Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33332d3333203d3e20323636323839.roa
File:                     323830343a333537633a3a2f33332d3333203d3e20323636323839.roa (raw, json)
Hash identifier:          WsstPG8ihj/4xRRVDDSOHeWlqPTxsNekPdkJ67XTvbQ=
Subject key identifier:   C2:62:41:73:14:0D:09:97:A9:31:03:DE:77:25:EC:4F:96:23:E9:A2
Certificate issuer:       /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial:       1F59B9A305E1F9F9868C622EE073C0A1584DEC62
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33332d3333203d3e20323636323839.roa
Signing time:             Sat 13 Jul 2024 00:46:40 +0000
ROA not before:           Sat 13 Jul 2024 00:41:40 +0000
ROA not after:            Sat 12 Jul 2025 00:46:40 +0000
asID:                     266289
IP address blocks:        2804:357c::/33 maxlen: 33
Validation:               Failed, certificate revoked on Sat 13 Jul 2024 00:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:59:b9:a3:05:e1:f9:f9:86:8c:62:2e:e0:73:c0:a1:58:4d:ec:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Validity
            Not Before: Jul 13 00:41:40 2024 GMT
            Not After : Jul 12 00:46:40 2025 GMT
        Subject: CN=C2624173140D0997A93103DE7725EC4F9623E9A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ae:1d:b9:0a:c3:bd:b1:28:25:7b:80:12:d8:
                    8c:63:a6:d5:72:aa:5e:82:3c:47:ca:33:5d:a7:dc:
                    0c:19:ac:10:c5:9a:16:d3:9d:67:a0:e8:74:8e:8a:
                    33:3a:da:56:5f:8d:ac:b5:36:63:b8:dc:b7:83:26:
                    bc:80:30:7c:43:71:31:77:fc:82:c8:da:fd:38:a6:
                    b6:85:69:74:99:01:14:4c:7d:f1:c8:ef:b1:8c:be:
                    fe:16:c9:50:e5:3b:11:e0:bb:a8:c6:5a:9b:2b:ac:
                    c7:de:53:0b:55:8c:e7:89:4f:2f:42:2a:27:5e:0c:
                    fe:21:4d:f5:f7:7b:4d:85:90:37:b4:89:37:01:e4:
                    66:9d:ea:71:5e:dd:7f:64:ef:07:b7:c3:0a:2d:73:
                    ee:a0:31:8c:6e:75:07:17:bb:bd:b5:ab:4b:55:88:
                    ac:63:3c:c0:f2:74:38:fc:ee:eb:7f:26:86:f4:e9:
                    f5:40:0c:f9:51:ec:4c:a8:31:dc:a1:47:ad:3e:1f:
                    26:84:b7:d6:9d:5c:fe:90:c3:c8:93:6e:17:ff:db:
                    f0:2a:0f:17:ff:35:c7:34:e2:03:c8:a6:bf:33:b0:
                    d4:88:ff:f0:b8:a4:65:03:15:e6:bb:b4:81:2d:c0:
                    d0:f0:0f:09:9a:13:e6:00:c5:a4:87:c6:42:83:34:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:62:41:73:14:0D:09:97:A9:31:03:DE:77:25:EC:4F:96:23:E9:A2
            X509v3 Authority Key Identifier:
                keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33332d3333203d3e20323636323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:357c::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:1c:b3:97:ba:27:4c:e6:4d:93:ec:8c:8e:ff:41:4d:c2:
         60:33:5f:55:74:20:c3:86:da:32:c7:84:a0:3b:c2:62:b2:b1:
         59:1a:e4:f4:8f:ca:4a:48:3b:32:ff:bf:3f:7a:03:ea:65:b7:
         b5:ec:f5:1b:c8:37:ca:17:e4:9c:ec:91:73:2c:b3:8c:80:d6:
         70:5a:c0:92:58:c3:a1:f4:1b:8d:c5:e9:27:b5:52:4c:95:ec:
         72:12:3e:f4:86:48:49:4c:d7:27:44:9a:90:f9:99:94:95:58:
         fb:02:41:54:83:dc:62:09:39:14:87:bc:f8:d6:63:e9:83:5b:
         ef:aa:b5:1f:b6:ed:3c:42:90:e1:9f:f5:68:1a:ac:b9:f7:e0:
         66:16:cc:e5:59:da:e0:49:65:29:ac:b6:06:83:a2:e5:6a:48:
         90:c8:4e:8a:ac:77:d0:44:bd:5e:a9:c0:70:3c:db:70:6e:0a:
         8a:47:70:ba:8d:79:67:e5:0e:07:78:16:d8:9e:88:04:7c:9e:
         a3:1d:12:bf:d8:4e:23:60:1e:b7:9c:38:83:99:e1:ae:5a:93:
         6b:c9:39:92:f4:2e:ca:5d:28:19:49:1a:8f:53:77:05:27:9a:
         e2:10:7e:de:fc:14:26:b0:12:aa:73:ef:37:6f:9b:f8:16:db:
         3d:13:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:04:07 2025 by rpki-client