Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa
File:                     323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa (raw, json)
Hash identifier:          s6LoUlLM/feh4ngFm0SX7IQCvK/W3Ox5KzKCrxN+Lho=
Subject key identifier:   28:66:BD:0C:50:CA:B5:10:0B:13:54:3C:14:AE:F8:A5:E9:08:4D:C1
Certificate issuer:       /CN=DE1B261EC657E0492948F07F01B7D7F9081D188F
Certificate serial:       748BA66EE11A2A0C419E2292FF7F1FBEC312E329
Authority key identifier: DE:1B:26:1E:C6:57:E0:49:29:48:F0:7F:01:B7:D7:F9:08:1D:18:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1B261EC657E0492948F07F01B7D7F9081D188F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa
Signing time:             Fri 08 Aug 2025 18:33:55 +0000
ROA not before:           Fri 08 Aug 2025 18:28:55 +0000
ROA not after:            Fri 07 Aug 2026 18:33:55 +0000
asID:                     272182
IP address blocks:        2804:8330:8000::/33 maxlen: 33
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8b:a6:6e:e1:1a:2a:0c:41:9e:22:92:ff:7f:1f:be:c3:12:e3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1B261EC657E0492948F07F01B7D7F9081D188F
        Validity
            Not Before: Aug  8 18:28:55 2025 GMT
            Not After : Aug  7 18:33:55 2026 GMT
        Subject: CN=2866BD0C50CAB5100B13543C14AEF8A5E9084DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:7e:4a:cc:d9:8e:20:90:d2:9d:b0:00:0c:
                    6b:75:a9:e2:e3:38:3a:5c:2f:92:f3:c2:bb:26:83:
                    b8:49:d0:e9:a6:9d:68:de:e0:6f:2f:a9:56:54:fd:
                    e7:47:83:01:d3:76:d8:6c:d4:2f:b1:76:fe:0f:58:
                    d2:9d:85:39:89:69:34:05:5b:a7:17:a8:e6:f4:5f:
                    cd:a7:28:3d:0d:e0:0b:b0:03:39:71:38:21:1e:f0:
                    c8:14:6f:de:a2:22:30:78:29:06:85:17:3d:e8:1b:
                    5d:be:73:03:c2:e2:0c:41:e0:ab:88:1f:cf:bd:7b:
                    48:31:e5:0a:15:96:76:ad:25:71:48:e3:64:b6:48:
                    08:02:62:d2:3f:26:25:ec:41:c0:57:83:75:1a:63:
                    45:de:17:f9:3e:46:c9:bd:fc:82:d8:49:d9:07:88:
                    b2:e2:07:60:65:e0:2c:bc:91:0f:51:ea:27:81:16:
                    8c:d1:65:fb:c9:36:0a:73:06:1f:23:15:70:a3:41:
                    40:d5:d2:62:71:64:e6:7d:bd:1b:52:41:b1:d4:b3:
                    8e:cb:8e:58:f1:38:e1:26:a3:37:51:03:d8:2d:0d:
                    d4:ea:a9:1d:ad:15:37:d9:b4:d2:0c:1f:7a:ab:50:
                    85:2d:4e:fa:84:37:2e:e0:f0:28:b6:b4:3d:0b:93:
                    c4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:66:BD:0C:50:CA:B5:10:0B:13:54:3C:14:AE:F8:A5:E9:08:4D:C1
            X509v3 Authority Key Identifier:
                keyid:DE:1B:26:1E:C6:57:E0:49:29:48:F0:7F:01:B7:D7:F9:08:1D:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/DE1B261EC657E0492948F07F01B7D7F9081D188F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1B261EC657E0492948F07F01B7D7F9081D188F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:31:b4:dc:46:d5:85:fb:20:f3:a0:88:c2:5f:f2:c3:0a:25:
         a4:17:ae:8f:41:8b:ab:f6:4d:a1:aa:f9:77:d9:8d:85:60:c1:
         6a:c7:c9:b3:40:74:09:b1:12:f3:8d:ed:b3:a5:68:4c:d7:7f:
         d2:03:f2:c0:a4:1c:e5:43:52:28:5e:35:36:79:12:b5:b3:33:
         61:ad:11:cf:21:e5:72:d0:77:9e:9c:c4:f6:19:5c:cb:7a:ad:
         29:bd:fd:c3:a5:83:8d:fd:6c:54:fc:85:0e:68:c1:4e:b5:7e:
         ff:be:7b:75:83:78:28:c9:e8:1e:a1:ee:8f:c7:de:9d:70:a3:
         c1:d8:d7:a2:22:b7:e3:39:c0:6c:53:db:8d:bb:d7:75:48:6f:
         55:68:2c:eb:6b:b4:91:1f:3f:00:9e:24:6c:c5:a6:17:9f:16:
         3a:19:7d:21:97:82:cc:47:8d:cb:b0:ee:3d:fb:7b:f7:a9:8c:
         7c:94:18:58:6e:89:5d:9e:36:cf:7f:ae:7a:2f:be:ca:b8:f4:
         45:13:70:89:cb:41:8c:36:06:76:bc:ce:20:c7:c4:e6:ff:0f:
         16:53:a2:dd:ae:53:90:7c:fd:9d:20:9e:12:d9:fa:ef:1d:8d:
         c2:e3:31:1b:88:4a:9a:45:84:44:2d:44:1f:73:f6:ff:26:5d:
         26:58:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:11:29 2025 by rpki-client