Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa
File:                     3230302e31332e38352e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          dRS4jub+kWjh4WUfJKPNLd3ZUj1TzyykEwd7cbUnRtE=
Subject key identifier:   42:BD:A5:C2:7D:FC:AC:2E:51:81:FB:C1:D6:59:5A:E4:88:C4:29:B8
Certificate issuer:       /CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
Certificate serial:       0D39BA25A8564605FB8B54AF38D7EFA1CA242223
Authority key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa
Signing time:             Fri 08 Aug 2025 13:27:39 +0000
ROA not before:           Fri 08 Aug 2025 13:22:39 +0000
ROA not after:            Fri 07 Aug 2026 13:27:39 +0000
asID:                     270440
IP address blocks:        200.13.85.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:39:ba:25:a8:56:46:05:fb:8b:54:af:38:d7:ef:a1:ca:24:22:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
        Validity
            Not Before: Aug  8 13:22:39 2025 GMT
            Not After : Aug  7 13:27:39 2026 GMT
        Subject: CN=42BDA5C27DFCAC2E5181FBC1D6595AE488C429B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:f9:81:8f:75:c8:85:6f:ca:59:eb:84:91:
                    b0:71:90:37:5a:71:57:3e:b0:85:c3:6e:66:2f:bc:
                    91:3b:cf:72:81:97:04:c7:27:d8:9e:e9:d7:be:ae:
                    c2:da:93:ae:fa:79:60:4d:06:7b:00:54:3a:56:21:
                    16:99:4e:be:b9:63:57:53:fd:ad:01:a3:25:9c:d5:
                    f5:7e:e4:f6:0f:d5:33:70:a0:52:c9:9a:d6:7d:bd:
                    6e:f0:a0:43:7a:03:fa:35:13:d0:3f:ae:d5:6c:ef:
                    ba:7d:d9:c6:65:23:98:e8:f5:35:00:4b:89:8c:23:
                    db:97:f3:78:ff:3e:e0:ab:ab:f3:c1:c2:8a:50:1b:
                    10:b9:f8:a3:c2:8f:f2:58:38:d3:93:3a:52:5a:a2:
                    73:a4:8b:1a:85:e0:68:61:65:e7:23:d4:04:ba:81:
                    3a:85:40:dd:f4:ca:70:5f:64:01:26:a6:84:86:64:
                    b1:14:63:c0:62:4d:59:f7:86:92:dd:49:3f:67:dd:
                    4f:a1:15:fd:20:19:05:0c:f8:b6:52:e6:4b:5a:8c:
                    8a:0b:ab:a1:97:e1:95:41:a2:e3:d0:d0:27:b1:24:
                    91:6b:af:6b:a5:02:1b:62:fa:32:58:09:a3:0f:9e:
                    f9:b7:e7:f8:82:b7:83:ee:c7:c0:cf:7c:6e:3c:ac:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BD:A5:C2:7D:FC:AC:2E:51:81:FB:C1:D6:59:5A:E4:88:C4:29:B8
            X509v3 Authority Key Identifier:
                keyid:A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:e4:d9:f5:ac:3a:f4:04:68:59:67:99:2e:ff:8c:c6:95:
         e9:49:b3:f4:c4:4c:97:36:50:f4:ac:88:3a:3c:c0:e7:7d:fc:
         4f:6a:f4:2f:9f:cc:a0:49:6b:47:d0:51:05:50:b6:1c:ac:b0:
         f8:12:bd:1c:d1:c7:f2:29:d9:41:af:de:39:aa:3f:d5:54:5c:
         b8:6e:f7:7d:32:fc:44:4e:db:8a:3c:81:72:0a:7e:28:51:b1:
         9e:51:d8:5c:5c:23:c2:7a:97:7c:4e:90:6e:e6:80:89:0d:cf:
         1a:dd:6b:b8:82:6f:d7:ae:09:2a:23:ad:37:4a:f3:8f:95:44:
         7e:7e:06:8a:c6:56:bd:db:cd:82:15:28:9c:65:c1:e1:15:3b:
         7e:4e:9e:60:14:dc:cf:13:5c:66:dc:a1:31:11:f5:9f:bb:e2:
         bd:47:f1:8d:b5:b7:e9:0e:41:0e:40:09:7d:a0:f4:af:0e:ef:
         81:58:79:9a:65:1e:57:3b:0e:23:ee:24:54:9e:87:35:17:12:
         dd:1f:35:2b:54:92:06:d8:b7:6f:a5:7b:48:13:83:41:61:4b:
         08:7c:75:ce:9c:11:c7:99:fa:9e:0b:3c:f7:90:11:d9:cf:3f:
         65:71:25:66:0b:ac:f0:b9:a9:8c:35:c3:56:db:b1:d4:60:e9:
         27:14:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:35 2025 by rpki-client