Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235302e302f32332d3234203d3e20323638323937.roa
File:                     34352e3233372e3235302e302f32332d3234203d3e20323638323937.roa (raw, json)
Hash identifier:          vKlXgvk0L6fDy6WtSs/l4gaULginpDBWtyMYtbMk9uA=
Subject key identifier:   84:BE:45:3D:1C:D7:F0:A3:30:E4:2A:48:06:75:C5:CF:0A:C8:14:90
Certificate issuer:       /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial:       5BCF108EA9751BADB6CC7853F439275BF9F0B817
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235302e302f32332d3234203d3e20323638323937.roa
Signing time:             Mon 13 Jan 2025 13:06:45 +0000
ROA not before:           Mon 13 Jan 2025 13:01:45 +0000
ROA not after:            Mon 12 Jan 2026 13:06:45 +0000
asID:                     268297
IP address blocks:        45.237.250.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Sat 08 Feb 2025 20:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cf:10:8e:a9:75:1b:ad:b6:cc:78:53:f4:39:27:5b:f9:f0:b8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
        Validity
            Not Before: Jan 13 13:01:45 2025 GMT
            Not After : Jan 12 13:06:45 2026 GMT
        Subject: CN=84BE453D1CD7F0A330E42A480675C5CF0AC81490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:7e:73:f1:72:e5:df:31:e8:e8:82:02:e6:
                    3b:9a:12:57:e2:b7:25:74:de:0a:ec:2a:49:01:7a:
                    75:1f:c2:24:ae:ff:4a:1d:a1:e9:10:28:84:f2:78:
                    84:a7:8e:25:8b:1c:20:cd:f2:d0:ce:fd:6a:19:30:
                    13:61:4e:b2:f8:29:a4:0a:24:c8:32:51:c5:ff:4b:
                    9f:77:a7:25:a3:aa:46:d3:55:e8:0c:74:b3:73:d9:
                    86:45:5d:d5:1f:01:19:79:10:ff:9d:19:a2:ba:e7:
                    52:14:c4:a7:dc:64:09:81:61:49:01:10:ae:a8:37:
                    52:6d:f2:cf:33:b4:52:99:b7:c3:b2:38:da:a0:39:
                    18:c3:f4:dc:63:30:a4:0b:ee:82:54:99:98:53:5e:
                    71:43:30:cb:0d:6f:4f:33:fb:72:44:fc:ac:26:eb:
                    72:2d:fd:4b:df:33:a4:4d:ae:bf:bc:8c:74:3c:cd:
                    e5:58:b7:14:dc:dd:0e:b5:36:61:20:6d:c4:e2:f4:
                    10:10:53:54:51:df:ca:aa:ce:3d:93:45:03:a7:66:
                    53:19:d3:48:c8:7d:c6:0e:be:58:d7:dd:da:68:6e:
                    64:aa:05:a9:73:77:3f:07:4e:a3:d6:d9:3a:1d:75:
                    6f:ba:a9:94:81:5c:8f:90:78:2a:af:44:7c:19:57:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BE:45:3D:1C:D7:F0:A3:30:E4:2A:48:06:75:C5:CF:0A:C8:14:90
            X509v3 Authority Key Identifier:
                keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3235302e302f32332d3234203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:a4:5a:f0:ee:54:59:47:22:6f:b7:c4:43:81:c9:75:eb:43:
         65:ee:ff:20:40:d2:11:ed:1f:88:6b:a6:4e:50:1d:b4:ef:bb:
         a3:b1:ac:49:16:21:69:e7:55:18:f6:11:c4:8d:8e:0a:3a:16:
         9e:f5:b2:7f:d1:ce:98:f0:06:97:e7:69:00:51:3d:3f:e4:51:
         08:3c:14:87:17:21:5c:17:1b:f9:0b:56:94:8c:da:7d:e0:1c:
         2c:24:a6:b5:98:ba:eb:c3:2d:03:c8:e7:e7:ca:8f:c6:55:58:
         8f:c2:02:70:ef:1a:27:14:c3:01:4f:e2:f8:42:25:bf:a9:d9:
         6a:66:ef:69:5d:49:ad:01:9f:2f:30:00:23:25:ab:fc:c3:f0:
         26:c4:ce:14:81:cb:04:e0:da:da:fd:cc:71:47:fc:3f:4c:9c:
         b7:42:ce:a9:5c:92:38:eb:89:86:6d:10:9e:6d:66:b1:fa:70:
         2f:f3:66:03:38:57:ce:12:47:29:81:cc:5d:7c:6e:99:59:f3:
         e0:48:f0:46:46:fc:83:f5:b6:9a:da:ba:58:d3:a8:73:87:91:
         a3:10:75:6a:f8:60:27:a6:9f:8b:78:97:f8:31:b6:cc:5d:c1:
         85:7b:14:6c:0a:97:19:d6:cc:de:de:b7:de:52:83:f0:98:ab:
         22:f0:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:32:22 2025 by rpki-client