Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323632353838.roa
File:                     323830343a363133343a3a2f33322d313238203d3e20323632353838.roa (raw, json)
Hash identifier:          bAeX4djGqKqaeIXDLmaUumoWX74Bb3nnlT6SIE4phW4=
Subject key identifier:   C4:93:36:32:1A:6A:3C:32:B5:7A:47:15:04:76:17:80:8B:0C:2B:AC
Certificate issuer:       /CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
Certificate serial:       63E7B9F4BEBCE1C50F318D94B4309DCD9FBDAC66
Authority key identifier: 44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323632353838.roa
Signing time:             Mon 19 May 2025 14:34:05 +0000
ROA not before:           Mon 19 May 2025 14:29:05 +0000
ROA not after:            Mon 18 May 2026 14:34:05 +0000
asID:                     262588
IP address blocks:        2804:6134::/32 maxlen: 128
Validation:               Failed, certificate revoked on Sat 31 May 2025 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e7:b9:f4:be:bc:e1:c5:0f:31:8d:94:b4:30:9d:cd:9f:bd:ac:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
        Validity
            Not Before: May 19 14:29:05 2025 GMT
            Not After : May 18 14:34:05 2026 GMT
        Subject: CN=C49336321A6A3C32B57A4715047617808B0C2BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:f5:9c:44:53:13:e2:1f:00:b5:e5:67:4d:
                    f1:d4:6c:76:40:1d:c4:6c:e5:c8:d8:b4:ef:ce:33:
                    2a:9b:5f:73:3e:93:8e:43:eb:9b:be:7d:df:7d:a8:
                    ac:bb:0a:11:76:24:ba:fb:3a:29:47:f2:52:d2:92:
                    ce:b1:39:1e:93:ea:60:5a:f1:11:0e:b2:e3:ef:c6:
                    e1:d2:ee:d7:92:c0:30:7a:be:36:ca:90:89:96:c8:
                    db:ac:02:70:88:ea:b1:fc:a3:65:3d:3a:26:87:4c:
                    51:1b:01:cc:f7:5d:2d:cb:1e:91:0e:37:8c:5e:be:
                    c5:65:a8:48:1e:e6:2f:83:27:8e:73:e4:c0:9e:34:
                    e7:65:e6:36:c7:fe:0f:fd:0c:aa:b1:35:ac:b2:a4:
                    6f:98:7c:b2:a6:9a:1d:bf:81:bd:f1:ff:34:27:06:
                    8c:3c:7f:ad:b4:da:31:5c:ed:41:a3:56:69:0a:61:
                    4f:47:e5:83:51:50:68:c0:24:58:90:21:65:c7:3c:
                    61:c3:64:43:32:42:b7:97:21:a6:32:8b:33:ed:96:
                    b5:aa:9d:2b:7a:67:d3:88:e8:00:60:da:d3:16:9c:
                    b7:b6:c3:49:3d:b0:92:88:6c:0c:89:cd:59:64:9c:
                    fd:77:ea:60:60:8c:dc:7e:34:da:24:dd:18:a4:93:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:93:36:32:1A:6A:3C:32:B5:7A:47:15:04:76:17:80:8B:0C:2B:AC
            X509v3 Authority Key Identifier:
                keyid:44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6134::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:86:ea:31:43:3b:32:e2:3b:26:f0:5c:80:71:ca:f3:7e:
         df:54:d9:0f:9d:7a:6c:79:24:c6:98:71:b5:6a:c1:de:c4:a5:
         a1:05:3c:f0:bb:3e:7f:c5:84:fd:0b:fb:c0:98:3a:88:67:45:
         d5:27:a3:46:b1:38:b7:de:e6:29:89:dc:dd:38:25:7e:91:8e:
         ab:7b:3d:29:97:b3:a0:61:f2:4b:11:9e:b4:b4:18:66:4a:2f:
         98:25:46:5d:20:d2:05:9e:06:17:52:85:23:92:ae:0d:58:ef:
         e6:2e:6d:6c:44:87:3c:aa:af:b6:e1:26:66:70:86:64:b1:b3:
         db:92:b1:07:83:1c:5c:7f:48:4c:99:ed:ed:99:6e:39:5c:36:
         2f:dc:49:63:d9:b8:81:c0:e5:ae:99:d2:7b:60:0b:27:33:d8:
         49:00:57:9b:47:f4:ee:1f:f2:95:32:24:40:53:e3:f9:22:3e:
         81:70:28:14:70:81:a1:cb:b5:5e:00:51:20:cd:0a:5b:4a:9f:
         25:9b:35:97:a2:8a:1b:20:05:1c:5c:c6:35:ec:c8:cd:81:ce:
         7d:4d:61:7c:f5:45:8e:88:9f:69:8d:2f:1e:d7:cc:8c:1d:36:
         df:07:d3:19:6b:4d:a8:22:d0:50:90:ac:b3:5d:9c:99:e5:d4:
         fc:01:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:03:41 2025 by rpki-client