Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323638323637.roa
File:                     323830343a393165303a666230303a3a2f34302d3434203d3e20323638323637.roa (raw, json)
Hash identifier:          YiY1pWtCMZpulVw/gg/Qj6d/KExEeozaqnPqeTfp4hk=
Subject key identifier:   83:74:A8:BB:81:C1:F9:D8:32:4C:23:2E:51:EB:D4:EB:77:A1:AF:CB
Certificate issuer:       /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial:       668B6729B40146022CAE285C107C50B2C6189281
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323638323637.roa
Signing time:             Mon 26 May 2025 18:54:48 +0000
ROA not before:           Mon 26 May 2025 18:49:48 +0000
ROA not after:            Mon 25 May 2026 18:54:48 +0000
asID:                     268267
IP address blocks:        2804:91e0:fb00::/40 maxlen: 44
Validation:               Failed, certificate revoked on Thu 29 May 2025 17:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8b:67:29:b4:01:46:02:2c:ae:28:5c:10:7c:50:b2:c6:18:92:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
        Validity
            Not Before: May 26 18:49:48 2025 GMT
            Not After : May 25 18:54:48 2026 GMT
        Subject: CN=8374A8BB81C1F9D8324C232E51EBD4EB77A1AFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:eb:eb:e6:d1:d0:b3:ea:3c:7a:a9:7f:f5:
                    b0:e2:c1:4d:c5:05:fa:5d:fa:ac:18:96:5b:e1:d7:
                    19:87:67:43:05:97:fe:8d:61:29:6e:96:38:a8:43:
                    e5:82:ef:3d:27:f7:7f:fb:4c:e0:95:e2:52:6e:30:
                    88:fc:65:c0:67:96:9c:ad:c5:ce:5d:35:f6:18:9b:
                    31:eb:95:ad:2c:2d:3a:31:f1:58:e4:c8:45:36:aa:
                    3e:a7:68:e6:42:b8:33:72:a5:df:2e:2d:80:df:4d:
                    a4:f5:ac:b1:fe:36:ce:8f:f1:7e:94:07:4d:0e:8a:
                    fd:7a:17:5b:51:8c:ff:45:1d:2e:5d:b0:36:6f:16:
                    a1:d9:8e:45:b7:38:7d:d3:53:f5:29:2d:80:a9:8f:
                    86:27:2f:29:68:36:b8:2b:0c:fe:32:71:cf:63:fe:
                    93:b2:ac:f3:52:b7:25:5e:dc:63:a3:93:c0:30:c9:
                    06:e5:19:71:4d:6b:ae:c9:2a:1d:af:93:cc:66:96:
                    c5:6d:91:1c:fd:bc:ab:bc:95:c7:47:20:95:14:30:
                    e2:e5:31:02:ad:10:8b:2d:88:7b:77:07:37:c2:31:
                    f6:bc:bc:12:ce:b3:5f:25:77:4c:c5:ea:d8:f3:bd:
                    88:14:94:aa:df:f5:37:c3:ba:28:53:24:e0:01:9e:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:74:A8:BB:81:C1:F9:D8:32:4C:23:2E:51:EB:D4:EB:77:A1:AF:CB
            X509v3 Authority Key Identifier:
                keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:92:be:9c:5b:ea:61:f5:ba:f0:f1:cc:5c:09:5a:f6:f4:
         c4:d1:08:e8:07:35:e2:ae:b8:da:1f:69:db:e8:06:73:7a:64:
         e2:a3:6f:30:67:8c:98:ed:cf:f8:1f:87:d0:57:62:e7:ed:3d:
         e8:10:f5:42:31:f6:5e:60:86:40:3d:2e:e2:35:ec:e9:1b:13:
         77:2a:b6:cc:0c:b3:59:8f:d3:11:d0:7a:67:87:6d:bc:68:50:
         e3:11:6f:35:8a:01:e8:c7:c0:3c:9d:f9:6e:7a:eb:79:74:59:
         60:82:99:6e:c2:70:53:87:20:ce:57:a8:ae:12:19:00:e4:b6:
         2c:4a:df:c4:0d:72:0f:aa:b6:7f:49:73:5f:d6:39:8c:9a:e7:
         7a:f5:68:e2:2a:35:0e:5d:c0:c7:73:f4:6d:05:19:53:a4:bb:
         ad:b3:93:66:56:cb:29:18:bb:98:de:c7:f9:1f:0a:f4:ad:53:
         fe:1f:7a:62:ac:aa:af:33:b2:6b:a9:ad:11:25:7b:47:7e:d8:
         05:dc:c0:6e:58:33:9b:4a:76:81:14:f6:cf:83:97:1f:54:9b:
         50:2a:ff:9d:08:e0:e6:45:56:34:64:9f:62:a3:2a:97:8a:65:
         7d:3b:d6:75:23:44:53:22:55:0b:19:cf:91:ea:0b:cd:76:a2:
         24:1f:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:33:34 2025 by rpki-client