Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32342d3234203d3e20323639333539.roa
File:                     34352e3138342e36382e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          GVjh9oHoBglXfhu8XkmHco7rILI9oPBO1pjtjQut0PM=
Subject key identifier:   89:30:25:A8:D3:0B:91:D6:B2:4C:6E:FC:28:E7:65:FA:4B:AB:E9:7A
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       355E34AFA42CCBA107CA91E1B56107597E41B0B8
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32342d3234203d3e20323639333539.roa
Signing time:             Wed 03 Sep 2025 16:41:14 +0000
ROA not before:           Wed 03 Sep 2025 16:36:14 +0000
ROA not after:            Wed 02 Sep 2026 16:41:14 +0000
asID:                     269359
IP address blocks:        45.184.68.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 03 Sep 2025 20:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5e:34:af:a4:2c:cb:a1:07:ca:91:e1:b5:61:07:59:7e:41:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Sep  3 16:36:14 2025 GMT
            Not After : Sep  2 16:41:14 2026 GMT
        Subject: CN=893025A8D30B91D6B24C6EFC28E765FA4BABE97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:82:1a:da:83:61:e4:21:90:14:e7:ec:a6:
                    6f:81:ab:bf:55:cd:6e:93:5b:9a:b2:6c:56:42:e5:
                    08:7a:6d:77:8f:2d:23:5c:5f:94:b7:ec:6b:88:c5:
                    09:3a:04:7a:8c:6d:d1:e7:c0:cb:f3:51:8b:7b:e6:
                    85:ad:9b:dd:3d:af:54:59:2d:5b:ff:c3:c5:22:b4:
                    96:20:ce:db:8a:17:e6:72:0c:ab:9f:a9:a5:90:77:
                    da:a3:2a:13:37:a9:82:07:7b:de:fd:dd:84:78:53:
                    b3:22:77:71:53:b9:e1:29:d9:37:2f:e5:a2:eb:c2:
                    8a:a5:a8:88:09:f7:5e:61:20:25:f1:54:dc:71:ba:
                    8b:14:35:12:91:a9:61:90:25:db:e1:86:15:3e:9d:
                    96:5a:15:ed:54:f7:24:ac:f7:94:cb:f9:87:a7:12:
                    eb:e9:10:ce:a4:41:f1:08:6b:dc:3f:f6:99:77:21:
                    16:35:63:21:41:05:f9:f4:a3:f0:b2:a5:9f:d0:e9:
                    00:d5:cb:cd:0e:f3:79:03:6d:c6:f0:6f:f5:1e:a7:
                    72:1a:48:93:8e:3a:40:7f:47:1a:41:98:68:19:cd:
                    0c:c1:f2:7d:77:df:09:f0:3f:8c:7c:43:40:72:f8:
                    7d:26:56:d6:83:d2:69:33:24:83:da:ff:3c:9d:19:
                    d6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:30:25:A8:D3:0B:91:D6:B2:4C:6E:FC:28:E7:65:FA:4B:AB:E9:7A
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:65:d0:61:8f:2b:f2:4c:84:7e:fe:da:04:e3:38:a8:63:
         d0:b3:b8:ed:4a:ff:b8:c8:11:00:92:9a:b4:ce:36:fe:bb:57:
         83:66:ec:80:0b:cb:46:67:5f:84:68:de:d2:c5:18:78:e6:3a:
         2d:c9:bd:9e:64:fb:13:19:cf:3a:56:7c:98:df:73:4b:5e:19:
         db:82:5d:b5:55:79:60:e4:b7:5d:d0:d9:e7:96:fd:6a:18:85:
         86:b4:7c:e6:66:7f:82:48:e4:69:ad:ea:e6:a2:ea:6e:8b:9e:
         71:5d:30:98:ba:4b:9d:30:bb:dc:69:42:08:cf:e8:4f:21:59:
         83:23:3f:1f:7b:ef:79:9b:cf:47:83:ba:21:83:84:83:34:20:
         62:e5:cc:c2:b3:7d:93:4c:26:63:5c:2d:7c:ff:aa:9e:59:6b:
         b4:b3:5d:e9:cc:4b:8d:eb:ad:a2:2e:95:78:d5:45:92:ce:43:
         5d:c3:c4:64:4d:02:2f:0e:bc:62:ee:33:51:e1:e8:ad:a5:04:
         31:d6:7e:3e:7b:9f:79:71:c8:8c:ff:b0:ba:2a:dd:b6:21:4f:
         4c:89:70:55:6e:f7:77:bd:7c:5d:76:60:42:2d:0a:a9:c4:f7:
         5d:b8:12:95:b0:18:0e:4c:46:d8:2d:95:15:97:6a:e3:db:7c:
         76:42:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:53:01 2025 by rpki-client