Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32332d3332203d3e20323632353838.roa
File:                     34352e3138322e36302e302f32332d3332203d3e20323632353838.roa (raw, json)
Hash identifier:          FSphwZRokx7Xp3Epm9EOiRV7B/gsmGk34KB0u0tlp80=
Subject key identifier:   5E:1F:EE:DE:F2:30:78:E9:D7:03:BC:8C:86:DF:F2:7D:11:D8:B4:AC
Certificate issuer:       /CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
Certificate serial:       78230983849A9D2C94B19CBC64E1E8F7CCF721A7
Authority key identifier: 44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32332d3332203d3e20323632353838.roa
Signing time:             Mon 19 May 2025 14:34:49 +0000
ROA not before:           Mon 19 May 2025 14:29:49 +0000
ROA not after:            Mon 18 May 2026 14:34:49 +0000
asID:                     262588
IP address blocks:        45.182.60.0/23 maxlen: 32
Validation:               Failed, certificate revoked on Sat 31 May 2025 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:23:09:83:84:9a:9d:2c:94:b1:9c:bc:64:e1:e8:f7:cc:f7:21:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
        Validity
            Not Before: May 19 14:29:49 2025 GMT
            Not After : May 18 14:34:49 2026 GMT
        Subject: CN=5E1FEEDEF23078E9D703BC8C86DFF27D11D8B4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:6c:34:34:f2:d8:9a:44:a1:a1:1c:ce:9c:
                    6a:60:63:a5:23:c0:87:86:01:c6:47:a0:ba:11:2d:
                    f6:de:58:17:e9:2d:ed:ec:20:6a:01:c3:76:f1:0d:
                    8e:57:29:68:b0:45:61:dc:cc:92:a5:ed:c6:53:ef:
                    cc:a3:0b:b8:9e:53:8a:b3:9e:65:b4:9e:80:bf:6c:
                    d6:e8:c4:24:a0:38:5e:df:3d:b1:84:05:54:3e:e1:
                    73:ff:61:60:24:27:ec:84:1d:5f:e4:c1:91:1e:67:
                    a4:e3:22:e9:9f:da:81:a1:a7:58:be:6a:aa:4d:3f:
                    6b:1c:b5:f5:fb:94:f9:3c:bf:49:1c:d9:3d:4f:dc:
                    20:fb:22:89:8f:23:db:cf:b2:87:8b:a0:b4:6b:25:
                    00:7d:4d:eb:71:35:39:36:a8:ca:eb:f0:7b:72:60:
                    7c:52:a7:2c:25:e8:2e:9e:a9:2f:61:a4:49:e3:19:
                    91:a7:e6:72:18:c4:54:96:6d:05:63:c6:3a:e4:61:
                    24:72:ba:27:55:4a:dc:63:bc:99:05:03:9f:1e:91:
                    54:a3:51:75:db:aa:ff:80:81:68:3b:3c:d0:53:03:
                    a6:6f:bf:c6:25:92:eb:fb:77:33:3e:1b:5b:4b:fe:
                    4b:14:34:f2:99:b7:d5:da:93:c8:47:39:f4:09:c2:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:EE:DE:F2:30:78:E9:D7:03:BC:8C:86:DF:F2:7D:11:D8:B4:AC
            X509v3 Authority Key Identifier:
                keyid:44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36302e302f32332d3332203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:cc:a4:9b:57:ff:73:a5:da:db:67:a0:8d:df:b3:e8:c8:1a:
         d4:7d:64:04:60:13:02:5f:e1:fa:9e:88:7c:6a:ce:81:3e:b7:
         6d:86:6a:e8:ee:6d:76:4d:42:e3:28:ed:75:33:85:20:ee:34:
         9d:e7:4f:49:07:7f:36:cc:4e:26:2a:41:47:de:ad:32:fb:80:
         ef:ec:52:08:18:da:bf:83:c7:d8:21:d1:0b:ea:7b:a5:b8:34:
         1b:4e:ba:39:9e:c6:ba:f7:71:de:c3:54:0c:a3:4e:50:cf:2a:
         b3:48:5e:d6:04:2c:d6:d3:25:09:af:b9:ee:e1:a6:06:f2:cd:
         fc:35:83:a3:b4:ee:c4:fc:27:d2:d6:76:a2:bd:c0:dd:e6:21:
         d8:6f:f1:16:a3:48:72:7e:56:fc:2a:bf:74:f2:8e:af:3e:4d:
         0b:9e:40:17:ab:99:0a:ea:27:b7:31:7f:2b:5f:c1:f4:16:6f:
         cd:8d:83:8d:4e:a5:a7:1c:b0:35:94:d0:c0:27:c8:ce:42:66:
         cb:0d:05:de:2b:0e:46:dd:fb:2e:07:1b:b9:85:17:50:1a:71:
         57:72:cf:43:4b:60:e5:79:a8:ba:6b:ae:98:e7:27:27:91:14:
         38:92:88:62:e5:f7:98:45:3f:fd:ea:85:c7:b7:cc:6e:69:ae:
         77:03:19:5c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeCMJg4SanSyUsZy8ZOHo98z3IacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRGNkQ4M0JFMEZBNUQzQjIwOUNCODlCNTE4Rjc0REEw
Q0QyQkE5QTAeFw0yNTA1MTkxNDI5NDlaFw0yNjA1MTgxNDM0NDlaMDMxMTAvBgNV
BAMTKDVFMUZFRURFRjIzMDc4RTlENzAzQkM4Qzg2REZGMjdEMTFEOEI0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3u2w0NPLYmkShoRzOnGpgY6Uj
wIeGAcZHoLoRLfbeWBfpLe3sIGoBw3bxDY5XKWiwRWHczJKl7cZT78yjC7ieU4qz
nmW0noC/bNboxCSgOF7fPbGEBVQ+4XP/YWAkJ+yEHV/kwZEeZ6TjIumf2oGhp1i+
aqpNP2sctfX7lPk8v0kc2T1P3CD7IomPI9vPsoeLoLRrJQB9TetxNTk2qMrr8Hty
YHxSpywl6C6eqS9hpEnjGZGn5nIYxFSWbQVjxjrkYSRyuidVStxjvJkFA58ekVSj
UXXbqv+AgWg7PNBTA6Zvv8Ylkuv7dzM+G1tL/ksUNPKZt9Xak8hHOfQJwjYPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXh/u3vIweOnXA7yMht/yfRHYtKwwHwYDVR0j
BBgwFoAURPbYO+D6XTsgnLibUY902gzSupowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRUNDFTbTZjWlByM0R5VXVBTTdKVDdQZnJ4aU54a1paZGZ2UFpETmo3
WXAvMC80NEY2RDgzQkUwRkE1RDNCMjA5Q0I4OUI1MThGNzREQTBDRDJCQTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RjZEODNCRTBGQTVEM0Iy
MDlDQjg5QjUxOEY3NERBMENEMkJBOUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0VDQxU202Y1pQcjNEeVV1QU03SlQ3UGZyeGlOeGtaWmRmdlBaRE5qN1lwLzAv
MzQzNTJlMzEzODMyMmUzNjMwMmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNjMy
MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbY8MA0GCSqGSIb3DQEBCwUAA4IBAQB6zKSbV/9z
pdrbZ6CN37PoyBrUfWQEYBMCX+H6noh8as6BPrdthmro7m12TULjKO11M4Ug7jSd
509JB382zE4mKkFH3q0y+4Dv7FIIGNq/g8fYIdEL6nuluDQbTro5nsa693Hew1QM
o05QzyqzSF7WBCzW0yUJr7nu4aYG8s38NYOjtO7E/CfS1naivcDd5iHYb/EWo0hy
flb8Kr908o6vPk0LnkAXq5kK6ie3MX8rX8H0Fm/NjYONTqWnHLA1lNDAJ8jOQmbL
DQXeKw5G3fsuBxu5hRdQGnFXcs9DS2Dleai6a66Y5ycnkRQ4kohi5feYRT/96oXH
t8xuaa53Axlc
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:13:02 2025 by rpki-client