Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3233312e3230302e302f32322d3232203d3e20323634393433.roa
File:                     3137302e3233312e3230302e302f32322d3232203d3e20323634393433.roa (raw, json)
Hash identifier:          73MTfEvzv6XCQ5IANNPR5S2VaOGhOjU3VnBfAUv9xc8=
Subject key identifier:   3A:B0:39:8B:AE:F1:23:51:4D:D5:F0:47:A4:6B:C5:2E:7C:57:EB:8A
Certificate issuer:       /CN=E65374697D9FB212A56972F6CABF2FED977758ED
Certificate serial:       55313745A75F3A46345F90968332871E3C9BA4EC
Authority key identifier: E6:53:74:69:7D:9F:B2:12:A5:69:72:F6:CA:BF:2F:ED:97:77:58:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65374697D9FB212A56972F6CABF2FED977758ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3233312e3230302e302f32322d3232203d3e20323634393433.roa
Signing time:             Tue 03 Jun 2025 22:02:23 +0000
ROA not before:           Tue 03 Jun 2025 21:57:23 +0000
ROA not after:            Tue 02 Jun 2026 22:02:23 +0000
asID:                     264943
IP address blocks:        170.231.200.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 04 Jun 2025 17:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:37:45:a7:5f:3a:46:34:5f:90:96:83:32:87:1e:3c:9b:a4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65374697D9FB212A56972F6CABF2FED977758ED
        Validity
            Not Before: Jun  3 21:57:23 2025 GMT
            Not After : Jun  2 22:02:23 2026 GMT
        Subject: CN=3AB0398BAEF123514DD5F047A46BC52E7C57EB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:5d:0b:de:e6:01:14:64:8c:db:5f:c0:36:
                    c9:52:a5:2a:74:78:9d:b4:00:a2:53:74:6a:52:02:
                    96:26:60:d2:23:ca:e6:f6:5c:d8:90:a5:2f:8b:bb:
                    41:d4:34:f5:fd:99:c8:75:07:9a:6e:6b:08:21:25:
                    c8:05:19:5c:cf:ae:11:c8:b9:55:d2:af:42:47:f1:
                    aa:0d:4f:6c:13:94:e9:f8:65:b5:1c:8c:cf:8e:9f:
                    53:24:29:5e:bb:fb:b0:f7:8e:8a:af:f5:47:f6:af:
                    c3:5a:5d:7d:29:41:47:57:41:80:43:77:b3:30:b9:
                    1b:b8:43:e2:76:7d:72:7d:44:e0:7c:9a:a4:b8:a5:
                    3e:c2:7d:a6:ae:b0:58:db:59:30:c5:47:09:d2:a4:
                    22:08:9a:aa:82:71:c1:15:49:d7:7b:b6:57:2b:eb:
                    6a:55:cc:97:ca:20:4b:a5:9a:3f:f1:6d:a2:95:53:
                    54:ef:65:a0:a9:1e:db:7e:59:10:44:ce:06:44:4b:
                    8a:c6:0f:d6:b1:b6:e7:ee:bd:62:57:02:5c:7b:28:
                    65:fb:a4:37:3b:79:8d:2d:f9:d2:0c:a8:92:a8:33:
                    47:3e:09:d9:dc:1d:da:47:79:0a:59:56:8e:f4:8e:
                    93:76:16:cf:6c:35:f8:a7:ba:71:54:a7:97:e2:50:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:39:8B:AE:F1:23:51:4D:D5:F0:47:A4:6B:C5:2E:7C:57:EB:8A
            X509v3 Authority Key Identifier:
                keyid:E6:53:74:69:7D:9F:B2:12:A5:69:72:F6:CA:BF:2F:ED:97:77:58:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/E65374697D9FB212A56972F6CABF2FED977758ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65374697D9FB212A56972F6CABF2FED977758ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3233312e3230302e302f32322d3232203d3e20323634393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:97:aa:27:67:57:f9:23:fc:4e:5d:30:a1:7b:23:67:97:09:
         b8:c2:9a:be:d9:f3:2c:97:70:da:bf:3b:27:5e:8f:2e:1b:84:
         d1:7a:c4:15:58:12:6a:b4:19:a6:4f:07:32:c4:4f:91:8f:aa:
         fe:94:67:4a:e6:76:97:17:2a:0b:40:69:aa:a9:b8:0d:b5:62:
         9c:c1:ed:b6:ca:01:36:f4:60:ab:bf:f9:dd:cc:00:7b:32:5d:
         08:b4:3c:4f:79:14:d9:39:ad:53:4e:aa:49:40:d6:f4:bb:44:
         20:b4:da:1a:93:17:2b:93:0d:e0:4a:e4:a5:0d:4f:ed:11:e1:
         35:f8:98:b0:c2:04:32:b1:72:3e:ac:6a:27:79:cb:c9:ce:6d:
         87:29:ff:52:83:fb:cd:b0:05:fd:16:dd:81:ff:38:c2:12:c8:
         16:89:97:14:25:43:c0:bf:36:4b:49:28:78:f3:23:dd:9b:27:
         93:ae:a2:8b:ec:b6:09:25:fa:05:52:89:81:ee:88:eb:8d:da:
         fe:10:e0:2a:c6:f2:8d:bd:ae:09:61:c7:a3:5b:cd:d6:69:13:
         32:c0:ea:58:df:c6:6f:0e:f9:cd:f8:71:b8:ec:1f:30:f6:b4:
         08:bb:01:f7:ed:22:cf:51:db:4b:ec:3c:ff:f3:20:f3:a6:81:
         cd:1d:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:19:20 2025 by rpki-client