Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3333203d3e20323730393330.roa
File:                     323830343a373361633a3a2f33322d3333203d3e20323730393330.roa (raw, json)
Hash identifier:          I/q2SUT2MKK/u6a7+MSTxECgvICFR/wWcwF+KyzlPdE=
Subject key identifier:   D0:DB:CD:E5:DA:93:96:63:6C:72:EB:30:F7:6A:47:1F:01:BE:F9:1F
Certificate issuer:       /CN=1EE4D67FA010E491BFEDFB7AA592F824EBBC5208
Certificate serial:       5BC16A2E2AB013694CCFDAA959771A7360F96B77
Authority key identifier: 1E:E4:D6:7F:A0:10:E4:91:BF:ED:FB:7A:A5:92:F8:24:EB:BC:52:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3333203d3e20323730393330.roa
Signing time:             Tue 04 Mar 2025 02:43:30 +0000
ROA not before:           Tue 04 Mar 2025 02:38:30 +0000
ROA not after:            Tue 03 Mar 2026 02:43:30 +0000
asID:                     270930
IP address blocks:        2804:73ac::/32 maxlen: 33
Validation:               Failed, certificate revoked on Tue 04 Mar 2025 14:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c1:6a:2e:2a:b0:13:69:4c:cf:da:a9:59:77:1a:73:60:f9:6b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE4D67FA010E491BFEDFB7AA592F824EBBC5208
        Validity
            Not Before: Mar  4 02:38:30 2025 GMT
            Not After : Mar  3 02:43:30 2026 GMT
        Subject: CN=D0DBCDE5DA9396636C72EB30F76A471F01BEF91F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ec:5b:b2:74:cc:3a:6c:0f:8b:e6:f5:e7:46:
                    a4:aa:b3:20:47:44:ec:1a:2d:1a:1a:6e:be:3b:51:
                    36:6f:fb:dc:83:6b:e5:13:b1:ef:cc:14:89:64:c8:
                    3f:b8:ec:f0:5a:94:95:3f:80:1c:70:f9:d8:7c:92:
                    a4:65:47:04:81:04:0c:5e:b2:11:8c:b7:9e:ab:4f:
                    9d:d0:af:87:96:a2:b7:e9:3a:42:61:59:cc:67:7f:
                    4f:d0:58:20:28:da:41:a3:d6:06:bf:64:7e:b0:31:
                    3b:1c:0b:d6:35:dd:6b:5c:ce:ee:f8:45:1d:7e:5b:
                    02:00:9d:6f:f6:29:53:8b:b0:e0:97:f0:af:01:fd:
                    14:f1:3c:36:cb:72:45:28:31:92:c4:a8:38:c7:72:
                    e6:3e:ce:b4:57:3e:43:7c:8f:46:41:e7:2a:a8:95:
                    30:fd:95:e0:01:16:cf:54:54:de:ef:f4:c3:f7:ac:
                    aa:7a:87:9f:c0:a8:76:6e:f7:37:95:49:7e:c9:92:
                    b8:ef:01:16:9a:8e:66:3a:d0:97:6f:e4:8b:7b:0a:
                    d8:aa:e4:9b:e0:7b:99:c7:21:f6:26:06:60:9e:b0:
                    9b:9d:a6:aa:7a:17:b5:4a:d8:38:79:0a:c8:64:0a:
                    5d:0d:e2:52:48:79:a4:8c:9d:c7:87:c7:7b:59:a4:
                    cb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:CD:E5:DA:93:96:63:6C:72:EB:30:F7:6A:47:1F:01:BE:F9:1F
            X509v3 Authority Key Identifier:
                keyid:1E:E4:D6:7F:A0:10:E4:91:BF:ED:FB:7A:A5:92:F8:24:EB:BC:52:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3333203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:a5:92:90:c3:53:26:d8:3b:0c:d5:9d:d1:5a:e7:fb:8e:e7:
         93:06:37:02:5b:a5:07:71:bb:fa:6e:76:6c:49:21:02:a6:bb:
         34:03:ff:5f:27:cf:32:1d:8c:80:a9:c1:a5:e5:f9:ff:3a:4e:
         e7:b7:03:c6:6d:b5:93:de:6b:9a:64:8f:d6:1c:01:0a:b7:f5:
         91:22:b0:28:c2:04:d1:93:3d:14:2a:49:44:d2:0b:07:fc:d9:
         a6:cd:92:b9:9a:22:3c:a5:64:fc:b4:cf:9f:c0:d4:77:d9:4c:
         44:b4:4c:39:b2:8b:fa:d6:35:31:38:a3:7b:0f:a7:a9:ed:af:
         d2:62:c1:b5:4a:99:07:7f:d2:02:02:79:32:74:ae:9b:5e:74:
         78:4c:9e:71:6a:1f:8d:8a:8b:2e:b4:2f:49:51:86:b2:ae:d5:
         49:fd:2c:cb:5a:b8:3c:8d:89:d3:20:fa:c8:cd:7a:16:b8:61:
         fa:4b:d7:71:39:37:b1:09:c6:3d:d9:ae:e8:c0:73:2d:66:41:
         f5:0a:85:98:f6:9e:a4:c5:f1:1c:a8:18:e4:e9:ed:ec:73:23:
         75:d1:83:3b:bd:0d:fd:b9:21:a2:61:e7:36:5b:9f:0b:59:cf:
         f0:7a:8c:93:d0:e3:6d:bb:3e:f5:d5:b7:d4:40:70:67:dc:cc:
         72:b8:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:32:49 2025 by rpki-client