Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130322e302f32342d3234203d3e20323731303234.roa
File:                     34352e3232372e3130322e302f32342d3234203d3e20323731303234.roa (raw, json)
Hash identifier:          x/8yJrzwglYZZPFF4mYtDYVCP2N8FlGR+eU6eZy93gU=
Subject key identifier:   F4:F4:37:E3:1A:22:AA:07:68:BA:A3:11:CE:3A:C0:6B:0A:D3:60:41
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       3D6892385579AF285F57AD314DEBC7D503C585DD
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130322e302f32342d3234203d3e20323731303234.roa
Signing time:             Sat 07 Sep 2024 14:37:55 +0000
ROA not before:           Sat 07 Sep 2024 14:32:55 +0000
ROA not after:            Sat 06 Sep 2025 14:37:55 +0000
asID:                     271024
IP address blocks:        45.227.102.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Sep 2024 14:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:68:92:38:55:79:af:28:5f:57:ad:31:4d:eb:c7:d5:03:c5:85:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Sep  7 14:32:55 2024 GMT
            Not After : Sep  6 14:37:55 2025 GMT
        Subject: CN=F4F437E31A22AA0768BAA311CE3AC06B0AD36041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:fb:7e:0d:d6:45:92:67:05:37:8e:34:50:
                    5e:43:f4:5a:b5:c1:11:40:41:4f:34:69:dc:5b:97:
                    99:95:84:ad:11:78:1b:63:3e:71:83:49:02:f7:2e:
                    36:37:a3:40:37:16:9d:08:4b:ac:5a:6f:3d:6c:c6:
                    4e:07:f1:d4:17:f7:55:80:9e:69:7b:c4:60:d5:4a:
                    47:92:c1:f3:ce:64:5c:23:13:40:0c:8b:3b:2d:98:
                    7b:c3:a9:7c:f4:85:71:1f:58:e8:5a:bd:ca:16:27:
                    22:4c:dc:b8:c6:1e:1a:2e:96:a7:37:f5:67:88:ad:
                    2b:18:16:46:49:01:66:56:6a:e8:b0:99:a8:82:3b:
                    a2:d4:a9:24:3e:8b:1e:4b:ec:2e:54:12:6f:13:58:
                    64:f3:f9:77:46:90:21:f2:01:3d:0f:28:7b:1a:23:
                    46:d5:83:eb:be:46:6d:61:95:6c:02:2c:7b:be:33:
                    50:a3:f8:2c:25:70:fa:6b:a8:23:2d:01:e8:0c:27:
                    82:a5:49:0e:2d:04:4c:29:4d:10:89:be:77:75:c4:
                    5c:9a:8c:e1:72:de:0f:1f:dd:ae:31:8e:4e:c9:d4:
                    27:7f:b2:13:8f:59:6b:28:83:9f:31:4c:9c:2c:24:
                    4e:96:4b:b9:33:ca:95:6d:d1:dc:db:a0:bb:29:b6:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:37:E3:1A:22:AA:07:68:BA:A3:11:CE:3A:C0:6B:0A:D3:60:41
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3232372e3130322e302f32342d3234203d3e20323731303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:25:d6:43:0a:8b:c7:9c:2d:ad:9e:63:8e:44:35:e7:d2:b0:
         c3:52:a6:a0:6e:6f:36:a7:76:3a:74:70:e7:f2:d5:27:e8:31:
         37:0c:c8:4f:62:9f:25:b1:70:f8:68:15:24:07:38:65:d3:c8:
         0b:df:7e:b4:6b:c2:81:12:12:5c:f6:4f:d0:b8:df:b0:fc:fe:
         2b:b0:94:42:c5:9e:dd:2d:4e:b8:b9:67:94:62:d2:e2:de:c3:
         8b:ea:d3:1c:81:84:02:03:df:41:54:8e:59:12:3b:f9:db:68:
         24:bf:b2:5e:a7:16:92:4e:6b:ef:0a:6d:c9:e3:aa:af:28:a8:
         c3:b8:11:94:31:14:c6:fc:62:b6:b0:2a:fc:0c:bb:54:d4:99:
         3e:b1:88:c3:a3:17:17:0a:b4:de:88:2d:62:55:31:91:88:4a:
         13:1f:4b:bc:e2:0a:aa:b6:ae:df:88:81:c9:85:f6:1a:73:4d:
         59:11:23:6f:49:c7:dc:5f:74:cf:d0:e3:d0:03:a7:48:6c:c2:
         ad:9f:0a:43:5e:f4:a9:0b:8c:83:21:34:d0:3b:be:95:3b:38:
         d8:04:cb:ee:4c:98:8e:a9:a3:7c:c6:72:57:55:1d:99:bc:c4:
         5e:7e:5f:3d:3c:ae:4e:97:2b:32:c0:f3:1b:92:3b:46:06:d7:
         96:82:82:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPWiSOFV5ryhfV60xTevH1QPFhd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGREI4NzZDQkEyRTNFMUMxMjA4MDQ1RTk5MEIzOUJE
MDk3RUJDRjAeFw0yNDA5MDcxNDMyNTVaFw0yNTA5MDYxNDM3NTVaMDMxMTAvBgNV
BAMTKEY0RjQzN0UzMUEyMkFBMDc2OEJBQTMxMUNFM0FDMDZCMEFEMzYwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGft+DdZFkmcFN440UF5D9Fq1
wRFAQU80adxbl5mVhK0ReBtjPnGDSQL3LjY3o0A3Fp0IS6xabz1sxk4H8dQX91WA
nml7xGDVSkeSwfPOZFwjE0AMizstmHvDqXz0hXEfWOhavcoWJyJM3LjGHhoulqc3
9WeIrSsYFkZJAWZWauiwmaiCO6LUqSQ+ix5L7C5UEm8TWGTz+XdGkCHyAT0PKHsa
I0bVg+u+Rm1hlWwCLHu+M1Cj+CwlcPprqCMtAegMJ4KlSQ4tBEwpTRCJvnd1xFya
jOFy3g8f3a4xjk7J1Cd/shOPWWsog58xTJwsJE6WS7kzypVt0dzboLsptmZRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9PQ34xoiqgdouqMRzjrAawrTYEEwHwYDVR0j
BBgwFoAUZv24dsui4+HBIIBF6ZCzm9CX688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFSemFIcWo3RmI5NzFkQTdoY3BFdkxiVndDWXUyTkttOFZDVjZMdzE4
cHIvMC82NkZEQjg3NkNCQTJFM0UxQzEyMDgwNDVFOTkwQjM5QkQwOTdFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RkRCODc2Q0JBMkUzRTFD
MTIwODA0NUU5OTBCMzlCRDA5N0VCQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhUnphSHFqN0ZiOTcxZEE3aGNwRXZMYlZ3Q1l1Mk5LbThWQ1Y2THcxOHByLzAv
MzQzNTJlMzIzMjM3MmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt42YwDQYJKoZIhvcNAQELBQADggEBAH8l1kMK
i8ecLa2eY45ENefSsMNSpqBubzandjp0cOfy1SfoMTcMyE9inyWxcPhoFSQHOGXT
yAvffrRrwoESElz2T9C437D8/iuwlELFnt0tTri5Z5Ri0uLew4vq0xyBhAID30FU
jlkSO/nbaCS/sl6nFpJOa+8Kbcnjqq8oqMO4EZQxFMb8YrawKvwMu1TUmT6xiMOj
FxcKtN6ILWJVMZGIShMfS7ziCqq2rt+IgcmF9hpzTVkRI29Jx9xfdM/Q49ADp0hs
wq2fCkNe9KkLjIMhNNA7vpU7ONgEy+5MmI6po3zGcldVHZm8xF5+Xz08rk6XKzLA
8xuSO0YG15aCgjU=
-----END CERTIFICATE-----
Generated at Fri Jun 20 00:45:03 2025 by rpki-client