Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130332e302f32342d3234203d3e20323731303234.roa
File:                     34352e3232372e3130332e302f32342d3234203d3e20323731303234.roa (raw, json)
Hash identifier:          zjKXruhOEeQAnxs5rOgyeGEN3WsoyUeeor6epbXO8Wc=
Subject key identifier:   0B:C5:5F:F6:ED:FE:87:94:1C:C3:53:6A:6F:88:88:5D:94:8A:6F:16
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       143AA52E24440681742EC324E9C7811E56CD7A29
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130332e302f32342d3234203d3e20323731303234.roa
Signing time:             Sat 07 Sep 2024 14:37:58 +0000
ROA not before:           Sat 07 Sep 2024 14:32:58 +0000
ROA not after:            Sat 06 Sep 2025 14:37:58 +0000
asID:                     271024
IP address blocks:        45.227.103.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Sep 2024 14:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3a:a5:2e:24:44:06:81:74:2e:c3:24:e9:c7:81:1e:56:cd:7a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Sep  7 14:32:58 2024 GMT
            Not After : Sep  6 14:37:58 2025 GMT
        Subject: CN=0BC55FF6EDFE87941CC3536A6F88885D948A6F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:90:6e:9d:0d:ba:bd:16:99:d5:75:52:4e:
                    96:0b:67:9c:dd:e1:3b:47:1d:c5:1f:25:7d:37:b3:
                    7c:4c:c4:19:a0:1b:76:58:1a:7a:d6:40:47:f2:a4:
                    4e:52:95:90:04:d2:aa:d2:0b:8a:e0:e1:0c:11:b1:
                    89:eb:c5:0e:bc:3e:83:e2:1d:8d:c2:d5:be:f9:91:
                    20:d0:4f:1d:9c:44:71:e7:2a:18:ec:67:60:a7:14:
                    84:25:eb:e4:6e:89:16:dc:cf:8e:c9:7f:81:f3:f9:
                    29:15:15:47:13:20:eb:53:03:2c:d5:a5:74:7f:d3:
                    17:2b:d9:4d:d3:43:74:0c:f5:0f:8f:72:ab:ee:21:
                    d4:9f:8a:5e:fb:ff:8c:96:d3:3b:7f:3b:b9:a2:dc:
                    96:53:ba:2d:24:41:67:ee:f9:c6:b2:49:eb:6e:b0:
                    4d:c8:b3:f3:20:a1:46:26:11:40:1e:32:91:15:a5:
                    0a:fd:0b:d7:be:ac:bf:1f:1d:0f:13:4c:d4:32:6f:
                    b9:d8:0a:d4:e4:04:2f:35:fa:96:3c:e3:a8:39:99:
                    40:42:bb:4c:31:63:be:21:fc:71:4e:cb:7b:6f:ee:
                    1c:f3:cc:78:c2:9e:dc:67:dd:19:de:f2:e2:4f:2e:
                    82:8b:4d:90:47:41:af:00:ef:a6:61:26:93:0c:f0:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C5:5F:F6:ED:FE:87:94:1C:C3:53:6A:6F:88:88:5D:94:8A:6F:16
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130332e302f32342d3234203d3e20323731303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:7e:45:35:02:ed:46:53:65:eb:46:b9:c3:0e:43:f2:e8:b4:
         f1:1b:ec:d0:2b:b1:65:5e:6f:b0:1e:a4:2f:93:ae:97:ad:26:
         40:3c:4d:e2:79:07:a8:da:2c:94:47:30:90:5f:42:bf:b6:88:
         2b:6c:8c:a8:e5:c9:46:c3:14:16:4f:cb:ec:a3:d7:e4:fa:1a:
         98:20:e6:bf:13:8c:ba:f2:9e:4d:f3:f0:e1:27:61:65:6f:29:
         98:fe:30:94:fb:07:06:85:9c:59:d7:b8:67:ea:e3:11:82:bd:
         8e:f7:dd:36:b9:30:e0:53:66:b3:be:02:2d:0d:1c:43:67:b6:
         4c:c6:1a:c3:24:22:91:5e:f2:81:78:59:f6:66:82:81:04:e9:
         ac:50:14:da:83:74:b1:78:a0:4f:6a:5c:dd:80:a2:21:90:91:
         89:0b:f5:99:c3:1d:46:9b:8c:2f:a2:e5:bb:fc:42:17:d2:c9:
         5a:a8:ed:bb:6b:41:b8:34:6c:5e:fb:fc:b1:a1:ad:d0:69:12:
         a9:38:a1:3c:0d:2c:2f:f9:40:77:a6:c1:17:f6:a8:9f:3a:dc:
         08:7f:01:72:1c:3f:2b:72:39:f1:7a:a7:6d:ef:93:cb:d8:9c:
         92:ad:66:ef:ee:c2:f2:3b:d0:41:9c:3b:c5:a6:d9:a1:55:4f:
         b3:f3:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:01:19 2025 by rpki-client