Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135362e302f32332d3233203d3e20323638363332.roa
File:                     34352e3136342e3135362e302f32332d3233203d3e20323638363332.roa (raw, json)
Hash identifier:          N50f/Ie0eO4qfLSGrei3B5khqyXosGOWj+R6asBMh5w=
Subject key identifier:   A0:8C:52:32:B2:97:E9:E1:FB:25:20:C6:57:62:F2:CF:E2:0C:CC:C6
Certificate issuer:       /CN=4F9A7B1115D45ADCE7E844980106788B7969390B
Certificate serial:       6FA6B936FAA8A864562DF7A7E80BD60CFCCE154F
Authority key identifier: 4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135362e302f32332d3233203d3e20323638363332.roa
Signing time:             Thu 26 Jun 2025 18:13:53 +0000
ROA not before:           Thu 26 Jun 2025 18:08:53 +0000
ROA not after:            Thu 25 Jun 2026 18:13:53 +0000
asID:                     268632
IP address blocks:        45.164.156.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 30 Jun 2025 14:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a6:b9:36:fa:a8:a8:64:56:2d:f7:a7:e8:0b:d6:0c:fc:ce:15:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F9A7B1115D45ADCE7E844980106788B7969390B
        Validity
            Not Before: Jun 26 18:08:53 2025 GMT
            Not After : Jun 25 18:13:53 2026 GMT
        Subject: CN=A08C5232B297E9E1FB2520C65762F2CFE20CCCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:04:80:ec:4d:dc:7e:93:8a:f0:c8:c3:17:
                    9f:8c:7f:2a:b4:2e:1f:6d:77:16:10:9c:81:75:7a:
                    6e:64:b8:89:d6:00:6e:08:f0:16:c7:cf:90:a9:4a:
                    86:4f:3f:a5:3e:a9:97:89:c9:ba:a9:f1:70:4a:96:
                    17:78:14:fc:7a:42:aa:de:cb:b1:0b:da:d8:0c:7d:
                    06:39:f1:2f:ab:b8:14:c8:6d:d4:50:84:3a:37:77:
                    59:41:b5:33:ab:a8:28:d8:6f:5d:45:c1:91:e1:8b:
                    46:3b:14:54:c6:00:bf:5a:89:e2:8e:af:bb:a4:37:
                    de:88:9e:5c:90:21:bc:ab:e5:ce:bf:0b:df:be:8c:
                    b0:25:ee:9e:ef:ec:52:6b:17:b3:54:47:16:42:7a:
                    ab:52:67:a2:5d:95:b4:ba:6b:b8:9c:3b:3a:2f:5c:
                    ba:96:8f:08:e6:a3:86:bf:36:de:11:64:7e:59:dc:
                    52:5b:47:02:82:03:ad:d1:4f:32:e9:f5:91:63:fe:
                    ff:c0:71:d0:cb:b6:75:88:f5:af:cd:fc:3a:65:e8:
                    f0:fd:ff:ea:66:f6:b5:00:f9:ef:22:8d:e0:b7:87:
                    58:8c:35:2b:34:47:96:49:cf:72:4e:1a:51:1e:81:
                    86:82:82:89:a4:69:1d:d3:b7:53:5d:9e:f2:27:9c:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8C:52:32:B2:97:E9:E1:FB:25:20:C6:57:62:F2:CF:E2:0C:CC:C6
            X509v3 Authority Key Identifier:
                keyid:4F:9A:7B:11:15:D4:5A:DC:E7:E8:44:98:01:06:78:8B:79:69:39:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/4F9A7B1115D45ADCE7E844980106788B7969390B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F9A7B1115D45ADCE7E844980106788B7969390B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/caeaT6eZoAGAYJ4w22FmaM632M4Fq2AkxA9aB6BmybD/0/34352e3136342e3135362e302f32332d3233203d3e20323638363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:78:e7:f3:e7:36:30:13:48:3e:0c:ab:6a:de:c7:ba:e5:e3:
         2a:5c:81:c4:e7:79:72:d8:04:04:bc:1b:7b:ec:7e:9b:8c:09:
         9e:e3:0f:d7:f0:44:ef:1e:64:d0:a9:25:f4:01:f5:c6:9a:35:
         d2:86:94:cb:c6:e8:fa:0b:08:08:ff:8a:96:2e:e4:68:75:cf:
         ce:df:ac:96:7a:67:f2:79:67:3f:a6:5f:6c:e3:65:79:fe:9f:
         14:4d:4b:88:1a:b5:ec:9a:a3:7f:e9:e1:b4:d2:22:67:2d:be:
         4c:da:a3:29:3e:42:00:55:c3:d3:83:7e:a8:dd:7b:d9:51:30:
         fc:9e:9f:88:25:f4:01:3e:19:8c:9a:de:3e:5f:6b:bf:80:53:
         e9:a0:5b:d6:9d:41:ad:77:bd:ba:55:1c:69:d3:a8:14:ce:33:
         af:da:39:c2:41:37:2f:7c:3f:38:d2:01:f7:97:e6:61:fb:09:
         cf:31:07:b8:23:1f:53:ba:35:19:f4:e9:45:13:ec:bf:b7:a7:
         00:d5:a9:27:d4:f1:57:56:81:80:1a:c6:fe:c7:4f:62:ef:44:
         2b:79:b8:7e:ea:e9:e0:e9:70:2b:74:24:39:14:5a:8d:c5:f3:
         15:31:5d:26:41:c7:ff:24:38:70:0b:9a:91:e4:9a:1a:3e:2d:
         96:c3:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:12:53 2025 by rpki-client