Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232342e302f32322d3332203d3e20323638363338.roa
File:                     34352e3136342e3232342e302f32322d3332203d3e20323638363338.roa (raw, json)
Hash identifier:          jkTYl9hD+NSvMfogzWbPdPKVeaA80Yve3vME8e6Tzsc=
Subject key identifier:   53:B5:59:A9:8D:78:4C:E7:B1:93:30:7A:F7:0C:E6:52:C4:AA:E6:DA
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       37397CA67CF042AB03FAD0B4DD27712DB541ADA5
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232342e302f32322d3332203d3e20323638363338.roa
Signing time:             Tue 10 Jun 2025 17:47:24 +0000
ROA not before:           Tue 10 Jun 2025 17:42:24 +0000
ROA not after:            Tue 09 Jun 2026 17:47:24 +0000
asID:                     268638
IP address blocks:        45.164.224.0/22 maxlen: 32
Validation:               Failed, certificate revoked on Wed 11 Jun 2025 11:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:39:7c:a6:7c:f0:42:ab:03:fa:d0:b4:dd:27:71:2d:b5:41:ad:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Jun 10 17:42:24 2025 GMT
            Not After : Jun  9 17:47:24 2026 GMT
        Subject: CN=53B559A98D784CE7B193307AF70CE652C4AAE6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:50:df:b7:9d:96:dc:85:85:31:97:6d:70:
                    fb:ed:b2:b9:91:69:20:12:0c:b0:0c:2e:1b:89:23:
                    47:82:06:84:7f:51:6d:26:0f:37:db:7f:1b:f8:80:
                    8c:9f:f6:21:eb:f5:18:eb:9f:25:b0:d8:9e:c0:7a:
                    9a:49:64:8a:1b:ac:7e:68:5d:f9:33:01:d5:8a:7c:
                    84:f2:9f:72:0d:82:3c:86:53:25:25:57:ed:29:7d:
                    bd:14:eb:fe:72:7a:47:3c:49:e6:75:65:bd:1d:a8:
                    8f:8b:88:6e:e8:6c:55:31:56:f1:58:51:39:a1:7d:
                    6e:66:9b:83:03:a6:1f:38:b9:77:85:ce:74:3d:bd:
                    af:8f:08:81:9d:ad:9a:d1:93:69:fa:b6:ee:f1:67:
                    9c:6b:b6:53:a8:93:af:fc:1f:b3:76:61:b1:16:c8:
                    c0:79:ff:5a:11:e6:97:16:e1:7e:43:2f:ee:e7:d8:
                    64:aa:9e:ae:05:95:2c:f5:d9:80:36:08:23:53:f8:
                    27:9a:6a:e2:04:89:65:1b:7b:83:5c:c0:d5:71:9c:
                    db:16:73:cd:1b:40:49:3d:48:f8:4f:0d:68:87:04:
                    00:8a:43:87:8f:91:64:93:e3:0d:10:33:49:5c:30:
                    28:bf:a6:a6:2e:84:09:0a:08:a9:d6:10:2b:ec:d7:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B5:59:A9:8D:78:4C:E7:B1:93:30:7A:F7:0C:E6:52:C4:AA:E6:DA
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232342e302f32322d3332203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:cc:af:70:61:9f:7c:53:e5:80:6f:3b:eb:a6:33:fe:03:
         e9:ad:70:1c:4b:a0:f8:ee:2e:9f:d1:9d:08:3a:d5:29:10:49:
         c1:c6:53:b1:1c:2c:93:60:67:34:da:ac:7f:e4:75:6a:92:c0:
         30:0f:c6:82:08:54:8c:a2:2d:2c:96:e8:7a:92:98:6a:25:c6:
         3a:7e:20:3a:d2:da:99:d8:2b:4c:94:81:91:4d:7b:b3:41:51:
         5b:5a:ac:9c:0a:45:29:63:0f:18:56:e3:74:79:68:df:e2:81:
         86:4c:17:f6:9e:cb:5f:eb:b1:22:13:cb:dd:5c:a0:94:f8:df:
         0e:0c:8a:5c:50:79:d9:8a:ee:41:1b:53:aa:11:3b:5d:32:97:
         3c:76:db:ec:cf:e2:0f:64:75:65:06:bc:62:9c:19:10:9a:8d:
         4b:82:82:7a:d8:40:5b:45:78:95:9d:b2:9a:02:ed:67:92:14:
         b8:a7:b6:0b:1e:8c:3a:ca:7f:4a:b9:bf:78:76:8f:91:3c:b3:
         d6:33:b5:e5:d8:b2:f6:a2:71:67:84:e8:e1:92:a4:01:a4:bf:
         f3:86:cb:11:e4:b8:f5:ac:75:9a:09:ee:ee:57:fd:86:ec:2c:
         25:0e:6d:04:8b:04:ff:44:5f:bc:66:76:7c:59:66:f1:f8:2a:
         8d:20:e7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:16:43 2025 by rpki-client