Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d3332203d3e20323636323839.roa
File:                     323830343a333537633a3a2f33322d3332203d3e20323636323839.roa (raw, json)
Hash identifier:          IANmOvlUbzhSOSlwzkqiYk9iX9Lcvx7wpoqsc5bPX9k=
Subject key identifier:   88:A3:5E:0A:AE:24:B1:42:C6:5B:CF:E9:75:1C:9D:95:22:BA:93:EA
Certificate issuer:       /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial:       1E775BE42FD56BF792C551297C2AF49455AB9A97
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d3332203d3e20323636323839.roa
Signing time:             Sat 13 Jul 2024 00:45:58 +0000
ROA not before:           Sat 13 Jul 2024 00:40:58 +0000
ROA not after:            Sat 12 Jul 2025 00:45:58 +0000
asID:                     266289
IP address blocks:        2804:357c::/32 maxlen: 32
Validation:               Failed, certificate revoked on Sat 13 Jul 2024 00:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:77:5b:e4:2f:d5:6b:f7:92:c5:51:29:7c:2a:f4:94:55:ab:9a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Validity
            Not Before: Jul 13 00:40:58 2024 GMT
            Not After : Jul 12 00:45:58 2025 GMT
        Subject: CN=88A35E0AAE24B142C65BCFE9751C9D9522BA93EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:e5:b5:7b:58:23:37:cc:42:54:a8:76:cd:
                    30:55:07:2e:50:b1:16:63:bf:36:1c:f4:24:71:d7:
                    ef:6c:39:aa:ca:f8:3b:b7:a5:21:05:47:bc:73:e6:
                    17:e0:82:57:df:a5:f4:93:31:ec:66:f2:66:3b:21:
                    e6:80:b6:e6:3f:0f:a2:44:af:47:0e:f0:e8:fb:58:
                    2c:1a:3e:dc:8e:bf:20:b6:ff:de:43:3a:a7:66:56:
                    33:6a:2c:6a:a2:0b:b5:63:21:26:4d:f0:90:6b:c7:
                    55:0d:30:19:8e:f6:41:97:aa:e0:72:e5:7e:23:08:
                    16:e5:cd:84:a4:fd:da:c6:82:8d:e4:b4:de:db:06:
                    f5:ec:b1:7c:2d:db:2a:49:6a:dd:36:f0:66:83:8e:
                    3a:83:77:58:d8:bf:49:eb:49:ab:2d:06:ed:f5:b7:
                    12:6e:c0:cb:4e:47:15:16:28:86:44:36:20:f4:23:
                    3b:e0:00:ac:93:27:9c:26:39:df:1a:c2:57:55:8f:
                    d1:ac:2c:24:6d:00:d6:ef:95:ad:dd:c5:0a:37:44:
                    fa:61:3a:94:f6:7d:2f:c5:f1:a7:8d:e1:0a:b1:a4:
                    fb:da:59:d4:9b:ad:e7:bd:56:28:fd:81:c9:2d:fe:
                    59:e4:43:d0:36:43:15:c0:51:7d:f4:6f:23:45:06:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A3:5E:0A:AE:24:B1:42:C6:5B:CF:E9:75:1C:9D:95:22:BA:93:EA
            X509v3 Authority Key Identifier:
                keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d3332203d3e20323636323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:357c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:d5:ab:05:ec:80:f4:42:9e:a5:02:56:c3:ae:f1:ab:02:c5:
         b9:b4:fd:c4:8b:1e:f9:7a:b4:7b:08:32:4c:dd:43:58:1d:21:
         86:c7:3f:15:c5:77:50:99:f1:89:30:57:12:c1:1c:07:ed:a0:
         f7:4d:4e:78:43:e9:e3:88:7d:3a:39:ee:48:23:5d:92:e1:a9:
         5b:1e:1a:d0:c1:87:de:3f:7a:be:d7:14:64:d8:95:62:81:95:
         14:39:48:b9:a6:74:c8:0c:fc:b9:47:99:25:51:44:05:ae:ba:
         b7:4f:3e:67:c7:f5:2b:71:83:1f:bb:0e:e8:eb:77:ae:b8:b0:
         d7:02:8c:fe:77:15:3a:d0:70:f2:fa:fc:ea:34:d2:71:88:8b:
         36:ee:70:0b:29:92:1d:59:96:cf:31:9d:b8:33:6b:ae:7b:16:
         f5:9e:b2:37:fb:7b:d7:19:38:5d:84:fa:75:4c:c9:bd:c7:85:
         dd:a1:0b:7d:73:95:f1:4c:29:52:f4:52:3e:c4:41:ed:d3:a4:
         62:0b:69:4f:48:2f:73:df:cc:fb:ce:fd:54:22:21:c2:e2:8a:
         6f:33:62:cb:12:88:6b:79:ab:38:94:b2:d9:3c:28:24:5f:46:
         89:f6:bf:57:c6:5f:1e:52:d3:7a:76:6f:54:ba:ed:d5:8f:a2:
         dc:f7:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:39:00 2025 by rpki-client