Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d3332203d3e20323733333334.roa
File:                     323830343a386431383a3a2f33322d3332203d3e20323733333334.roa (raw, json)
Hash identifier:          9o4Kh0WTowVnBQYMJfCTYCQzOut3U3BIuzthFktsMfE=
Subject key identifier:   E6:A2:3D:0B:DD:E5:EC:A6:F9:C4:09:C1:4E:33:72:06:8B:1A:E2:60
Certificate issuer:       /CN=64EE650E05CE4E93FFE2F41550939D5F0A226CA6
Certificate serial:       1455113023AFDFC632E1DF008146C5A019EA03D1
Authority key identifier: 64:EE:65:0E:05:CE:4E:93:FF:E2:F4:15:50:93:9D:5F:0A:22:6C:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d3332203d3e20323733333334.roa
Signing time:             Tue 01 Apr 2025 18:25:20 +0000
ROA not before:           Tue 01 Apr 2025 18:20:20 +0000
ROA not after:            Tue 31 Mar 2026 18:25:20 +0000
asID:                     273334
IP address blocks:        2804:8d18::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 03 Apr 2025 17:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:55:11:30:23:af:df:c6:32:e1:df:00:81:46:c5:a0:19:ea:03:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EE650E05CE4E93FFE2F41550939D5F0A226CA6
        Validity
            Not Before: Apr  1 18:20:20 2025 GMT
            Not After : Mar 31 18:25:20 2026 GMT
        Subject: CN=E6A23D0BDDE5ECA6F9C409C14E3372068B1AE260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:7a:20:06:7f:55:b0:50:19:50:25:03:8c:
                    ad:b9:99:ff:d9:71:7c:78:b5:fc:a7:8c:82:b9:85:
                    8f:50:ff:a7:0f:de:cf:eb:38:62:3a:75:03:81:dc:
                    91:7a:63:5a:2d:5f:cf:c5:37:29:c6:d8:ef:12:1a:
                    04:11:3e:79:c8:ef:de:dc:49:e8:49:19:db:c7:9f:
                    2c:0d:31:93:60:9c:2f:9b:5c:70:0c:5a:73:6d:c6:
                    fa:e9:c4:68:8b:60:b5:b4:2c:7e:ec:cb:90:58:cd:
                    f7:ca:db:8e:63:75:d6:e8:d7:3e:9d:9d:a1:01:e0:
                    3f:80:ec:e1:42:f6:23:dd:cd:39:39:f6:2e:a8:24:
                    4d:fe:c4:0c:13:01:f7:6f:e1:02:68:1d:92:79:e9:
                    39:c2:66:8a:69:8b:c5:4a:9d:86:30:d0:b5:21:85:
                    59:b6:c5:33:e7:50:60:ae:ea:9d:a0:7d:36:79:ea:
                    8d:85:fa:a2:4b:e9:1b:b3:bc:ab:f8:07:0e:3d:57:
                    9f:93:c5:48:ac:85:7a:07:c8:d2:1c:b3:64:5a:cf:
                    8f:45:cc:38:14:79:4c:67:c5:bb:9c:01:87:78:40:
                    97:df:16:ee:25:e6:07:f8:bb:17:b1:aa:56:54:83:
                    7a:9c:1d:58:dd:ef:52:81:0f:7d:1b:4e:93:24:db:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A2:3D:0B:DD:E5:EC:A6:F9:C4:09:C1:4E:33:72:06:8B:1A:E2:60
            X509v3 Authority Key Identifier:
                keyid:64:EE:65:0E:05:CE:4E:93:FF:E2:F4:15:50:93:9D:5F:0A:22:6C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d3332203d3e20323733333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:aa:fe:b6:8d:41:99:27:c9:2d:72:ef:77:1b:78:15:60:4d:
         43:f7:0f:73:bb:7a:3f:92:3f:aa:b8:2e:85:c2:fd:0a:0e:fc:
         09:1d:60:bc:0b:8b:7b:76:0c:4d:a4:b5:89:4d:7b:e8:fc:b7:
         ba:c8:2f:c6:e6:cb:9a:bd:c8:15:e8:2e:a9:c1:06:57:d9:0b:
         42:56:f9:8c:e7:22:1a:45:14:d1:cb:e1:03:d9:92:ec:3f:9e:
         81:ff:50:81:24:9c:dd:6c:41:fd:cf:af:1a:65:47:69:c0:51:
         ac:d7:f9:45:cf:5a:32:69:88:a8:f6:f1:f0:db:2a:f6:18:67:
         3c:70:03:8e:38:67:84:c0:30:05:5e:76:29:1f:9d:5c:8f:3c:
         18:89:a9:1f:61:3c:b5:dc:32:3f:79:83:5f:19:f5:54:c9:db:
         d1:0d:85:50:58:48:9c:95:00:7e:ef:e9:8c:fe:0e:3c:cd:e9:
         30:7d:75:bc:31:5d:a8:62:70:31:55:db:ac:9c:9b:88:44:0c:
         3a:9d:5a:ce:9a:0f:3f:f0:10:89:97:ad:d3:72:f9:c3:ea:56:
         4a:94:9a:9f:cc:31:cd:1d:9c:a4:37:7c:f5:a8:91:83:1b:d1:
         fd:5b:5b:04:f6:62:49:c6:31:ed:dc:81:43:85:db:61:cc:a2:
         45:77:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:28:25 2025 by rpki-client