Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          d3vUSJ3yP2MHGrqs7lw0vLqaG6qrVd6ECLupokSBxl8=
Subject key identifier:   69:4C:79:5E:60:53:8C:E5:4B:AB:0A:E6:F3:B8:80:11:3A:97:96:69
Certificate issuer:       /CN=84ACF88ACA346C7A6B6E07F73752AA4425C83727
Certificate serial:       250541EEBCA6D1EA6EF7B1E9CFD68CC7C976FFA9
Authority key identifier: 84:AC:F8:8A:CA:34:6C:7A:6B:6E:07:F7:37:52:AA:44:25:C8:37:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84ACF88ACA346C7A6B6E07F73752AA4425C83727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Mon 14 Jul 2025 21:52:58 +0000
ROA not before:           Mon 14 Jul 2025 21:47:58 +0000
ROA not after:            Mon 13 Jul 2026 21:52:58 +0000
asID:                     61776
IP address blocks:        2804:192c:2000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Fri 18 Jul 2025 18:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:41:ee:bc:a6:d1:ea:6e:f7:b1:e9:cf:d6:8c:c7:c9:76:ff:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ACF88ACA346C7A6B6E07F73752AA4425C83727
        Validity
            Not Before: Jul 14 21:47:58 2025 GMT
            Not After : Jul 13 21:52:58 2026 GMT
        Subject: CN=694C795E60538CE54BAB0AE6F3B880113A979669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:24:4c:59:16:9a:34:31:10:49:e4:37:f1:
                    16:c0:c0:9e:ec:bb:b8:be:d7:6f:37:f7:d6:54:1a:
                    c5:ea:8f:d8:68:68:a9:8a:4f:4e:1b:48:b8:69:2a:
                    4c:2e:cb:b5:ac:ca:e3:96:04:b5:33:89:ae:b2:b3:
                    48:e3:ed:7c:86:7c:cc:f8:69:7e:e8:07:23:dd:ed:
                    e8:6c:02:ea:36:72:8b:11:96:06:3b:7a:bd:4e:b8:
                    30:85:93:18:66:8b:93:b6:b4:e5:66:42:6e:f7:a6:
                    2f:8f:90:5a:07:70:4d:6b:6d:10:af:da:44:0e:f9:
                    45:13:c5:70:0f:56:19:03:4a:e3:70:d7:08:16:b5:
                    64:c0:eb:39:26:c9:0f:f9:27:47:7a:7f:b5:a9:4d:
                    70:89:22:88:7c:b2:8a:a1:41:e7:5b:11:22:c3:bb:
                    35:07:4f:70:c6:6b:23:fe:bb:61:cc:fd:1a:8f:8a:
                    05:fa:26:e0:5c:e2:d3:fe:34:8b:ff:77:07:e5:f1:
                    ce:14:cb:71:50:f0:0c:46:ea:30:44:09:65:5d:c3:
                    ea:23:82:f2:f7:b1:bd:f3:e1:c5:ab:30:b5:54:d8:
                    6c:86:62:25:bb:ab:bb:e5:44:e4:39:93:25:c6:38:
                    68:67:eb:1a:cc:68:c6:31:1e:0e:b0:70:92:2b:62:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4C:79:5E:60:53:8C:E5:4B:AB:0A:E6:F3:B8:80:11:3A:97:96:69
            X509v3 Authority Key Identifier:
                keyid:84:AC:F8:8A:CA:34:6C:7A:6B:6E:07:F7:37:52:AA:44:25:C8:37:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/84ACF88ACA346C7A6B6E07F73752AA4425C83727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84ACF88ACA346C7A6B6E07F73752AA4425C83727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:e5:b1:0e:a0:a1:a3:44:4e:a6:75:a9:f3:a7:a6:91:db:
         40:a6:99:fb:a4:c2:ac:fa:20:92:74:57:1f:7c:c1:81:1b:7d:
         27:74:3c:1f:8e:42:98:b4:f2:dd:d2:65:f1:57:10:cd:b0:21:
         b5:03:73:76:71:44:ac:f4:01:3b:b1:71:f3:cd:de:6b:3c:6c:
         6e:73:1f:23:08:e4:8f:f6:16:32:c9:0d:bc:22:2b:0d:e9:f1:
         63:86:6b:5a:26:0a:68:d1:63:09:d1:64:c0:ad:90:6b:73:c0:
         df:56:c9:f5:5d:f4:19:52:a4:37:f1:c1:c5:32:44:dc:67:1e:
         18:7e:e7:8a:70:0c:d0:67:3f:3a:2a:d8:21:e4:a2:8e:95:15:
         53:78:7d:c2:f1:11:53:b7:bf:1b:8d:d3:46:1b:f4:c9:7d:82:
         5f:71:3f:78:7e:3b:bf:2c:35:96:0c:5c:2a:c2:67:ba:af:4e:
         63:14:c0:80:09:54:64:10:8d:ed:d7:a2:85:b1:01:21:42:53:
         52:4e:9f:c1:65:d5:7f:b0:ce:4f:c2:5e:09:b8:6b:09:78:d1:
         bd:48:6c:90:84:b6:99:4e:de:e8:05:03:1c:94:f8:12:56:3e:
         c9:a5:d2:d4:48:c1:d5:21:32:91:f9:e9:34:b7:74:fa:fb:88:
         2d:5b:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:53:31 2025 by rpki-client