Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32332d3233203d3e20323639343334.roa
File:                     34352e3138362e3138382e302f32332d3233203d3e20323639343334.roa (raw, json)
Hash identifier:          oXDw5aVxQ0QkQ25ri8sfFhLOAu5hKeDb19QS6l/eK/c=
Subject key identifier:   A3:00:81:60:0B:92:E2:9C:1D:5E:2C:2E:08:DE:BB:70:51:A4:6D:A4
Certificate issuer:       /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial:       1679FD56B0D4799BC0B86FC48C7B3D992D51CB3E
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32332d3233203d3e20323639343334.roa
Signing time:             Fri 20 Jun 2025 00:32:19 +0000
ROA not before:           Fri 20 Jun 2025 00:27:19 +0000
ROA not after:            Fri 19 Jun 2026 00:32:19 +0000
asID:                     269434
IP address blocks:        45.186.188.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 01 Jul 2025 21:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:79:fd:56:b0:d4:79:9b:c0:b8:6f:c4:8c:7b:3d:99:2d:51:cb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
        Validity
            Not Before: Jun 20 00:27:19 2025 GMT
            Not After : Jun 19 00:32:19 2026 GMT
        Subject: CN=A30081600B92E29C1D5E2C2E08DEBB7051A46DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:21:0d:16:f7:45:ff:9d:f1:d5:62:57:e7:
                    1e:79:9b:41:5f:cd:8c:19:ba:f4:92:58:80:2b:a3:
                    05:f5:c8:a5:5b:b3:9e:4e:2b:e6:6e:89:a2:c1:c3:
                    0c:6c:97:84:e8:e1:62:58:4b:5a:8e:99:48:7b:30:
                    10:f7:d4:5d:5c:77:d6:a6:6a:d7:cf:24:02:7e:ac:
                    6e:c1:cf:df:dd:a8:b1:dc:8c:de:cc:cd:0b:c5:b1:
                    30:2e:04:3a:4a:35:72:c8:87:c5:fb:50:55:64:6a:
                    02:74:40:43:0b:96:ee:89:03:5f:ec:1c:56:ef:09:
                    dc:96:2c:59:3e:75:98:e0:11:5e:73:44:79:14:3d:
                    df:55:8f:4b:7d:bc:a8:4c:3c:02:26:86:6a:2b:64:
                    70:e6:35:7b:9e:1f:c9:ad:24:d6:80:a3:42:1c:f9:
                    d5:39:9c:99:1b:cc:e9:98:01:c2:ff:a8:df:58:55:
                    89:78:9b:5c:49:57:11:d3:c1:88:f6:d9:0c:46:9f:
                    35:7c:cb:cc:dd:96:30:72:f9:10:40:01:5e:7c:17:
                    68:e3:f8:7c:01:6a:fe:dd:e9:39:2d:26:f5:18:43:
                    9f:a4:bb:1b:cd:26:0d:32:6f:06:51:03:e2:44:ec:
                    96:d6:5b:11:07:4e:2f:c2:9f:fb:a4:cb:22:73:6a:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:00:81:60:0B:92:E2:9C:1D:5E:2C:2E:08:DE:BB:70:51:A4:6D:A4
            X509v3 Authority Key Identifier:
                keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32332d3233203d3e20323639343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:b5:5e:52:db:79:17:52:cb:2e:4d:05:94:0a:15:c6:4f:0e:
         c2:7a:a5:9f:ee:6b:82:ff:2f:a5:26:ed:c5:ea:4d:c5:90:8f:
         ab:88:4f:42:09:34:5e:f7:33:50:f8:29:ce:2b:c4:0d:da:f0:
         39:d0:36:13:c9:5b:42:27:42:26:3a:67:42:68:45:6a:d7:0d:
         06:ff:98:70:7b:2f:c4:d6:55:8b:b8:4c:08:8c:7a:c3:50:c6:
         84:65:bd:5d:39:32:ed:d1:5f:94:8a:84:1f:68:65:01:66:c9:
         69:98:ca:b8:80:62:2a:47:f0:cc:52:4f:ff:86:41:36:a9:77:
         d1:b9:c6:63:33:9b:3e:af:6b:c3:34:8a:17:69:e1:13:c4:db:
         a5:bd:23:45:31:bc:0a:80:f4:bb:ba:9b:b7:74:72:72:8c:29:
         54:c2:55:9a:aa:f9:ed:f8:11:e9:b7:c6:76:9c:f6:92:fb:5e:
         9b:46:86:e7:7d:39:fa:36:35:88:85:9a:23:f7:27:42:92:1d:
         93:70:96:4e:87:70:06:6a:3f:fe:ae:75:1b:c3:6d:b9:48:30:
         e4:68:26:e5:da:a4:61:f3:a0:9e:30:74:43:2b:1b:19:de:95:
         7b:93:f4:d8:ba:8c:17:3c:8a:62:57:06:40:f5:b1:a3:eb:5d:
         db:44:c6:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFnn9VrDUeZvAuG/EjHs9mS1Ryz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBRDkxOUZDQ0EwMEJDMzgzRDZENjM5OEI5NkIxRDc3
QUFGQjQ3NjAeFw0yNTA2MjAwMDI3MTlaFw0yNjA2MTkwMDMyMTlaMDMxMTAvBgNV
BAMTKEEzMDA4MTYwMEI5MkUyOUMxRDVFMkMyRTA4REVCQjcwNTFBNDZEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbSENFvdF/53x1WJX5x55m0Ff
zYwZuvSSWIArowX1yKVbs55OK+ZuiaLBwwxsl4To4WJYS1qOmUh7MBD31F1cd9am
atfPJAJ+rG7Bz9/dqLHcjN7MzQvFsTAuBDpKNXLIh8X7UFVkagJ0QEMLlu6JA1/s
HFbvCdyWLFk+dZjgEV5zRHkUPd9Vj0t9vKhMPAImhmorZHDmNXueH8mtJNaAo0Ic
+dU5nJkbzOmYAcL/qN9YVYl4m1xJVxHTwYj22QxGnzV8y8zdljBy+RBAAV58F2jj
+HwBav7d6TktJvUYQ5+kuxvNJg0ybwZRA+JE7JbWWxEHTi/Cn/ukyyJzaoyXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUowCBYAuS4pwdXiwuCN67cFGkbaQwHwYDVR0j
BBgwFoAU862Rn8ygC8OD1tY5i5ax13qvtHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkx2aWtLSEE0b2J4Nmluc1RQalBUVUxieWVvcUhobWg0OHVaZGhIaDJK
OHcvMC9GM0FEOTE5RkNDQTAwQkMzODNENkQ2Mzk4Qjk2QjFENzdBQUZCNDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQUQ5MTlGQ0NBMDBCQzM4
M0Q2RDYzOThCOTZCMUQ3N0FBRkI0NzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMdmlrS0hBNG9ieDZpbnNUUGpQVFVMYnllb3FIaG1oNDh1WmRoSGgySjh3LzAv
MzQzNTJlMzEzODM2MmUzMTM4MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEturwwDQYJKoZIhvcNAQELBQADggEBAE+1XlLb
eRdSyy5NBZQKFcZPDsJ6pZ/ua4L/L6Um7cXqTcWQj6uIT0IJNF73M1D4Kc4rxA3a
8DnQNhPJW0InQiY6Z0JoRWrXDQb/mHB7L8TWVYu4TAiMesNQxoRlvV05Mu3RX5SK
hB9oZQFmyWmYyriAYipH8MxST/+GQTapd9G5xmMzmz6va8M0ihdp4RPE26W9I0Ux
vAqA9Lu6m7d0cnKMKVTCVZqq+e34Eem3xnac9pL7XptGhud9Ofo2NYiFmiP3J0KS
HZNwlk6HcAZqP/6udRvDbblIMORoJuXapGHzoJ4wdEMrGxnelXuT9Ni6jBc8imJX
BkD1saPrXdtExoA=
-----END CERTIFICATE-----
Generated at Fri Jul 4 07:30:51 2025 by rpki-client