Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa
File:                     323830343a366330343a3a2f33332d3333203d3e20323730343430.roa (raw, json)
Hash identifier:          MbD5WzHVHdP8XHt7+QmA6CF94aQ7w3qYlKVd0jVY+Ss=
Subject key identifier:   D6:A1:95:25:FB:FD:73:3D:DA:17:A3:8E:89:6A:FB:D4:E8:CB:BC:F9
Certificate issuer:       /CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
Certificate serial:       37DFA0A4B27B6E0DA89A7A49064FD5F872E685D0
Authority key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa
Signing time:             Fri 08 Aug 2025 13:27:41 +0000
ROA not before:           Fri 08 Aug 2025 13:22:41 +0000
ROA not after:            Fri 07 Aug 2026 13:27:41 +0000
asID:                     270440
IP address blocks:        2804:6c04::/33 maxlen: 33
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:df:a0:a4:b2:7b:6e:0d:a8:9a:7a:49:06:4f:d5:f8:72:e6:85:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
        Validity
            Not Before: Aug  8 13:22:41 2025 GMT
            Not After : Aug  7 13:27:41 2026 GMT
        Subject: CN=D6A19525FBFD733DDA17A38E896AFBD4E8CBBCF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:1b:71:73:82:46:23:78:f3:ec:6c:f6:30:
                    f2:6c:37:54:9c:87:8c:af:b6:e3:e1:2c:87:17:9a:
                    30:2f:a3:fa:4b:2b:4c:1b:36:4f:1e:22:7e:d2:4c:
                    29:c2:91:4f:82:f7:67:27:9c:02:e3:6f:5b:e8:8a:
                    f5:dd:6a:a0:d3:54:e5:41:d6:0b:90:ea:f7:41:78:
                    f3:11:d4:d0:c8:ac:e4:59:88:fd:a4:1a:f7:4e:9a:
                    85:84:ce:6a:53:7e:db:d8:8e:24:8d:a6:30:0f:ed:
                    b3:d1:1b:ab:0d:68:58:4f:ac:ee:3e:d5:e9:55:92:
                    ec:1c:f8:ef:6f:e3:91:24:89:c1:8b:8d:18:0e:80:
                    d8:84:c3:b8:cf:64:a5:66:4c:7c:56:d4:5b:94:3c:
                    3c:85:4b:60:61:4a:4d:96:61:1d:b6:62:c8:fb:60:
                    60:fe:36:26:f8:25:9c:e9:92:66:e0:4e:96:ab:fb:
                    59:82:44:61:30:cb:e1:e0:92:09:a0:d7:94:15:42:
                    58:2f:c0:86:52:b3:d2:1d:3f:9d:37:d6:ad:f9:33:
                    19:8a:76:50:d0:a6:82:0b:ee:b2:38:1f:12:8f:98:
                    68:f8:f3:5d:c5:b1:8b:d4:12:3b:e0:70:56:9a:85:
                    b1:d0:d8:3c:f6:e4:c7:1b:cf:a1:a1:0d:18:b0:73:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A1:95:25:FB:FD:73:3D:DA:17:A3:8E:89:6A:FB:D4:E8:CB:BC:F9
            X509v3 Authority Key Identifier:
                keyid:A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:cb:11:b4:f9:ae:76:7a:d3:84:5a:46:65:dd:17:c8:55:1e:
         c5:1c:a2:ed:86:ff:92:9e:f2:45:d3:4a:62:12:97:22:ca:ea:
         0c:22:e8:ed:54:78:35:5a:40:97:ae:9a:57:4a:66:57:b1:6d:
         f9:ad:88:e0:b2:e6:3f:08:81:be:f5:26:8f:fc:3a:31:f6:a6:
         48:cb:da:ee:c1:14:48:13:84:af:1d:ae:a8:ce:0b:0f:68:81:
         9e:ca:17:6a:a2:13:19:e3:09:56:98:ac:6b:af:23:aa:09:06:
         02:73:e0:74:f7:b2:45:f8:8b:bc:8c:34:3f:bd:d8:11:f8:c4:
         d3:7f:ac:03:ce:c3:12:26:6e:19:e2:08:83:e9:e7:72:0c:e2:
         6d:07:73:b2:bd:ed:2d:54:06:b6:8f:b2:54:9d:3a:b4:2c:91:
         ad:e7:34:7b:3e:ec:34:71:ec:d8:cd:c6:21:db:6f:c1:b3:a1:
         f9:d4:57:2a:d7:82:13:1c:d3:9e:66:5c:28:46:33:01:72:0a:
         d9:9b:ff:0f:bc:b4:8e:63:2d:fe:a5:67:e1:fc:7d:2f:a5:80:
         9c:73:0c:c9:3f:8a:e3:51:68:81:30:88:99:07:3d:70:fe:df:
         06:95:b0:1c:f9:a4:12:0c:c2:11:07:13:61:f4:62:93:fe:51:
         06:04:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:36 2025 by rpki-client