Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          wCgjZpfuYZ54zn3SMz75H+nfpEk5daS0rBX1WErEwpQ=
Subject key identifier:   64:32:A1:67:26:69:4B:EA:68:C6:40:A4:7B:51:95:9E:A7:36:ED:B6
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       5EBF684CBC9ABDC01A6BAFB22EC093CBBCD89D9F
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Mon 11 Aug 2025 13:19:39 +0000
ROA not before:           Mon 11 Aug 2025 13:14:39 +0000
ROA not after:            Mon 10 Aug 2026 13:19:39 +0000
asID:                     267027
IP address blocks:        2804:4708:c800::/37 maxlen: 37
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bf:68:4c:bc:9a:bd:c0:1a:6b:af:b2:2e:c0:93:cb:bc:d8:9d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Aug 11 13:14:39 2025 GMT
            Not After : Aug 10 13:19:39 2026 GMT
        Subject: CN=6432A16726694BEA68C640A47B51959EA736EDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:c0:b0:9a:8e:79:43:84:24:85:ae:d5:3d:
                    c4:e9:22:b5:a0:be:96:c9:32:5e:69:87:ab:cc:a5:
                    48:20:65:4e:9d:dd:bc:d7:14:6e:c5:95:04:41:e4:
                    a5:80:7e:c1:30:06:21:9b:6a:89:84:8d:34:68:9a:
                    89:6a:09:7e:ef:d9:b1:e9:a6:0a:ad:31:f4:07:1d:
                    6c:8f:64:df:15:1b:35:31:3d:cd:44:2b:ec:57:f4:
                    96:60:54:b6:97:53:3c:72:6d:40:70:51:ed:4e:3d:
                    be:d1:2b:e9:70:17:f1:0b:73:f5:76:d1:32:4a:1d:
                    9e:a2:6b:0c:57:fd:22:54:3c:1d:db:f6:7a:e8:97:
                    ca:21:22:b2:f1:6b:32:63:be:1f:1b:d9:d9:1b:92:
                    76:36:4f:e1:c6:84:49:75:21:fd:82:bf:f6:db:7d:
                    98:f0:4f:47:c0:fc:62:68:b4:e8:0b:33:63:b4:e0:
                    86:a7:76:23:e5:63:b0:9b:c4:b9:61:99:18:aa:72:
                    1a:fd:5e:45:23:1a:ec:6e:a6:2e:63:12:67:e1:e2:
                    9e:fc:7a:5e:4b:22:ec:89:9a:43:0f:bd:38:47:ff:
                    fc:0b:25:81:4f:a8:da:26:00:2a:33:12:7b:b6:9f:
                    60:4e:1d:a5:2f:50:06:bf:ee:54:28:bf:8c:b5:d9:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:32:A1:67:26:69:4B:EA:68:C6:40:A4:7B:51:95:9E:A7:36:ED:B6
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         14:68:00:f0:1b:50:46:e2:25:6e:95:d2:32:6b:6f:e8:d5:49:
         f4:b3:b1:d3:fa:b4:d8:6b:86:e4:bb:80:32:70:a2:38:66:90:
         ef:2d:73:a4:a0:9e:e1:68:f2:3f:da:b1:00:73:f6:7a:94:59:
         64:2b:75:0b:29:05:30:b0:b5:af:f9:a2:42:42:ad:b2:bf:b7:
         3f:95:50:94:c1:b9:91:6b:08:dd:d6:3c:19:52:d7:f7:af:ed:
         29:fb:98:d8:2d:64:a6:24:3a:77:eb:35:4d:c3:b6:31:3d:7f:
         f7:62:4a:f2:8c:a5:a8:92:a1:a1:8b:0c:1d:10:a9:cf:ed:8f:
         74:f6:b7:b5:f0:dd:05:5f:07:3d:af:dc:94:44:f2:0f:8c:46:
         87:c6:19:65:bc:34:0d:d0:4e:d5:a8:b1:f4:3e:df:2f:bd:af:
         c0:a5:e9:7a:b4:e3:d2:11:45:4a:25:2f:ac:98:78:6c:38:06:
         f3:ae:97:08:bb:f8:67:32:d4:3e:04:08:08:83:0e:28:99:57:
         fc:2c:5d:23:fa:9a:33:d1:24:69:d9:9a:20:3e:db:96:fe:d6:
         39:6e:7f:d8:8e:2a:89:5a:47:69:73:d6:24:58:8c:2c:9d:92:
         1c:05:b2:10:08:7f:11:3f:67:53:8a:25:35:19:7c:15:00:c8:
         e8:28:b1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:05:27 2025 by rpki-client