Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232362e302f32342d3332203d3e20323638363338.roa
File:                     34352e3136342e3232362e302f32342d3332203d3e20323638363338.roa (raw, json)
Hash identifier:          cFyKvXy3jg/193BuXNARWVtBi9RkOO2uEMUayO+RsAA=
Subject key identifier:   24:77:83:69:51:1F:50:69:84:91:91:A3:CE:21:0F:AA:C2:A6:64:C8
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       0994921FB1E8FBB398AE73FC790655CE3ED57980
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232362e302f32342d3332203d3e20323638363338.roa
Signing time:             Mon 09 Jun 2025 17:01:22 +0000
ROA not before:           Mon 09 Jun 2025 16:56:22 +0000
ROA not after:            Mon 08 Jun 2026 17:01:22 +0000
asID:                     268638
IP address blocks:        45.164.226.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Tue 10 Jun 2025 17:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:94:92:1f:b1:e8:fb:b3:98:ae:73:fc:79:06:55:ce:3e:d5:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Jun  9 16:56:22 2025 GMT
            Not After : Jun  8 17:01:22 2026 GMT
        Subject: CN=24778369511F5069849191A3CE210FAAC2A664C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:00:62:75:09:b2:8c:d7:34:fc:33:ba:55:
                    aa:99:c3:40:69:d5:c8:f1:65:66:07:32:87:be:e3:
                    7b:35:a2:6a:3d:21:44:c3:f1:8d:9c:28:28:4c:07:
                    3b:37:72:fc:cb:81:21:bf:c8:3f:f5:1c:54:37:82:
                    82:fa:b6:2c:fc:28:79:8f:ee:fb:94:ac:c1:8b:85:
                    3f:da:c5:e9:ab:cb:e0:93:de:0c:80:1e:72:67:0a:
                    0b:19:79:b0:c6:c0:d4:49:b0:d4:0f:0b:8d:4a:1f:
                    89:28:a7:dd:a1:a4:f1:3a:e7:7f:a2:d6:b4:3c:e4:
                    3a:cc:b2:a8:c2:43:6a:10:08:d3:59:5e:da:5a:34:
                    94:20:f7:63:5f:9c:bd:be:3c:f1:6f:92:68:26:05:
                    e5:d7:a4:15:69:a1:dd:69:b8:1e:f9:d6:09:92:d6:
                    15:71:5d:26:a8:c2:aa:cf:e0:1e:d3:2d:ab:48:0e:
                    cf:45:d8:9b:51:5b:e3:a4:b5:6b:1a:09:62:2a:b8:
                    f5:4b:ae:1f:93:3a:00:d4:ae:5e:06:a1:67:a5:ab:
                    a3:4c:15:16:74:d5:ed:2d:6f:bf:6b:18:9f:53:76:
                    b1:df:b9:45:0a:41:f4:bf:8b:13:24:39:d8:63:f9:
                    c8:b6:f5:b2:b7:9b:50:bd:29:91:e0:37:4c:75:10:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:77:83:69:51:1F:50:69:84:91:91:A3:CE:21:0F:AA:C2:A6:64:C8
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232362e302f32342d3332203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d1:d0:e9:93:0e:8c:0d:a5:ce:f8:29:0f:cd:33:0c:ad:ce:
         25:64:e9:a9:62:16:4e:e2:b0:f6:83:15:d1:75:ab:8e:3d:f8:
         1f:75:1c:bb:c4:1e:a5:e5:44:be:78:d6:9d:53:21:da:7c:0f:
         f4:1f:25:70:dc:25:d0:f4:44:52:0f:60:08:ae:be:28:86:b6:
         16:b9:4b:33:a3:0e:08:f4:8d:d2:a8:51:35:41:1a:c3:6d:ba:
         04:63:8c:4b:54:7e:b5:c8:6f:40:8a:8a:ab:05:fa:a4:10:73:
         04:46:93:d2:5e:11:f0:61:61:0d:58:bd:e9:08:26:eb:cd:4a:
         9a:af:95:3d:47:42:5a:5b:fa:b5:f0:96:32:94:b7:5f:e3:b8:
         c0:bf:11:88:4d:09:c1:ae:af:6a:9d:68:00:93:5f:77:37:5a:
         fe:16:14:f1:fe:fb:5f:a7:90:d8:14:36:a2:8d:6e:ae:c1:60:
         4c:52:96:ac:18:9d:45:1b:8a:4b:9f:da:44:e3:dc:ad:3b:9f:
         73:02:ae:b7:91:c3:1c:fe:cd:41:3d:ce:1e:90:ad:35:b1:ef:
         02:9b:02:7a:26:15:61:fa:45:6f:71:55:69:7f:42:69:47:fa:
         e2:f7:87:55:91:23:fa:41:2e:02:0c:fe:c8:67:9b:03:e2:3c:
         cc:00:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:04:19 2025 by rpki-client