Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
File:                     323830343a343730383a3a2f33332d3333203d3e20323637303237.roa (raw, json)
Hash identifier:          PSI65hcTG6n4ALS8l90mggvIqnz6avfsvUPYGvDIMs4=
Subject key identifier:   A1:59:8E:F6:2E:62:0F:30:D3:15:C7:F5:A6:F6:1F:94:10:C6:D8:BE
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       638D576DAF9608055CE60E26ED325AAA4A583C60
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
Signing time:             Mon 11 Aug 2025 13:19:41 +0000
ROA not before:           Mon 11 Aug 2025 13:14:41 +0000
ROA not after:            Mon 10 Aug 2026 13:19:41 +0000
asID:                     267027
IP address blocks:        2804:4708::/33 maxlen: 33
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8d:57:6d:af:96:08:05:5c:e6:0e:26:ed:32:5a:aa:4a:58:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Aug 11 13:14:41 2025 GMT
            Not After : Aug 10 13:19:41 2026 GMT
        Subject: CN=A1598EF62E620F30D315C7F5A6F61F9410C6D8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:41:57:5c:93:bb:4d:bc:a4:a0:24:62:28:
                    a4:c9:99:44:74:c6:84:03:68:1d:7a:ca:c6:ac:40:
                    fe:5f:c3:5f:78:39:56:33:d5:f3:54:7b:1e:bb:45:
                    c9:2f:22:d9:c7:35:39:c2:b2:98:20:68:07:7d:52:
                    4c:ab:12:3f:9d:7e:27:fd:3d:0b:0a:df:eb:f5:d5:
                    75:dc:d7:6a:1b:19:1d:98:fe:f3:cc:66:f4:90:df:
                    39:68:d4:b1:c8:d6:42:87:42:30:a9:39:37:ef:90:
                    61:01:d3:85:1e:fc:52:53:f1:a5:ea:a2:b0:12:05:
                    e5:a5:a7:2d:77:a7:9c:f1:3f:bb:d9:7d:52:06:eb:
                    86:29:a6:70:15:96:71:c1:0f:09:66:61:83:41:1b:
                    e1:28:54:e5:16:1f:d5:b7:7a:c2:92:24:6f:0e:95:
                    d1:0b:45:79:99:f9:b0:7b:62:95:68:27:c3:62:3a:
                    e4:fd:af:c3:f6:39:77:9b:3f:9c:50:9f:9e:7e:87:
                    9d:cd:dd:7b:9e:ec:ab:9a:75:93:af:35:12:63:cf:
                    a1:af:22:be:b8:19:11:42:3f:84:56:31:74:bb:ff:
                    80:ff:fb:7f:4a:df:71:7f:55:43:97:59:2d:5e:63:
                    61:bc:fd:ca:b1:d1:50:76:a5:3a:b2:6e:ae:b1:74:
                    4b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:59:8E:F6:2E:62:0F:30:D3:15:C7:F5:A6:F6:1F:94:10:C6:D8:BE
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:e4:59:8c:a9:8b:a1:43:03:fe:df:d3:80:59:80:fb:1e:44:
         d3:61:47:03:bb:eb:00:c7:d9:9a:b6:fb:de:79:c1:0b:85:7a:
         94:ef:3f:6b:aa:6f:39:6b:01:4d:83:23:49:47:59:3d:be:ed:
         45:fe:e7:b0:cf:a7:cb:13:64:ef:e8:68:89:2c:57:37:38:08:
         30:42:17:80:54:e4:f2:64:ca:24:54:e8:2e:d7:53:5c:9b:d9:
         28:8b:b6:c8:75:0a:0a:8f:ec:ea:c4:2e:61:3c:bc:a6:2b:38:
         42:78:43:69:f2:b6:dc:12:c2:a4:88:7c:63:37:61:7b:fa:3b:
         2b:19:72:7e:12:09:ab:c6:5d:2e:c5:0b:4c:bb:a2:ee:4d:12:
         52:25:01:be:0a:5c:0a:8e:6c:24:11:c2:85:88:d6:cd:55:64:
         4f:d5:26:15:6c:29:d8:c8:d7:5f:66:94:cb:f3:23:1f:32:01:
         fd:84:51:60:38:f6:04:9c:c5:ae:52:6e:38:b3:9b:83:01:e0:
         71:bf:df:52:b2:2b:20:a7:3f:bf:3e:28:f0:7b:1e:d0:d9:bf:
         df:11:5f:dd:2b:8a:6a:1b:45:dc:c5:43:72:d5:e7:0a:fc:37:
         ba:9a:ba:33:b1:b2:23:c3:88:55:40:e1:d9:f9:f8:52:5f:57:
         b2:c9:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:37:50 2025 by rpki-client