Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32342d3332203d3e20323638333834.roa
File:                     34352e3233392e38302e302f32342d3332203d3e20323638333834.roa (raw, json)
Hash identifier:          8atfCf8gNzEYcBySxxdN6V/osqlv+xaORlzqFP48SdQ=
Subject key identifier:   86:E1:58:EE:A5:25:7D:C4:C6:CD:B5:15:5D:85:F6:53:02:FC:93:3F
Certificate issuer:       /CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
Certificate serial:       303749A5356A6822043A403F70E58D89D24C0E70
Authority key identifier: AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32342d3332203d3e20323638333834.roa
Signing time:             Mon 26 May 2025 20:00:39 +0000
ROA not before:           Mon 26 May 2025 19:55:39 +0000
ROA not after:            Mon 25 May 2026 20:00:39 +0000
asID:                     268384
IP address blocks:        45.239.80.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Tue 27 May 2025 11:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:37:49:a5:35:6a:68:22:04:3a:40:3f:70:e5:8d:89:d2:4c:0e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
        Validity
            Not Before: May 26 19:55:39 2025 GMT
            Not After : May 25 20:00:39 2026 GMT
        Subject: CN=86E158EEA5257DC4C6CDB5155D85F65302FC933F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:2e:6d:34:d1:fd:94:cc:4f:74:a9:21:bb:
                    5f:d4:87:37:a7:dd:73:42:e4:33:00:17:42:57:3c:
                    81:3d:ed:7f:33:46:e6:14:5e:a3:98:be:0e:50:22:
                    57:dd:24:45:31:3d:84:ad:e6:c9:15:26:58:30:41:
                    be:c3:ee:58:13:2f:01:f6:0c:c7:40:ca:a7:43:15:
                    b4:1a:6f:d5:2f:43:5b:55:aa:78:7e:9e:d7:d5:5d:
                    5c:6d:45:58:c4:79:ee:53:52:a2:b7:f3:df:a9:b7:
                    34:f0:18:e8:78:c6:ec:d4:f5:e1:a9:99:56:79:fd:
                    7c:90:14:86:70:de:99:89:3a:77:07:38:b7:1e:be:
                    d6:ca:92:fd:c3:cf:31:e8:16:4a:aa:d1:69:00:de:
                    d2:18:c2:41:a4:fd:3a:10:6f:fd:58:60:5d:c4:2d:
                    b2:50:46:b3:fb:7b:c7:2a:70:e9:9c:06:20:dd:79:
                    a7:18:99:11:5a:26:18:5b:51:58:b8:b2:41:1e:5c:
                    3e:17:d2:96:92:51:7f:60:e2:65:d2:af:d5:f8:58:
                    c2:6f:1d:e5:54:33:0d:23:aa:29:9a:1e:f4:02:2a:
                    30:5e:97:f5:d0:62:95:16:9b:0b:ee:60:c9:d2:b4:
                    47:99:8c:0a:32:f4:dc:5b:1a:ca:78:b0:1d:f5:d2:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:58:EE:A5:25:7D:C4:C6:CD:B5:15:5D:85:F6:53:02:FC:93:3F
            X509v3 Authority Key Identifier:
                keyid:AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32342d3332203d3e20323638333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:91:e5:b6:d3:bb:30:b9:67:b9:83:36:e8:5d:ae:7f:f2:02:
         f5:e6:f1:44:9d:df:80:6c:e6:94:1e:f4:7b:b6:42:65:8d:c4:
         11:db:e6:e6:5b:75:8d:a2:ac:ed:c6:d0:21:65:a8:a7:ae:e8:
         77:9c:3a:1d:8c:c8:b4:df:9f:9e:b2:2f:92:d1:f8:03:a7:eb:
         0e:41:13:b3:a9:1a:ec:76:2a:ad:2d:c6:47:b9:9d:b8:58:5b:
         9a:66:e9:ea:2f:e6:3c:90:27:e8:72:c9:01:0e:d8:46:40:88:
         08:0f:7f:fd:f9:68:12:20:6d:94:ea:24:46:08:48:d5:d3:f1:
         04:57:0e:25:40:18:a0:16:cf:f3:cd:94:54:28:f4:6f:6a:23:
         bd:cf:b2:ff:8e:8c:d3:db:51:17:fd:f6:9f:42:83:78:96:c8:
         38:07:d9:c8:c5:50:e2:e0:e1:6a:99:ba:c1:ff:70:2c:12:c7:
         a7:ae:5b:1f:0b:a9:94:1e:3b:03:8d:f3:8e:6a:db:02:64:eb:
         c0:d0:3b:2f:f3:33:53:b0:ac:63:4d:1f:c1:c8:cd:f7:90:32:
         3f:3f:d3:6e:2f:99:d8:8a:16:f6:1c:4c:2a:7b:e4:e2:08:ee:
         83:c0:87:df:ff:e7:1d:e5:d9:09:fe:4f:c3:35:96:93:43:44:
         fc:cc:db:a2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMDdJpTVqaCIEOkA/cOWNidJMDnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI4NkY0RTQyNTg2NzhERkEyQkZDQjI4MUZGNTc4QzAy
OURGOTU2MzAeFw0yNTA1MjYxOTU1MzlaFw0yNjA1MjUyMDAwMzlaMDMxMTAvBgNV
BAMTKDg2RTE1OEVFQTUyNTdEQzRDNkNEQjUxNTVEODVGNjUzMDJGQzkzM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAy5tNNH9lMxPdKkhu1/Uhzen
3XNC5DMAF0JXPIE97X8zRuYUXqOYvg5QIlfdJEUxPYSt5skVJlgwQb7D7lgTLwH2
DMdAyqdDFbQab9UvQ1tVqnh+ntfVXVxtRVjEee5TUqK389+ptzTwGOh4xuzU9eGp
mVZ5/XyQFIZw3pmJOncHOLcevtbKkv3DzzHoFkqq0WkA3tIYwkGk/ToQb/1YYF3E
LbJQRrP7e8cqcOmcBiDdeacYmRFaJhhbUVi4skEeXD4X0paSUX9g4mXSr9X4WMJv
HeVUMw0jqimaHvQCKjBel/XQYpUWmwvuYMnStEeZjAoy9NxbGsp4sB310jWNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhuFY7qUlfcTGzbUVXYX2UwL8kz8wHwYDVR0j
BBgwFoAUq4b05CWGeN+iv8soH/V4wCnflWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ZlOWtXY05wMVNUOG1HVWNmZkFYQnBhRnVxTEVMREhYOVU0VzFNYUtI
M2YvMC9BQjg2RjRFNDI1ODY3OERGQTJCRkNCMjgxRkY1NzhDMDI5REY5NTYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCODZGNEU0MjU4Njc4REZB
MkJGQ0IyODFGRjU3OEMwMjlERjk1NjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdGZTlrV2NOcDFTVDhtR1VjZmZBWEJwYUZ1cUxFTERIWDlVNFcxTWFLSDNmLzAv
MzQzNTJlMzIzMzM5MmUzODMwMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNjM4
MzMzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe9QMA0GCSqGSIb3DQEBCwUAA4IBAQAekeW207sw
uWe5gzboXa5/8gL15vFEnd+AbOaUHvR7tkJljcQR2+bmW3WNoqztxtAhZainruh3
nDodjMi035+esi+S0fgDp+sOQROzqRrsdiqtLcZHuZ24WFuaZunqL+Y8kCfocskB
DthGQIgID3/9+WgSIG2U6iRGCEjV0/EEVw4lQBigFs/zzZRUKPRvaiO9z7L/jozT
21EX/fafQoN4lsg4B9nIxVDi4OFqmbrB/3AsEsenrlsfC6mUHjsDjfOOatsCZOvA
0Dsv8zNTsKxjTR/ByM33kDI/P9NuL5nYihb2HEwqe+TiCO6DwIff/+cd5dkJ/k/D
NZaTQ0T8zNui
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:57:20 2025 by rpki-client