Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3332203d3e20323637303539.roa
File:                     323830343a343738343a3a2f33322d3332203d3e20323637303539.roa (raw, json)
Hash identifier:          0+u7ySjTvIDQFvHcnAHhlmQp76KLdXWVBFpVN6JFwCM=
Subject key identifier:   AB:49:E8:D4:E0:03:32:0D:A5:C5:0D:24:4E:7B:5D:EE:6F:33:00:88
Certificate issuer:       /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial:       19C1CD0203C157BFB5FFCAD6111EA15E8F7F4E88
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3332203d3e20323637303539.roa
Signing time:             Sat 26 Apr 2025 16:17:45 +0000
ROA not before:           Sat 26 Apr 2025 16:12:45 +0000
ROA not after:            Sat 25 Apr 2026 16:17:45 +0000
asID:                     267059
IP address blocks:        2804:4784::/32 maxlen: 32
Validation:               Failed, certificate revoked on Sat 26 Apr 2025 18:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c1:cd:02:03:c1:57:bf:b5:ff:ca:d6:11:1e:a1:5e:8f:7f:4e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Validity
            Not Before: Apr 26 16:12:45 2025 GMT
            Not After : Apr 25 16:17:45 2026 GMT
        Subject: CN=AB49E8D4E003320DA5C50D244E7B5DEE6F330088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:ca:4a:fb:31:a7:a6:6a:e0:63:95:41:00:
                    33:32:c9:6e:74:87:75:28:f4:5c:59:63:79:2b:41:
                    41:65:be:12:38:14:89:41:d1:16:e9:65:a5:89:a4:
                    85:d9:dc:3b:27:70:3b:0c:6c:35:5c:67:66:d1:0e:
                    f5:95:be:89:eb:db:54:4f:c1:97:2e:03:a6:8c:d2:
                    8b:65:da:78:cb:9a:f5:88:5a:31:fd:13:c1:c9:f8:
                    a1:2d:47:ed:a4:12:b0:ff:47:d8:74:76:86:e8:40:
                    2e:31:22:20:c9:e3:c5:48:98:82:49:2e:0c:9c:34:
                    69:4f:49:9d:88:8d:d9:91:68:29:c8:cf:24:85:43:
                    6c:5b:96:8a:97:01:b6:7d:a1:4b:ab:8e:75:89:92:
                    72:01:fd:02:ee:e5:9b:c7:a5:a4:5f:e5:91:65:ca:
                    be:9c:73:fe:c7:ae:ae:e8:97:92:b8:69:30:2a:60:
                    90:68:2b:5b:66:30:4b:f7:c1:2e:bd:9d:d5:f8:14:
                    b3:51:ef:bf:f0:a8:a4:c8:7d:44:01:47:09:1f:dc:
                    6d:51:f7:7f:4b:74:75:44:ac:23:96:ce:03:41:7b:
                    18:c8:0f:95:01:06:6e:19:8d:03:69:b3:6b:ce:56:
                    70:92:2d:63:e1:76:56:ce:7a:74:f6:ad:c1:99:31:
                    99:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:49:E8:D4:E0:03:32:0D:A5:C5:0D:24:4E:7B:5D:EE:6F:33:00:88
            X509v3 Authority Key Identifier:
                keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3332203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4784::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:2c:7e:b8:65:37:5f:39:32:4d:d1:28:a0:f6:05:6a:61:
         ec:c6:00:a2:40:07:07:ec:bb:a1:3a:d2:10:a3:4e:46:99:66:
         1f:75:75:e0:3c:6c:9b:dd:f7:30:79:7b:3c:d0:2d:99:d7:94:
         89:ee:fa:1e:61:96:a6:11:bc:c4:ba:61:d8:76:be:f3:b0:7b:
         2a:07:49:6e:6c:41:7d:fe:ea:11:26:cb:25:b7:3f:90:92:dd:
         b8:12:49:51:b0:80:76:00:55:46:a2:4a:74:83:5b:c8:24:d0:
         3b:5f:1b:b9:61:65:e6:49:06:ef:2c:33:ed:2d:72:20:a7:29:
         51:fc:25:ad:1d:dd:a1:f5:9d:2b:6c:68:0b:92:ed:54:e3:05:
         91:e4:a3:b2:45:45:13:be:eb:8e:1a:24:a8:01:42:cb:95:a2:
         d8:aa:f5:a8:fb:11:1a:da:b6:45:b6:af:59:d2:12:6d:0b:85:
         36:75:85:8b:e9:68:6f:e1:8e:b6:55:03:4d:aa:bc:f5:81:14:
         9d:18:a9:28:87:56:26:0d:d2:b4:f1:18:ad:0f:8b:e5:e0:77:
         6f:b3:74:48:1e:03:b1:29:1b:72:e7:45:e6:ff:b0:ef:a2:8f:
         2b:5e:98:79:9a:e1:58:d0:d9:73:8a:7e:92:9a:bb:97:14:bd:
         22:00:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:41:19 2025 by rpki-client