Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232372e302f32342d3332203d3e20323638363338.roa
File:                     34352e3136342e3232372e302f32342d3332203d3e20323638363338.roa (raw, json)
Hash identifier:          bG/X5Xb+Z7C2i30dTDuOP9s4QSAdc0J29qPZU6hPe9Y=
Subject key identifier:   F9:F0:FF:BF:3F:75:ED:CE:B0:56:9D:6C:3A:B1:08:17:67:A0:7A:C1
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       6A29A2A7525FCACF4F919A7BDFA705AD6378B21D
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232372e302f32342d3332203d3e20323638363338.roa
Signing time:             Mon 09 Jun 2025 17:01:26 +0000
ROA not before:           Mon 09 Jun 2025 16:56:26 +0000
ROA not after:            Mon 08 Jun 2026 17:01:26 +0000
asID:                     268638
IP address blocks:        45.164.227.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Tue 10 Jun 2025 17:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:29:a2:a7:52:5f:ca:cf:4f:91:9a:7b:df:a7:05:ad:63:78:b2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Jun  9 16:56:26 2025 GMT
            Not After : Jun  8 17:01:26 2026 GMT
        Subject: CN=F9F0FFBF3F75EDCEB0569D6C3AB1081767A07AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c5:39:95:13:0b:f0:f0:62:f0:72:7a:9b:ac:
                    57:d6:6a:c4:6a:09:7a:9f:d3:bc:a4:28:cf:79:a3:
                    bc:57:0c:22:7c:c0:1d:eb:c4:8a:de:16:79:d4:4b:
                    47:d0:5f:2a:c2:8b:b1:40:3d:40:bd:fb:8c:23:cd:
                    fd:cd:8c:c5:67:80:30:7a:83:2b:72:08:f7:4f:b6:
                    b9:12:72:ef:52:21:04:89:b0:76:58:c6:4e:b0:bc:
                    b6:60:6a:88:2b:cc:f3:58:5f:d7:bf:d3:9f:32:68:
                    c9:21:43:ab:41:48:f3:52:d9:a3:e6:e3:12:92:5d:
                    46:40:b0:72:93:d0:1c:a5:8d:b9:12:31:a0:f6:2a:
                    95:0e:69:9e:2a:a4:d2:6c:0e:66:c0:b4:c2:03:3d:
                    12:2d:54:ed:d5:da:10:6c:8c:00:24:b2:11:88:7b:
                    71:cb:25:e2:ea:ec:50:eb:b7:c9:9b:52:f5:a9:64:
                    4f:cb:2a:14:c9:98:92:f5:23:2c:10:09:20:18:28:
                    cf:45:4c:2c:32:28:3e:f5:aa:ba:0b:bb:4a:38:ff:
                    d3:22:c3:e5:d5:c0:ab:3f:3b:4e:0b:52:58:43:20:
                    08:16:e3:ff:c9:5d:89:a1:b9:2a:66:66:dc:ca:5f:
                    94:b1:a2:a9:16:c7:ec:0c:3b:14:7d:6b:bf:89:0f:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F0:FF:BF:3F:75:ED:CE:B0:56:9D:6C:3A:B1:08:17:67:A0:7A:C1
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232372e302f32342d3332203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:21:f3:cc:21:08:fc:0b:12:3e:e5:66:d5:42:6e:50:44:e5:
         28:da:0a:8b:8f:fb:b2:51:dd:ab:b1:e6:fc:b9:10:dc:f6:ff:
         76:14:d9:cf:33:e9:64:37:b1:bf:9b:cc:51:d4:16:6f:f9:a4:
         94:65:e4:4c:93:69:3f:e9:67:58:a4:4b:80:5b:5c:d2:1b:0e:
         51:44:d8:fb:7e:86:fd:be:00:90:fd:7a:4f:3c:f0:36:85:7e:
         29:24:d1:41:d9:76:da:3e:d8:3f:73:5a:bc:7d:d5:06:cc:36:
         91:a6:28:f8:61:0b:32:87:88:1c:f4:04:c3:cb:7f:4d:02:41:
         c5:5a:5b:94:5a:c6:25:22:05:7c:b4:42:80:28:83:3e:6f:37:
         e7:13:20:f4:e4:7e:c1:0a:11:4d:2b:aa:54:7f:a9:a0:f1:82:
         d2:8e:5e:88:4c:61:17:82:33:6e:ba:37:d5:7c:d7:a1:73:54:
         08:2e:f8:4b:87:45:34:32:e5:43:d0:f1:a9:e6:db:c4:eb:dc:
         58:ab:39:2c:31:13:c1:d0:eb:ff:75:50:1f:05:b0:7b:65:04:
         4b:e8:18:80:a3:93:05:b5:4e:dd:e7:69:12:88:6e:66:36:d9:
         db:4e:d6:1f:e9:c8:f1:8d:1d:dc:25:5e:a2:e9:a9:37:26:fb:
         20:53:c0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:04:14 2025 by rpki-client