HHbY0tqw=
-----END CERTIFICATE-----
Generated at Sat Sep 20 06:04:05 2025 by rpki-client