Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa
File:                     3230302e31332e38362e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          G578EY0nHk66SmvY7YS63YOV2MDYdY50KHyX6DWHqyA=
Subject key identifier:   47:0D:80:5B:84:C2:FA:F3:AA:5D:1F:CC:92:A0:0F:09:1A:F0:5B:20
Certificate issuer:       /CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
Certificate serial:       64C66DAE4D07FDB36B3D16714DE71634EF144E3F
Authority key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa
Signing time:             Fri 08 Aug 2025 13:27:38 +0000
ROA not before:           Fri 08 Aug 2025 13:22:38 +0000
ROA not after:            Fri 07 Aug 2026 13:27:38 +0000
asID:                     270440
IP address blocks:        200.13.86.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c6:6d:ae:4d:07:fd:b3:6b:3d:16:71:4d:e7:16:34:ef:14:4e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
        Validity
            Not Before: Aug  8 13:22:38 2025 GMT
            Not After : Aug  7 13:27:38 2026 GMT
        Subject: CN=470D805B84C2FAF3AA5D1FCC92A00F091AF05B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dc:85:c1:72:c7:a2:e3:c0:64:12:9c:91:ca:
                    7b:1d:1d:98:87:74:1e:78:ba:0d:b5:e3:e7:25:8f:
                    ef:a3:fa:14:21:6a:6a:61:cb:95:e6:80:b9:06:87:
                    c9:f4:18:de:2d:41:2e:9a:d5:1a:84:28:08:25:8b:
                    73:95:6d:c8:89:fd:6f:2c:aa:b6:11:0f:76:a2:79:
                    2e:54:e3:e1:75:02:e0:e8:de:43:84:35:de:7a:48:
                    d3:c6:92:33:be:20:51:ac:03:31:fc:41:19:42:eb:
                    05:7f:56:dc:46:08:dd:bb:3c:8b:9e:5c:7b:58:57:
                    b7:ab:97:22:3d:23:08:4e:b5:51:d6:cd:94:e0:18:
                    c3:16:b2:d1:ba:b1:96:84:9a:6e:d6:3a:de:b6:dc:
                    b0:d6:28:08:f7:a9:60:44:0b:04:31:90:b0:50:84:
                    c7:71:24:6d:59:41:52:79:ee:3e:38:37:57:b1:18:
                    b0:40:99:09:f2:5d:c9:4f:d7:48:3c:a1:8f:64:f7:
                    58:e0:91:f1:2c:e5:59:c7:c2:99:67:30:b6:69:d7:
                    1d:ec:6f:e9:67:9e:59:41:b4:95:0e:76:ec:ba:c1:
                    0f:e8:ca:d0:af:92:37:9e:d8:3b:93:41:d6:55:79:
                    64:01:da:6d:f2:2d:3f:d1:b7:2b:ae:69:a5:e5:72:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0D:80:5B:84:C2:FA:F3:AA:5D:1F:CC:92:A0:0F:09:1A:F0:5B:20
            X509v3 Authority Key Identifier:
                keyid:A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:28:14:de:0b:10:d5:e4:e7:eb:32:fa:e4:ab:bb:76:6e:
         de:38:6a:bf:d1:ad:33:dc:7d:51:4b:e7:8a:8a:bf:a6:60:02:
         16:12:64:ec:ee:ca:ee:43:d9:fe:e1:0c:81:54:49:e2:34:d2:
         9c:b1:39:3b:fd:18:18:46:c6:59:25:9a:fc:e8:a4:8f:9d:60:
         2e:3a:69:11:05:b7:9f:34:9b:5e:88:ea:4e:4a:89:2c:57:1a:
         d0:fb:d5:80:35:7c:ff:54:bf:80:45:64:a9:f8:15:1c:95:62:
         6b:71:56:c1:f5:e5:64:e9:a5:e1:69:38:e3:d9:fa:68:b6:44:
         9e:83:62:e2:25:0b:8e:48:4a:40:f8:43:a6:bc:cd:e8:76:7c:
         3d:89:f8:46:f5:2e:b6:31:48:5e:80:96:34:9a:fe:8a:91:f1:
         3c:a2:0b:3a:4b:3d:ff:66:86:8d:7f:cf:3d:e1:8b:b5:91:97:
         ef:e4:f3:9e:8a:9f:77:e4:fe:72:8c:c4:e9:ec:05:84:f7:a0:
         da:46:06:74:57:86:89:51:74:fc:58:ec:01:0a:8f:26:c3:c8:
         0c:78:a8:f7:cd:81:2d:bf:54:db:7a:96:14:47:10:bc:bb:6a:
         22:8b:ae:2a:99:98:c8:cf:68:47:27:9b:93:2c:2d:c1:4f:8c:
         09:24:71:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:35 2025 by rpki-client