Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a383037303a3a2f34342d3434203d3e20323637363238.roa
File:                     323830343a343435633a383037303a3a2f34342d3434203d3e20323637363238.roa (raw, json)
Hash identifier:          DlFODpZBzBX9GppfYU/WNKCO8QVhyIZYjZRcqz0GyFE=
Subject key identifier:   13:2C:20:A8:BA:92:30:88:00:A9:98:13:9A:78:4A:6A:18:84:C6:2E
Certificate issuer:       /CN=CC4C58019807553918DEAD8A63DFB7011B89945A
Certificate serial:       51277B5ED5A68880201265244A9172145476739B
Authority key identifier: CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a383037303a3a2f34342d3434203d3e20323637363238.roa
Signing time:             Thu 15 May 2025 13:59:22 +0000
ROA not before:           Thu 15 May 2025 13:54:22 +0000
ROA not after:            Thu 14 May 2026 13:59:22 +0000
asID:                     267628
IP address blocks:        2804:445c:8070::/44 maxlen: 44
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 18:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:27:7b:5e:d5:a6:88:80:20:12:65:24:4a:91:72:14:54:76:73:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4C58019807553918DEAD8A63DFB7011B89945A
        Validity
            Not Before: May 15 13:54:22 2025 GMT
            Not After : May 14 13:59:22 2026 GMT
        Subject: CN=132C20A8BA92308800A998139A784A6A1884C62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:bb:9f:12:4b:97:f7:1d:e8:90:f3:35:c1:
                    a8:60:4f:87:81:af:d9:04:76:ad:b2:9c:c8:2c:cd:
                    16:84:f7:b3:d8:f6:c0:02:58:3f:c7:4d:da:8d:72:
                    da:b5:4e:4b:5c:4e:48:fd:06:a5:37:39:d2:d4:02:
                    b9:9e:26:99:64:60:cd:c1:eb:7d:66:f9:6f:48:e3:
                    cb:dd:4e:f5:11:6a:24:95:b7:3d:72:99:ff:95:46:
                    df:3d:ce:5b:1d:9a:e7:e6:bc:ae:ff:ee:a1:fe:8e:
                    d4:c8:b6:f3:9c:13:98:d4:5b:59:d2:4f:3a:ba:8a:
                    a3:3a:fe:74:37:22:08:ee:3d:bb:17:61:2d:51:93:
                    c9:b8:43:bf:87:ec:78:0a:cd:dc:9c:56:35:eb:c9:
                    59:db:a6:7e:aa:9a:62:35:e8:d9:f8:74:49:51:fb:
                    99:e2:35:9c:f8:40:e7:ee:ee:70:cc:86:5c:a7:12:
                    f8:de:08:ed:cc:2e:86:1c:15:fa:a8:de:24:f8:e0:
                    1c:b5:77:43:46:8a:22:12:08:fd:95:2f:93:21:a0:
                    76:4f:1f:4e:89:78:ad:b7:3e:f5:dc:2d:07:5a:7a:
                    ab:45:37:b8:1c:04:7b:80:76:21:5e:df:55:e9:0f:
                    04:df:a4:ca:10:72:4a:3f:92:0e:10:e9:d5:70:61:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:20:A8:BA:92:30:88:00:A9:98:13:9A:78:4A:6A:18:84:C6:2E
            X509v3 Authority Key Identifier:
                keyid:CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/CC4C58019807553918DEAD8A63DFB7011B89945A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a383037303a3a2f34342d3434203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:445c:8070::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:65:d1:34:0f:7e:c8:18:a4:07:0c:24:bb:4e:65:c2:05:25:
         0b:e2:b6:b4:b8:82:75:89:8d:07:f5:34:54:40:e1:54:b7:6e:
         d7:1a:2d:22:07:73:d5:5a:81:03:2f:43:b2:e2:36:93:e0:6c:
         a2:64:05:34:7d:d0:dc:ca:e5:db:2f:a3:fc:37:60:73:28:cd:
         c9:ae:9b:2e:11:a0:57:4a:a2:81:de:7d:26:1b:fe:40:9a:88:
         06:8e:5c:d0:96:af:ca:73:82:ba:a9:c0:23:cb:95:23:bc:b9:
         0d:9d:80:c9:c2:d0:b3:27:75:56:71:4d:97:3e:19:82:9e:3c:
         d2:c8:6b:db:da:ff:3f:4f:a4:ac:56:ab:f8:dd:74:a8:82:c4:
         78:f1:2d:9b:7a:02:eb:1f:79:fe:67:63:13:58:a3:65:53:ff:
         cb:2b:3d:b3:09:e5:50:8d:d1:e2:0e:a6:47:e7:b5:96:2b:ae:
         e9:c4:b7:a5:f7:c2:81:9a:76:aa:a1:c1:d9:99:6a:09:2e:58:
         68:d4:9c:3d:4a:c7:ce:83:13:2b:21:db:af:50:d7:79:ba:5a:
         47:1b:13:d8:5f:02:0d:d6:69:9f:d1:19:3b:b1:9f:87:71:86:
         d6:df:05:a6:e2:8a:fe:e2:62:e8:3a:71:2c:5c:55:24:d9:29:
         af:0e:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:07:20 2025 by rpki-client