Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138382e302f32342d3234203d3e20323637363238.roa
File:                     34352e37312e3138382e302f32342d3234203d3e20323637363238.roa (raw, json)
Hash identifier:          n7OkYeoZk8DATfrNQPH9rxZ4+svSawUE8aewX9oQQL8=
Subject key identifier:   F6:1A:FE:53:FE:51:16:FD:92:C2:EB:5C:16:F2:C7:B9:05:62:4E:DD
Certificate issuer:       /CN=CC4C58019807553918DEAD8A63DFB7011B89945A
Certificate serial:       53AA5A54727E61D088594663B5DEFDA137B967FF
Authority key identifier: CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138382e302f32342d3234203d3e20323637363238.roa
Signing time:             Thu 15 May 2025 14:18:57 +0000
ROA not before:           Thu 15 May 2025 14:13:57 +0000
ROA not after:            Thu 14 May 2026 14:18:57 +0000
asID:                     267628
IP address blocks:        45.71.188.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 18:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:aa:5a:54:72:7e:61:d0:88:59:46:63:b5:de:fd:a1:37:b9:67:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4C58019807553918DEAD8A63DFB7011B89945A
        Validity
            Not Before: May 15 14:13:57 2025 GMT
            Not After : May 14 14:18:57 2026 GMT
        Subject: CN=F61AFE53FE5116FD92C2EB5C16F2C7B905624EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:b0:f3:a1:dd:6e:58:2c:47:b7:4c:7d:94:
                    7f:8f:e2:6e:e6:75:e2:34:55:ec:80:49:9e:69:f1:
                    92:44:45:0d:4b:44:51:a8:6b:42:59:5b:00:77:5b:
                    64:d2:5c:df:7d:6e:f2:7f:cd:14:10:22:ad:3e:fc:
                    12:ba:29:b2:80:b3:93:b9:5d:7e:da:13:b6:65:c7:
                    96:0d:96:6f:56:e3:5b:44:48:03:01:21:52:ce:ab:
                    31:41:19:b4:d0:f4:16:d6:0b:27:0e:7f:b2:92:a3:
                    ec:e0:c6:c7:1a:8a:e7:ad:ad:ce:53:f0:19:73:ef:
                    3b:f1:61:fa:d4:78:3e:ae:9f:1a:f5:ab:c7:86:66:
                    1f:85:d6:2c:98:c6:80:84:64:5e:39:a2:71:2d:8b:
                    80:18:4c:ce:d2:51:9f:5e:56:15:0d:c5:ec:79:75:
                    14:d5:e5:92:25:4c:60:57:97:f9:ba:a3:83:9b:0b:
                    b7:64:f6:e0:69:08:55:af:98:2b:e2:c7:ed:8d:66:
                    3c:f5:ac:62:01:66:f9:4e:ee:41:b7:01:79:b8:cc:
                    4a:d9:8f:eb:89:d6:26:35:3d:a0:ef:59:32:94:64:
                    7a:76:d2:68:a9:55:f2:ed:5b:5a:17:1a:95:dc:f7:
                    f8:96:ff:1d:2e:87:c3:fb:7b:58:df:10:1c:2f:75:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1A:FE:53:FE:51:16:FD:92:C2:EB:5C:16:F2:C7:B9:05:62:4E:DD
            X509v3 Authority Key Identifier:
                keyid:CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/CC4C58019807553918DEAD8A63DFB7011B89945A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138382e302f32342d3234203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:5a:05:bb:6d:b7:9b:99:32:5d:4e:cf:70:77:b3:22:20:
         53:e7:d3:96:21:6c:44:f7:20:31:e1:60:a3:63:67:80:a7:96:
         b0:d4:a3:a4:28:d6:ff:26:02:5c:58:81:a3:58:ef:75:68:ee:
         b2:92:21:cc:28:01:b6:55:51:27:10:b8:4c:d1:20:75:f8:83:
         20:2b:8a:e9:8d:69:1d:ab:79:53:5f:7f:1f:c4:6b:0e:c4:53:
         42:29:c2:2d:6d:24:01:7b:5a:c3:99:05:25:cc:19:ef:d1:69:
         0b:4a:dd:6c:46:3b:3a:a9:a0:ab:b5:9f:69:d6:80:d3:85:da:
         f8:a2:2b:a4:05:3d:54:1f:64:1d:d1:a8:d2:69:aa:a5:2d:ef:
         ff:b1:74:12:b5:19:4a:64:86:5c:86:6a:91:03:78:b7:85:58:
         f0:3b:f2:ac:c5:38:ff:82:aa:bd:c3:7e:3a:34:5f:ca:28:e9:
         05:be:f8:66:d7:5c:7b:51:4d:42:1e:52:de:5c:fb:0d:3a:ed:
         4e:92:b8:28:ea:73:10:63:03:67:19:e0:11:26:ae:80:1f:23:
         a0:51:a4:48:0a:d5:61:bd:5c:bc:97:d4:37:74:21:d7:0c:f3:
         7e:2b:56:e4:27:a7:03:f1:7f:48:53:f6:85:9e:d6:bd:92:5f:
         82:6e:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:07:59 2025 by rpki-client