Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33332d3333203d3e20323635353030.roa
File:                     323830343a333531383a3a2f33332d3333203d3e20323635353030.roa (raw, json)
Hash identifier:          Fu506+vo1mvmvkyVVv8pqO3DqJxjbTGV0Nn6T1B6+UE=
Subject key identifier:   10:19:D9:59:6D:4E:50:B1:DD:4D:27:5D:32:4B:48:35:09:C9:9F:CA
Certificate issuer:       /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial:       3C471B6394A9ECAF4EC1A2053DC63F5B017466BE
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33332d3333203d3e20323635353030.roa
Signing time:             Wed 25 Jun 2025 22:55:16 +0000
ROA not before:           Wed 25 Jun 2025 22:50:16 +0000
ROA not after:            Wed 24 Jun 2026 22:55:16 +0000
asID:                     265500
IP address blocks:        2804:3518::/33 maxlen: 33
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 11:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:47:1b:63:94:a9:ec:af:4e:c1:a2:05:3d:c6:3f:5b:01:74:66:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
        Validity
            Not Before: Jun 25 22:50:16 2025 GMT
            Not After : Jun 24 22:55:16 2026 GMT
        Subject: CN=1019D9596D4E50B1DD4D275D324B483509C99FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:15:85:56:19:a1:39:a0:54:0e:19:5d:31:
                    77:92:16:7c:f0:32:22:2c:3d:3b:21:9c:59:1d:87:
                    f0:a1:58:c5:6a:f4:ba:ba:d0:60:1c:53:12:dc:96:
                    b9:9f:20:c8:b9:c6:d8:2e:19:d3:a5:52:a5:ca:2c:
                    33:5e:d5:7a:c3:1a:5c:66:c9:a8:69:f2:e9:36:ed:
                    5a:41:f4:a6:6a:29:21:e6:a5:11:ae:62:9d:91:46:
                    b1:3e:d5:a8:27:a5:b4:1c:c2:b9:6e:17:08:e0:35:
                    2a:e1:63:6f:11:da:96:af:b0:ff:6b:bb:af:9d:5e:
                    91:16:3f:f3:03:13:af:a2:b8:73:7b:6f:48:76:a6:
                    f4:0a:d1:0b:4d:41:fb:91:d9:fd:48:8d:3f:a0:da:
                    b1:93:da:8a:e5:c1:11:58:bd:88:a1:ef:89:ed:de:
                    df:1f:b3:7d:87:d0:e4:f9:62:21:aa:2d:0b:2d:e9:
                    bb:a6:85:2a:ce:75:a8:a9:60:f8:52:e6:eb:7c:95:
                    30:3e:ac:0b:56:5c:63:c0:69:2a:2f:a2:92:ce:54:
                    f2:53:fc:43:45:a2:5e:a5:ff:2c:af:fd:7d:dd:f8:
                    89:4a:a6:d4:67:ad:10:ff:d5:08:f5:91:db:27:cd:
                    c9:5d:64:8e:ac:3b:64:7b:8d:71:1a:f5:0c:97:15:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:19:D9:59:6D:4E:50:B1:DD:4D:27:5D:32:4B:48:35:09:C9:9F:CA
            X509v3 Authority Key Identifier:
                keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33332d3333203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:44:90:57:00:7c:36:68:0a:ae:2e:4c:03:5b:e9:97:8d:
         4c:ff:85:b4:52:0c:f5:d6:bb:a7:05:e2:47:8b:ce:00:24:c8:
         8a:28:0d:ef:f4:c4:f3:e1:bc:f5:51:59:2a:f6:5b:d0:0d:53:
         f0:7a:25:8b:a0:9c:c7:5f:2f:63:8e:fe:b5:3d:d0:32:5d:e9:
         6e:69:88:b4:5e:ca:90:bb:22:f7:c0:0e:c1:19:54:8b:48:9e:
         5b:49:d6:ee:ad:28:cc:01:22:3b:48:3a:8f:9f:67:e1:b9:a2:
         89:08:c2:42:78:f1:8b:39:a8:51:23:80:ad:35:4b:58:47:87:
         3f:bc:0f:07:89:17:fc:c5:44:f1:5d:51:3c:5b:b0:7b:f4:ff:
         56:bb:34:c4:22:cd:06:be:41:08:a8:1d:14:3f:55:c8:19:52:
         37:d2:d9:a8:47:81:bd:d2:80:02:78:57:f8:c5:25:da:97:65:
         60:13:9e:39:f9:e9:04:fd:c4:ca:80:ef:9c:24:ff:10:3f:22:
         64:6c:6c:83:65:86:27:37:19:0b:25:e9:30:24:48:6f:4a:c0:
         5d:88:7e:6b:3e:00:d6:da:47:d5:b5:31:f8:ff:07:03:9a:65:
         c2:9a:33:98:2e:a7:f5:6e:b7:97:b3:43:68:3b:26:f6:1c:4d:
         f3:bf:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:46:27 2025 by rpki-client