Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130302e302f32342d3234203d3e20323731303234.roa
File:                     34352e3232372e3130302e302f32342d3234203d3e20323731303234.roa (raw, json)
Hash identifier:          nromw8klrcXJEQn2fb4bSyzugIWC2nqDtRKiACbIgag=
Subject key identifier:   C3:C0:EE:8F:B0:B3:B8:5B:83:57:59:BF:C5:AA:B5:AC:D8:4D:25:62
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       6A1075E97E5EFC789461C320C9568173CA618036
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130302e302f32342d3234203d3e20323731303234.roa
Signing time:             Sat 07 Sep 2024 14:37:33 +0000
ROA not before:           Sat 07 Sep 2024 14:32:33 +0000
ROA not after:            Sat 06 Sep 2025 14:37:33 +0000
asID:                     271024
IP address blocks:        45.227.100.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Sep 2024 14:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:10:75:e9:7e:5e:fc:78:94:61:c3:20:c9:56:81:73:ca:61:80:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Sep  7 14:32:33 2024 GMT
            Not After : Sep  6 14:37:33 2025 GMT
        Subject: CN=C3C0EE8FB0B3B85B835759BFC5AAB5ACD84D2562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:cd:fc:cc:2c:3b:c3:07:ff:37:43:6d:3e:
                    93:46:af:67:f9:2f:15:75:e6:48:2f:64:06:9d:26:
                    f7:02:dc:08:ac:d8:90:48:92:d3:06:ef:71:c8:65:
                    bb:f3:9f:42:09:d3:5a:4a:3d:84:6d:1a:1c:6b:c6:
                    3f:55:4a:ca:df:63:1c:cb:03:af:63:54:a8:fc:4a:
                    39:65:aa:45:01:f4:f8:98:78:74:71:7d:3f:98:56:
                    fd:ba:37:cd:76:cf:86:f1:19:38:86:7d:58:c9:cf:
                    7f:a2:f0:db:3c:2e:f6:f0:f9:a4:07:62:3d:37:0e:
                    e1:11:a2:2e:a2:e6:ec:d9:8e:db:22:2b:57:06:12:
                    23:3f:52:c9:78:e4:e7:1f:b1:95:b4:98:26:7b:18:
                    7f:f8:ed:6f:a0:21:fb:8e:f8:40:74:7f:d2:54:de:
                    fa:c2:d0:7e:b4:67:ea:c5:aa:dd:19:e9:8f:00:0a:
                    be:80:4b:14:7a:71:3f:dc:9f:e7:59:c0:26:1b:24:
                    b6:f9:49:42:da:4f:1e:85:e6:67:37:06:44:f5:25:
                    fb:f4:f2:b0:5e:6c:11:23:31:b7:f8:15:b3:d0:04:
                    35:76:c5:10:ca:0f:96:eb:c4:06:ca:a4:b7:d9:7b:
                    86:e8:7f:a6:71:4c:68:3e:51:79:ec:3c:59:55:8d:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C0:EE:8F:B0:B3:B8:5B:83:57:59:BF:C5:AA:B5:AC:D8:4D:25:62
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130302e302f32342d3234203d3e20323731303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:91:2d:8b:c6:25:cb:3d:6a:34:8d:fe:4d:55:0a:3a:12:
         21:55:fe:7b:1f:b0:40:c1:6f:88:ad:e6:f3:ea:36:9d:b0:9d:
         ed:e3:e6:6d:20:cb:1d:53:31:81:07:51:42:35:86:77:d5:c8:
         1d:4d:cd:ee:fe:91:b9:68:86:52:0a:dd:ec:1e:3a:95:2a:ed:
         9c:94:1e:14:4b:1f:06:e6:ca:24:57:31:15:85:23:01:96:3c:
         f4:72:00:8f:c4:50:82:4b:63:23:bf:91:d1:65:d5:55:03:ff:
         c4:37:3a:09:d4:05:27:a3:29:6b:5a:fd:89:1d:1f:9e:af:67:
         9f:15:76:1c:0d:56:4a:a8:77:0a:97:9f:ac:15:c0:eb:de:cc:
         eb:66:96:c6:0a:98:68:c6:f3:73:d4:3c:15:2c:c4:5b:34:dd:
         c4:97:00:f8:a6:0b:ae:a3:ea:c2:b9:d6:ba:d2:4f:79:53:3e:
         70:0c:a3:d2:ef:25:51:65:96:71:04:d9:23:6f:2f:53:6d:b3:
         06:c8:95:2e:5f:cf:91:ad:43:a4:49:6f:d4:fa:d6:93:9c:da:
         5a:57:7a:67:1b:fd:51:d3:12:41:6a:bc:16:2f:b3:f7:1f:e4:
         95:47:b2:d6:28:19:c1:15:f3:e6:c4:ce:ea:92:0a:fe:3c:aa:
         89:78:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:09:08 2025 by rpki-client