Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa
File:                     323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa (raw, json)
Hash identifier:          NuQzM9IXhRg7x/0gzNo9k+TSarZahniX5w2ndQfn5rk=
Subject key identifier:   73:C0:C2:DC:DC:66:2C:5A:A3:4E:75:2D:34:66:8F:98:A9:43:10:20
Certificate issuer:       /CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
Certificate serial:       5EA8F28E731F5A4C7B76D11D3A5164BF464D6B22
Authority key identifier: 27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa
Signing time:             Thu 09 Jan 2025 22:18:13 +0000
ROA not before:           Thu 09 Jan 2025 22:13:13 +0000
ROA not after:            Thu 08 Jan 2026 22:18:13 +0000
asID:                     265486
IP address blocks:        2804:34e0:4000::/34 maxlen: 34
Validation:               Failed, certificate revoked on Thu 09 Jan 2025 22:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a8:f2:8e:73:1f:5a:4c:7b:76:d1:1d:3a:51:64:bf:46:4d:6b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
        Validity
            Not Before: Jan  9 22:13:13 2025 GMT
            Not After : Jan  8 22:18:13 2026 GMT
        Subject: CN=73C0C2DCDC662C5AA34E752D34668F98A9431020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:33:64:27:36:d5:d4:e3:a1:7d:a1:79:3a:
                    a4:d4:db:a4:be:4c:71:40:84:4e:9c:df:56:15:6f:
                    e8:32:6d:3d:ab:19:a7:96:8f:60:bf:62:63:ed:ca:
                    f3:fd:48:c7:b2:11:17:d8:74:b7:62:af:cb:9c:f5:
                    97:30:b1:67:c6:17:b2:22:fc:9d:8b:29:bb:fa:1e:
                    10:4c:91:6c:8b:23:84:70:9d:0c:95:dd:08:19:41:
                    c7:c8:0c:1d:64:e1:78:ab:f1:5b:e1:cf:60:b9:3d:
                    66:8e:3e:dc:aa:b5:6d:99:0b:8f:2c:1c:87:88:b5:
                    e0:b6:3c:3b:65:6b:0a:1d:66:d2:9b:ea:d5:79:15:
                    c5:13:6e:02:77:43:11:92:53:a7:42:3d:8f:d2:7d:
                    88:9a:f3:76:a4:09:7a:55:38:82:f7:ee:b0:08:05:
                    b1:f2:3a:f0:dd:58:9e:97:0b:bd:f7:37:c3:62:10:
                    a1:20:96:9f:ca:31:8a:2a:94:62:b7:77:6a:fc:a5:
                    94:f1:7c:c7:36:0f:ae:f8:49:f6:51:9b:45:c5:e3:
                    7d:ef:f7:47:e3:e2:fe:6a:60:71:9e:91:8f:c5:ed:
                    c8:f4:56:ab:72:84:da:75:00:e9:7e:f1:80:1f:1a:
                    5c:2f:ea:44:bb:9c:71:88:6f:9d:19:09:1f:cd:c2:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C0:C2:DC:DC:66:2C:5A:A3:4E:75:2D:34:66:8F:98:A9:43:10:20
            X509v3 Authority Key Identifier:
                keyid:27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:55:c5:df:63:39:fa:cc:c7:7c:aa:fe:d4:dd:12:2b:96:
         7b:f0:4d:14:e4:ca:47:3b:2b:3d:e2:b9:45:16:ab:ed:6a:7a:
         a5:2a:78:74:2d:6b:56:30:6f:94:c3:bc:52:e0:e5:7d:af:4a:
         60:a1:ce:cd:79:1b:23:c3:d1:7a:51:91:40:0e:1f:e8:4b:1a:
         5f:99:45:b4:f9:0b:7b:a2:01:80:aa:45:b1:15:fb:77:2f:5c:
         cd:0c:d5:5e:75:45:f3:cf:54:eb:a7:c2:fa:ae:6d:8f:12:2e:
         14:f4:9e:6a:1c:a8:c1:ca:10:73:06:a4:a6:5d:d6:4b:7e:2e:
         1b:02:43:04:4c:83:50:d5:53:42:5d:1b:54:31:3b:3d:64:fe:
         6f:64:46:e6:de:b9:06:b5:2d:68:83:b0:2b:2e:06:a7:3a:1f:
         d8:22:e4:21:c6:77:08:df:75:bc:f8:cb:68:79:71:e7:00:63:
         40:54:ab:51:ac:bb:aa:96:97:86:bc:a8:73:f0:99:24:77:69:
         7d:a7:c8:dc:f1:91:1f:3b:7d:d0:77:73:04:31:10:b5:84:c7:
         29:3d:60:54:3b:80:ee:a0:4c:76:2e:ba:9b:1d:32:75:a0:3b:
         13:91:2a:06:0c:79:c7:bd:55:c7:53:92:59:87:21:67:6c:2b:
         01:09:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:27 2025 by rpki-client