Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/323830343a313334383a3a2f33322d3332203d3e20323633353236.roa
File:                     323830343a313334383a3a2f33322d3332203d3e20323633353236.roa (raw, json)
Hash identifier:          N+EuDolLjzPYjX/4nqnC4rc0nqYn8gzMlH0aSiZjU4w=
Subject key identifier:   A9:AD:8F:5D:C3:90:6A:FF:4B:56:63:7B:A2:96:BE:B4:59:C6:38:7B
Certificate issuer:       /CN=D72D3F46524FD32B12A8857ADA6A36351587C90E
Certificate serial:       13EA42E8DB12B506B26B5563212DF38E02EE497E
Authority key identifier: D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/323830343a313334383a3a2f33322d3332203d3e20323633353236.roa
Signing time:             Tue 13 May 2025 13:48:55 +0000
ROA not before:           Tue 13 May 2025 13:43:55 +0000
ROA not after:            Tue 12 May 2026 13:48:55 +0000
asID:                     263526
IP address blocks:        2804:1348::/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 13 May 2025 15:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ea:42:e8:db:12:b5:06:b2:6b:55:63:21:2d:f3:8e:02:ee:49:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D72D3F46524FD32B12A8857ADA6A36351587C90E
        Validity
            Not Before: May 13 13:43:55 2025 GMT
            Not After : May 12 13:48:55 2026 GMT
        Subject: CN=A9AD8F5DC3906AFF4B56637BA296BEB459C6387B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:07:9f:36:f5:04:d3:5b:e8:3d:32:5b:ab:
                    be:8e:a6:e3:21:4d:a6:88:5a:c0:87:42:70:8b:c0:
                    ef:97:11:14:52:4f:c3:66:9b:29:0a:25:1d:a7:2c:
                    23:06:8a:33:8f:40:22:39:0a:2f:9f:aa:8a:ce:c3:
                    75:28:07:b5:2e:0b:89:0a:ae:32:19:ca:93:9b:f1:
                    44:57:f6:3e:63:01:4e:1b:73:c9:f4:19:96:71:33:
                    bd:49:8f:c0:b0:f4:5b:49:98:7e:9a:e7:c3:81:85:
                    47:50:6f:0f:68:92:4b:b9:15:3c:7e:a2:a0:c2:15:
                    22:f1:53:0a:69:4e:63:24:cd:e7:f9:1a:d4:7f:f3:
                    92:9c:c2:0f:4c:e4:4b:4e:a5:61:88:fb:49:3d:a7:
                    ff:ab:3a:99:f8:35:00:c5:d0:e1:c2:ba:03:d5:cb:
                    6e:e2:ad:c2:d8:94:3a:47:e0:28:ef:69:b6:ff:85:
                    89:39:bf:84:5a:5c:c5:3d:2a:33:c9:14:6c:dc:73:
                    a5:59:17:06:59:2d:66:fd:8c:60:5e:ee:da:5a:dc:
                    34:6d:b3:3a:2f:83:1c:36:26:fb:85:64:b5:b6:d4:
                    fb:e3:3f:91:94:47:80:3f:7e:e8:39:46:81:6f:10:
                    be:b5:10:c4:54:85:19:11:ac:f4:fc:35:40:88:96:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:8F:5D:C3:90:6A:FF:4B:56:63:7B:A2:96:BE:B4:59:C6:38:7B
            X509v3 Authority Key Identifier:
                keyid:D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/323830343a313334383a3a2f33322d3332203d3e20323633353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1348::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:cf:56:81:fd:3b:28:c9:c7:fa:fc:78:23:1d:b7:5e:bc:
         cc:c1:f7:21:35:22:29:80:8d:63:15:b0:7a:aa:a3:22:9e:08:
         0e:a2:51:77:13:f2:59:1f:f9:11:d1:22:74:a0:44:dd:97:4f:
         7f:29:10:a0:eb:f6:4e:e0:d9:f2:97:9d:a3:73:96:a4:fd:28:
         0e:87:1d:15:9c:3a:d1:8c:70:8a:ec:2d:3b:4b:43:70:21:a6:
         66:9d:87:87:33:53:84:4b:f9:b9:25:2f:3d:fd:f3:dd:96:d7:
         51:24:3e:b9:6e:19:87:08:96:b3:17:eb:3f:0d:a1:b4:7d:84:
         6c:4e:75:99:f9:fa:f7:46:e3:51:b8:a8:3c:ed:03:61:d1:02:
         40:e8:ab:2f:98:16:22:59:e5:b2:75:36:bb:24:8b:43:e6:24:
         a4:84:fe:a8:e8:ce:55:70:9b:c8:10:a2:44:81:86:69:1f:6c:
         da:f3:eb:77:ce:c2:02:25:57:74:5d:81:dd:59:62:c5:b0:9e:
         42:95:f1:47:97:7e:f8:18:d0:e3:25:3e:08:7d:0e:c3:2e:7b:
         fe:5e:d5:ed:77:bb:f0:a7:b2:5d:fa:b6:22:28:74:33:ac:a3:
         88:f5:06:66:fd:75:a8:c2:c6:5f:0f:e5:00:73:5d:95:f6:ab:
         e8:b5:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:05:36 2025 by rpki-client