Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a383034303a3a2f34352d3435203d3e20323637363238.roa
File:                     323830343a343435633a383034303a3a2f34352d3435203d3e20323637363238.roa (raw, json)
Hash identifier:          SAFS2oXt6cozbdT9jXAw69sXoepSans3UJekPdYSe0g=
Subject key identifier:   78:7B:89:57:67:C0:96:BD:DC:A5:5E:B9:C9:2B:AE:7C:64:B8:C6:61
Certificate issuer:       /CN=CC4C58019807553918DEAD8A63DFB7011B89945A
Certificate serial:       18D310CF6CD46A731C65D6FB0E23BFA411A780DB
Authority key identifier: CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a383034303a3a2f34352d3435203d3e20323637363238.roa
Signing time:             Thu 15 May 2025 13:59:12 +0000
ROA not before:           Thu 15 May 2025 13:54:12 +0000
ROA not after:            Thu 14 May 2026 13:59:12 +0000
asID:                     267628
IP address blocks:        2804:445c:8040::/45 maxlen: 45
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 18:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d3:10:cf:6c:d4:6a:73:1c:65:d6:fb:0e:23:bf:a4:11:a7:80:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4C58019807553918DEAD8A63DFB7011B89945A
        Validity
            Not Before: May 15 13:54:12 2025 GMT
            Not After : May 14 13:59:12 2026 GMT
        Subject: CN=787B895767C096BDDCA55EB9C92BAE7C64B8C661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:cf:ad:d0:71:ce:19:44:f4:49:9d:1d:ac:
                    8b:0d:27:ae:a8:b0:ab:96:e2:96:d3:f9:ba:79:f0:
                    16:83:fe:24:8d:da:28:76:69:ad:cf:7a:d7:98:af:
                    6b:95:62:3a:7d:ea:5d:67:70:75:80:17:04:08:eb:
                    86:82:9b:1b:e3:34:88:09:d0:81:32:f9:3a:fd:37:
                    7e:ac:7a:e6:4e:ae:36:41:3b:f0:05:78:f9:f8:af:
                    7f:61:f3:3b:47:14:a3:20:98:34:46:8b:b5:53:50:
                    9f:dd:7f:06:cd:43:bb:a9:53:3c:22:c2:c6:cc:7c:
                    0d:2c:d6:13:8f:d9:c6:65:fb:96:c2:81:2e:47:77:
                    32:62:94:b7:a5:13:88:76:56:01:6e:f6:33:ba:95:
                    94:75:cd:72:a7:7d:53:8f:e8:18:3d:c2:af:78:4c:
                    fb:75:87:27:d2:16:22:c9:5f:75:91:cb:53:f0:e6:
                    16:98:79:08:10:c9:af:8b:ff:26:cf:df:e0:1e:5f:
                    c9:0d:9c:42:3e:b8:a2:d4:01:04:c6:d6:4e:9f:5a:
                    10:d9:a9:6d:12:9c:38:c6:a1:c2:69:cd:82:90:79:
                    1c:9e:87:83:b2:02:2a:b2:37:22:24:10:74:e3:ba:
                    77:4e:80:f5:d8:c7:15:db:53:e7:59:79:bc:3a:94:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7B:89:57:67:C0:96:BD:DC:A5:5E:B9:C9:2B:AE:7C:64:B8:C6:61
            X509v3 Authority Key Identifier:
                keyid:CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/CC4C58019807553918DEAD8A63DFB7011B89945A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a383034303a3a2f34352d3435203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:445c:8040::/45

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:d9:f1:5b:df:62:82:2b:46:4f:18:cc:73:d2:da:7b:e2:
         4c:8b:ae:c5:93:fa:e3:92:74:b7:e0:d2:b5:d3:ef:8c:59:34:
         9a:48:25:e6:75:f8:f3:2f:ef:d7:5f:2e:bc:8b:39:2b:cf:3f:
         eb:55:e7:6d:11:ef:fe:fb:76:c6:13:b1:b5:1e:d4:12:2c:dd:
         5e:5b:6e:ce:e2:49:82:31:c0:27:fe:e1:f4:60:84:e1:bb:0a:
         2c:84:8e:4e:29:33:df:88:f3:f8:29:80:ff:d1:0e:f2:dc:63:
         b4:78:7a:51:9f:44:e5:6f:05:e9:8f:45:af:d3:a9:f0:78:5c:
         56:56:e5:8b:0d:b8:b3:87:91:1c:b5:b3:14:4a:1d:52:69:5f:
         27:a8:8f:cf:50:e4:bc:b8:4f:b5:7a:bb:e3:21:56:ef:c7:d7:
         cd:3b:6f:96:96:95:1f:da:22:86:a2:82:34:e6:01:55:53:11:
         47:35:d5:b0:c0:86:35:d5:ff:1f:b1:6b:f9:a2:6a:a9:51:06:
         b0:05:97:bb:7f:6a:f8:97:6b:fb:a4:b9:83:01:08:36:6a:e9:
         77:81:11:45:96:ac:46:7f:e6:9f:99:19:89:00:b1:23:b5:9f:
         bb:89:eb:5b:d0:1e:c4:70:95:db:9c:87:c4:e5:4b:c0:89:b7:
         ad:3d:67:d4
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUGNMQz2zUanMcZdb7DiO/pBGngNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M0QzU4MDE5ODA3NTUzOTE4REVBRDhBNjNERkI3MDEx
Qjg5OTQ1QTAeFw0yNTA1MTUxMzU0MTJaFw0yNjA1MTQxMzU5MTJaMDMxMTAvBgNV
BAMTKDc4N0I4OTU3NjdDMDk2QkREQ0E1NUVCOUM5MkJBRTdDNjRCOEM2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUG8+t0HHOGUT0SZ0drIsNJ66o
sKuW4pbT+bp58BaD/iSN2ih2aa3PeteYr2uVYjp96l1ncHWAFwQI64aCmxvjNIgJ
0IEy+Tr9N36seuZOrjZBO/AFePn4r39h8ztHFKMgmDRGi7VTUJ/dfwbNQ7upUzwi
wsbMfA0s1hOP2cZl+5bCgS5HdzJilLelE4h2VgFu9jO6lZR1zXKnfVOP6Bg9wq94
TPt1hyfSFiLJX3WRy1Pw5haYeQgQya+L/ybP3+AeX8kNnEI+uKLUAQTG1k6fWhDZ
qW0SnDjGocJpzYKQeRyeh4OyAiqyNyIkEHTjundOgPXYxxXbU+dZebw6lM0bAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUeHuJV2fAlr3cpV65ySuufGS4xmEwHwYDVR0j
BBgwFoAUzExYAZgHVTkY3q2KY9+3ARuJlFowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEU0SEZ1REJMZFpDVEFqbmVpcnIzcFdSQVdHWnZDQ0RmdWRWVnRxZmVp
ZlEvMC9DQzRDNTgwMTk4MDc1NTM5MThERUFEOEE2M0RGQjcwMTFCODk5NDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNEM1ODAxOTgwNzU1Mzkx
OERFQUQ4QTYzREZCNzAxMUI4OTk0NUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFNEhGdURCTGRaQ1RBam5laXJyM3BXUkFXR1p2Q0NEZnVkVlZ0cWZlaWZRLzAv
MzIzODMwMzQzYTM0MzQzNTYzM2EzODMwMzQzMDNhM2EyZjM0MzUyZDM0MzUyMDNk
M2UyMDMyMzYzNzM2MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygERFyAQDANBgkqhkiG9w0BAQsF
AAOCAQEAWd3Z8VvfYoIrRk8YzHPS2nviTIuuxZP645J0t+DStdPvjFk0mkgl5nX4
8y/v118uvIs5K88/61XnbRHv/vt2xhOxtR7UEizdXltuzuJJgjHAJ/7h9GCE4bsK
LISOTikz34jz+CmA/9EO8txjtHh6UZ9E5W8F6Y9Fr9Op8HhcVlbliw24s4eRHLWz
FEodUmlfJ6iPz1DkvLhPtXq74yFW78fXzTtvlpaVH9oihqKCNOYBVVMRRzXVsMCG
NdX/H7Fr+aJqqVEGsAWXu39q+Jdr+6S5gwEINmrpd4ERRZasRn/mn5kZiQCxI7Wf
u4nrW9AexHCV25yHxOVLwIm3rT1n1A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:00:10 2025 by rpki-client