Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32332d3233203d3e20323639333539.roa
File:                     34352e3138342e37302e302f32332d3233203d3e20323639333539.roa (raw, json)
Hash identifier:          AxWns8cyRrxuOjn9BF7jeIPrBb2kYs7loJh5hQm+iAc=
Subject key identifier:   2C:DD:62:36:90:AF:E5:0B:C5:B1:12:A5:53:89:74:E3:5C:A9:47:36
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       5BF2741794A5B43ACE805855AAC95621FF5D44D1
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32332d3233203d3e20323639333539.roa
Signing time:             Wed 03 Sep 2025 16:41:12 +0000
ROA not before:           Wed 03 Sep 2025 16:36:12 +0000
ROA not after:            Wed 02 Sep 2026 16:41:12 +0000
asID:                     269359
IP address blocks:        45.184.70.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 03 Sep 2025 20:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f2:74:17:94:a5:b4:3a:ce:80:58:55:aa:c9:56:21:ff:5d:44:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Sep  3 16:36:12 2025 GMT
            Not After : Sep  2 16:41:12 2026 GMT
        Subject: CN=2CDD623690AFE50BC5B112A5538974E35CA94736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:82:40:b4:d2:98:97:e8:32:9d:62:ae:58:
                    8a:1b:ee:f7:4e:08:c9:28:3d:ca:c5:0c:12:33:1e:
                    ef:e6:79:d0:83:73:49:c2:b5:18:37:63:1c:96:c6:
                    9b:08:52:41:3d:65:79:65:d5:3f:a6:1b:d2:d8:04:
                    61:ae:76:fa:81:be:bc:5c:c5:2f:4a:9f:39:85:1f:
                    f2:86:f4:d3:bc:60:86:2d:a9:97:f6:38:2f:78:97:
                    4f:6d:0e:7d:8a:63:db:f2:20:93:39:72:3a:6f:c6:
                    e2:2e:d1:7f:c7:18:3b:f5:e7:06:ff:6b:4f:5b:5f:
                    68:78:c1:c7:e6:1c:2b:2d:1c:5b:ec:8b:2f:dd:11:
                    9a:0b:e6:b9:c9:d4:bd:2c:b1:88:40:29:5a:25:44:
                    32:88:2b:d7:7f:dd:5b:e9:d7:bd:69:b9:3f:e5:8a:
                    22:02:4d:90:4c:fa:2e:38:08:dc:dd:b4:cf:30:a0:
                    d7:a4:f2:2d:2f:db:80:8c:2b:40:d6:23:af:7f:82:
                    f0:24:2f:ff:f1:dc:46:86:15:82:32:9b:ce:f8:60:
                    3f:35:27:0b:cb:cf:1a:39:39:82:65:a9:bb:39:c0:
                    7d:7a:f7:02:3d:13:5a:a7:ef:83:13:20:d5:06:6e:
                    78:55:e8:f2:31:21:bd:42:74:a0:eb:de:d2:13:a8:
                    04:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:62:36:90:AF:E5:0B:C5:B1:12:A5:53:89:74:E3:5C:A9:47:36
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32332d3233203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:61:d1:2e:40:fb:f1:79:41:f6:45:2c:46:da:f2:0b:69:66:
         c5:8e:03:b8:5b:e1:7e:c7:89:5d:6d:09:91:2c:67:50:7e:1d:
         7e:77:6a:11:51:e8:cc:4f:12:03:28:5f:27:24:d1:e6:d4:ec:
         a1:67:17:4f:2e:97:6e:20:56:a9:8b:3c:b7:06:f6:ab:fa:b0:
         d6:63:07:13:c9:41:2a:c4:32:e3:1a:90:a4:d8:c6:36:16:83:
         c7:23:c9:11:a7:e6:d9:d0:a3:c5:e8:56:48:3f:57:eb:5b:a7:
         52:4d:62:4b:32:85:42:e9:6a:5e:9d:4a:eb:5c:bb:e4:b1:b9:
         51:b7:c3:5f:00:1c:96:21:39:42:3f:71:e6:0d:e7:88:6f:f1:
         ec:fb:ba:6b:dd:b0:b4:75:75:55:9d:99:45:02:aa:ea:26:30:
         05:f0:e1:f0:c9:65:de:c6:57:36:40:cf:38:6b:99:4d:d8:60:
         42:dd:4b:b1:65:dc:ef:13:81:ca:05:69:cc:7f:a6:bc:64:dc:
         b2:b4:14:b0:ec:60:0f:c7:f3:f7:af:a9:73:92:ec:c0:d8:ce:
         3f:3f:cd:4a:14:80:89:b5:53:8c:94:12:f2:74:4d:e8:44:3b:
         e0:63:e3:1b:fb:9b:68:1e:94:1b:64:b9:28:0d:95:f0:cd:47:
         17:cd:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:51:30 2025 by rpki-client