Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a3a2f33352d3335203d3e20323732313835.roa
File:                     323830343a383333633a3a2f33352d3335203d3e20323732313835.roa (raw, json)
Hash identifier:          x0XXaq1DU+9UG+YsUNz/mro/Y6JgaajZnaLIGsASms8=
Subject key identifier:   90:0E:E0:9F:CC:37:3B:F7:90:BD:34:FC:BD:ED:CF:BD:E1:BB:B9:A1
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       3F636E5D733714168425BE0F484C8EF589C45A6E
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a3a2f33352d3335203d3e20323732313835.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     272185
IP address blocks:        2804:833c::/35 maxlen: 35
Validation:               Failed, certificate revoked on Wed 04 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:63:6e:5d:73:37:14:16:84:25:be:0f:48:4c:8e:f5:89:c4:5a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:e6:8c:10:6b:1d:92:90:64:aa:38:56:95:
                    ca:9b:64:77:14:a8:dd:3e:d9:0e:56:e9:7b:c1:90:
                    e6:f4:16:2f:74:f1:79:64:4f:e3:b5:ff:07:90:7a:
                    25:60:de:f1:f1:64:7a:16:3a:fb:70:de:69:a8:cd:
                    18:83:bf:7f:05:88:c0:88:6a:86:6b:92:49:d0:d9:
                    22:e8:ff:d7:ed:e6:f0:98:f5:1e:8e:85:83:02:15:
                    bd:41:c8:4b:76:16:bb:e3:4b:e3:ff:40:77:42:e7:
                    42:ba:5c:4b:ac:d0:4b:d5:4d:27:ab:42:b2:ac:0f:
                    f3:b8:d1:23:23:a2:1b:65:d9:79:e9:cc:fd:b1:b4:
                    06:b2:f4:8b:6b:1e:e7:24:83:9d:0e:9e:c0:92:98:
                    ee:bf:0c:25:5a:a2:e1:31:e2:da:ec:aa:a7:aa:2c:
                    23:26:af:17:8a:03:04:18:76:c4:2b:b8:9a:84:d4:
                    ef:a0:ab:43:0d:2c:e4:d6:91:d1:5e:78:37:e4:1f:
                    cb:e9:bd:f9:c1:17:ec:f9:1e:30:ab:2e:22:26:82:
                    ee:1c:81:f4:5e:32:31:8d:6c:f9:f7:fd:22:e2:a6:
                    b0:11:dc:ef:43:e7:56:c2:bb:d7:13:af:fa:5d:4b:
                    d7:a7:56:cc:36:7c:bd:4f:c1:34:11:51:34:8c:09:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0E:E0:9F:CC:37:3B:F7:90:BD:34:FC:BD:ED:CF:BD:E1:BB:B9:A1
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a3a2f33352d3335203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c::/35

    Signature Algorithm: sha256WithRSAEncryption
         ae:f9:30:a2:34:d9:63:c8:9d:4f:83:8f:32:a1:2b:7e:48:93:
         46:73:15:ca:5a:39:76:22:16:0b:86:da:ac:ba:1c:af:ee:f4:
         29:30:bb:3a:83:c2:a9:2e:a8:53:89:92:e3:79:45:1f:0e:be:
         65:6a:35:fb:31:19:f7:c9:fd:e9:f8:4d:19:52:9b:55:51:c3:
         24:4c:99:da:69:f6:fa:79:50:61:02:5f:d8:69:f3:dd:be:55:
         b0:6c:59:b9:bc:7a:61:6a:2d:fa:79:1c:5b:f5:51:eb:6e:c7:
         b4:02:fc:c5:f7:6f:cd:ae:8b:ea:d0:40:ca:80:aa:04:73:b4:
         d5:45:a7:6a:a8:62:33:4d:a5:84:82:dc:8f:62:52:61:07:44:
         87:46:14:23:3e:a5:de:bb:d9:0f:13:dc:28:78:00:1e:6d:60:
         e1:40:93:11:34:ca:4c:a7:f2:cd:df:43:19:70:6c:06:86:8a:
         27:c5:b3:3c:3f:89:74:b8:96:2d:c1:60:be:26:ae:3b:9b:4c:
         c7:0c:7c:93:6f:7b:e4:43:b2:25:09:62:8e:bb:ec:9e:a2:a0:
         4f:38:05:12:0e:61:a5:3c:0e:40:ba:4a:b6:d1:62:d0:a1:b7:
         e4:b5:17:d8:ff:22:95:04:35:77:af:fb:fb:86:dc:1a:03:66:
         53:93:af:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:13 2025 by rpki-client