Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/323830343a366230343a3a2f33322d3338203d3e20323730333732.roa
File:                     323830343a366230343a3a2f33322d3338203d3e20323730333732.roa (raw, json)
Hash identifier:          vAgn0u/HsgHOMMccTgv67wbAITN3MIsvhel4n19jH1s=
Subject key identifier:   8F:66:43:71:9B:DA:87:DC:32:35:96:E9:02:2A:EA:23:C5:7F:7B:01
Certificate issuer:       /CN=160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE
Certificate serial:       7D564CDAEF93AFFAF620505F7CFDE920083ED615
Authority key identifier: 16:0E:07:41:C2:0C:69:D1:A3:99:5F:CE:C7:2F:6A:5F:6B:7E:79:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/323830343a366230343a3a2f33322d3338203d3e20323730333732.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     270372
IP address blocks:        2804:6b04::/32 maxlen: 38
Validation:               Failed, certificate revoked on Wed 04 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:56:4c:da:ef:93:af:fa:f6:20:50:5f:7c:fd:e9:20:08:3e:d6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:d3:83:f8:3a:a8:dd:d2:1d:b0:0f:4c:af:
                    e0:24:f7:c0:e2:e1:63:8a:11:b4:d9:ad:96:8a:a5:
                    87:d0:66:52:3d:3e:72:dd:8a:04:88:e4:d0:43:00:
                    7d:ab:a7:30:96:04:77:6c:2c:2c:c9:60:9a:99:0f:
                    2e:18:64:eb:cb:ac:e6:22:4b:3a:ab:aa:68:c1:55:
                    2e:bc:fa:92:b2:bc:14:cf:74:a2:38:88:a5:dc:af:
                    58:d2:3a:e2:42:40:8a:1a:66:2f:60:0c:fb:17:9a:
                    a1:55:d5:5e:89:d7:b9:39:1c:ec:ac:2a:44:81:59:
                    c3:68:2c:31:da:ef:9e:a0:37:1e:fd:c3:5a:03:d2:
                    fe:ad:6a:7c:f3:cd:75:60:42:98:64:9c:0f:7b:cd:
                    6c:56:a5:23:5a:58:9d:a3:84:7d:4f:1c:92:f3:3a:
                    d6:a8:74:48:42:a4:75:6d:fe:ed:32:09:fe:69:4c:
                    19:bb:24:84:c9:61:27:49:c3:c1:4d:da:65:56:64:
                    5e:55:4d:92:d0:d1:4c:bb:18:21:8c:28:d6:ec:af:
                    cc:84:03:17:1f:9e:89:51:85:fd:36:f8:0c:72:60:
                    aa:85:f4:e2:59:83:b6:d8:f0:19:0b:54:ce:e3:3c:
                    d3:e6:ae:ad:c4:93:11:1a:77:d1:64:10:6f:3a:86:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:66:43:71:9B:DA:87:DC:32:35:96:E9:02:2A:EA:23:C5:7F:7B:01
            X509v3 Authority Key Identifier:
                keyid:16:0E:07:41:C2:0C:69:D1:A3:99:5F:CE:C7:2F:6A:5F:6B:7E:79:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/323830343a366230343a3a2f33322d3338203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:14:13:a8:95:4c:75:fc:46:b2:d9:ea:57:20:e2:7a:fa:9c:
         25:89:e9:ae:34:6c:9e:11:5e:ff:d4:36:b9:9c:65:7a:6b:c0:
         8a:1b:bc:97:80:e7:c1:06:d2:96:ec:e5:3a:da:30:4a:ea:93:
         38:df:79:2e:c8:7e:ff:29:4c:bd:45:a5:d9:59:fc:3c:77:8b:
         83:94:d2:4e:38:c2:ab:1b:e2:a6:5d:85:76:e3:55:fc:b1:a0:
         d1:ba:b9:5e:33:7c:80:cc:ca:48:d4:ac:6d:7d:ce:50:3e:41:
         b2:19:05:45:9e:eb:24:b3:21:94:eb:e8:b3:8c:88:72:11:23:
         61:29:7a:17:53:ad:8b:c6:49:fd:db:4d:9c:49:c9:1e:72:1a:
         81:5d:de:bb:e8:9a:b2:a4:00:5f:02:9a:1c:30:87:08:78:27:
         8f:3c:30:23:f4:6e:51:21:2b:a5:b6:d3:f4:ff:fa:9d:90:f0:
         39:f7:90:63:dd:d0:2a:72:63:4b:23:34:b4:e5:62:ce:af:36:
         54:f7:f7:91:b4:d3:6f:e6:33:69:b0:b0:57:74:5c:c7:51:0b:
         6a:a8:04:70:84:cf:ea:08:e2:a2:21:4b:50:a4:e8:f1:d0:62:
         2f:fa:8d:da:bb:83:be:49:15:ed:e3:ab:8d:e0:46:74:f5:16:
         33:55:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:53:25 2025 by rpki-client