Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3234342e3234382e302f32322d3232203d3e20323634393433.roa
File:                     3137302e3234342e3234382e302f32322d3232203d3e20323634393433.roa (raw, json)
Hash identifier:          Q2L9q6Nc9Iegf4lmxnLsaGUu3fRZ/Wtwnq6Nbw6lzmM=
Subject key identifier:   06:CF:9A:3C:07:1F:E0:B6:49:35:8B:32:60:32:97:3D:B5:BB:1F:5F
Certificate issuer:       /CN=E65374697D9FB212A56972F6CABF2FED977758ED
Certificate serial:       666FF424071109CAF535CB495C748F033A12AA10
Authority key identifier: E6:53:74:69:7D:9F:B2:12:A5:69:72:F6:CA:BF:2F:ED:97:77:58:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65374697D9FB212A56972F6CABF2FED977758ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3234342e3234382e302f32322d3232203d3e20323634393433.roa
Signing time:             Tue 03 Jun 2025 22:02:23 +0000
ROA not before:           Tue 03 Jun 2025 21:57:23 +0000
ROA not after:            Tue 02 Jun 2026 22:02:23 +0000
asID:                     264943
IP address blocks:        170.244.248.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 04 Jun 2025 17:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6f:f4:24:07:11:09:ca:f5:35:cb:49:5c:74:8f:03:3a:12:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65374697D9FB212A56972F6CABF2FED977758ED
        Validity
            Not Before: Jun  3 21:57:23 2025 GMT
            Not After : Jun  2 22:02:23 2026 GMT
        Subject: CN=06CF9A3C071FE0B649358B326032973DB5BB1F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:0c:a4:cc:a3:05:6e:20:8b:08:29:5f:dc:
                    9d:bb:79:de:22:59:09:96:2f:cd:28:31:b5:8b:b1:
                    61:f9:d2:c2:d6:5d:4c:ed:e7:71:a3:0f:00:39:00:
                    dd:46:f3:d4:6e:91:0a:b5:48:89:a9:6a:d3:92:10:
                    53:40:23:6b:9a:51:0b:c9:a3:ab:a8:a0:dd:e0:0e:
                    64:4f:d6:7e:d8:c2:c7:49:9b:f1:d0:78:d9:c2:f0:
                    65:19:39:9b:1e:02:11:85:36:2d:8c:63:fb:da:77:
                    ae:a9:44:5d:68:e9:e5:a3:63:ca:94:bc:cb:bf:06:
                    5c:74:26:a2:94:b6:ba:2c:06:8f:bf:eb:3b:7c:1f:
                    51:8e:e8:a8:e6:75:d4:75:fd:0f:4f:92:6b:a1:df:
                    06:37:ad:93:6a:c7:36:52:d0:56:f5:01:3d:9f:b2:
                    b7:9f:3a:a3:6e:82:e0:d1:b1:e1:e2:b4:d2:aa:a4:
                    07:b8:5b:fe:be:9d:04:cb:34:c2:d6:d8:02:ce:2c:
                    07:b5:ec:05:ab:b1:4a:5a:c2:67:89:6b:16:54:44:
                    b4:5f:e5:03:a6:32:66:e7:bb:d6:bc:b4:12:47:27:
                    a3:8e:28:68:05:e7:59:41:98:cb:92:c2:67:33:92:
                    f4:8f:8c:fa:27:b4:81:98:a5:66:e6:0d:b8:74:a1:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CF:9A:3C:07:1F:E0:B6:49:35:8B:32:60:32:97:3D:B5:BB:1F:5F
            X509v3 Authority Key Identifier:
                keyid:E6:53:74:69:7D:9F:B2:12:A5:69:72:F6:CA:BF:2F:ED:97:77:58:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/E65374697D9FB212A56972F6CABF2FED977758ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65374697D9FB212A56972F6CABF2FED977758ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3234342e3234382e302f32322d3232203d3e20323634393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:3b:53:4b:7d:50:b5:d0:86:47:5d:b4:21:ec:c6:89:cf:19:
         2e:1d:e3:cf:bc:22:cb:ba:27:ef:51:73:c5:36:8e:83:42:22:
         29:e5:0b:28:3f:32:d1:94:48:b4:9f:18:e7:ec:35:6d:75:e5:
         b0:08:2f:7c:ba:11:c9:ac:27:00:9a:0d:d8:71:63:6a:fd:02:
         3f:83:57:87:cb:73:de:c4:6b:ba:11:7e:a5:51:17:ac:cd:41:
         83:aa:83:14:7f:86:a0:88:88:a7:04:e2:78:e6:4f:75:73:01:
         34:5f:b0:0a:df:87:d5:ce:b0:e3:1d:7b:77:dd:9d:51:33:8a:
         66:a7:a7:3e:df:2c:0d:81:61:d7:e9:f6:33:5d:c4:5f:d2:e8:
         de:0f:01:a4:d4:28:64:a9:f4:ad:54:e7:6f:e4:a5:f1:f6:aa:
         22:69:19:d0:d1:9d:53:43:f2:6f:36:0c:43:5c:3d:40:8e:5e:
         9f:cf:57:51:99:c4:7f:23:45:e8:f6:e6:29:3e:bf:2a:96:82:
         73:69:31:be:5d:24:8f:fa:4b:e5:07:fd:13:a9:cc:d8:4a:c5:
         05:58:ad:8c:f5:e1:1a:81:5a:35:de:d5:13:48:2a:9b:cf:a8:
         aa:84:68:18:f1:3d:88:e3:af:9c:c7:f0:e1:6a:93:88:52:51:
         32:9a:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:20:17 2025 by rpki-client