Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
File:                     323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa (raw, json)
Hash identifier:          y3nr66e7IKnHVcGeCuDZZWg1Sb6ORWyfifLbtdo044A=
Subject key identifier:   5C:43:2E:CA:A9:27:C5:D8:19:09:67:74:CC:D2:5D:EB:E6:85:F9:0B
Certificate issuer:       /CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
Certificate serial:       352609B5F6A4E1ACF49E2B6EB4902BDA3D03B486
Authority key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
Signing time:             Fri 08 Aug 2025 13:27:42 +0000
ROA not before:           Fri 08 Aug 2025 13:22:42 +0000
ROA not after:            Fri 07 Aug 2026 13:27:42 +0000
asID:                     270440
IP address blocks:        2804:6c04:c000::/35 maxlen: 35
Validation:               Failed, certificate revoked on Mon 11 Aug 2025 14:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:26:09:b5:f6:a4:e1:ac:f4:9e:2b:6e:b4:90:2b:da:3d:03:b4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
        Validity
            Not Before: Aug  8 13:22:42 2025 GMT
            Not After : Aug  7 13:27:42 2026 GMT
        Subject: CN=5C432ECAA927C5D819096774CCD25DEBE685F90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:8d:da:e8:f6:37:9f:2f:99:02:c3:a4:df:
                    8b:3b:96:d7:45:6b:96:57:0a:34:68:6b:ab:cd:cd:
                    5c:ce:b0:df:4f:91:ef:79:b7:99:c7:eb:74:93:8f:
                    88:a3:89:b6:53:dd:bd:bf:24:33:94:3e:e3:57:af:
                    45:d6:48:99:50:61:51:91:f9:0c:8b:7a:02:7a:0f:
                    b8:ae:f6:b6:bd:07:ab:c4:75:58:e4:f3:70:8b:f7:
                    05:1b:26:40:81:51:d6:98:8c:31:a8:ad:4b:72:81:
                    76:09:42:e0:64:ee:56:fc:76:0f:3f:67:1b:54:c9:
                    c3:3f:d9:d5:f2:31:3a:b5:1b:24:58:63:ac:e3:81:
                    f5:ce:f2:f5:e0:73:de:30:13:35:53:fd:e7:b9:d2:
                    73:f3:97:cd:3b:4e:41:2b:85:96:a4:01:86:50:1d:
                    3f:38:63:8a:5c:8d:b0:79:d6:7f:a0:7b:7f:6c:50:
                    06:cd:c2:11:5d:73:6a:52:80:b6:f6:2f:6b:13:ce:
                    df:b0:55:69:32:ed:a6:58:a1:ba:77:f3:4b:08:43:
                    9a:f9:0c:8b:88:9f:38:1b:88:10:3c:53:52:34:3f:
                    61:b4:e7:82:cf:32:57:32:3f:16:02:8a:7b:e1:ae:
                    74:d6:eb:75:b5:d4:1e:39:e5:70:2a:65:3b:10:b4:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:43:2E:CA:A9:27:C5:D8:19:09:67:74:CC:D2:5D:EB:E6:85:F9:0B
            X509v3 Authority Key Identifier:
                keyid:A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:88:a1:e1:83:0e:50:7a:23:6e:fd:34:ff:15:ca:29:8e:
         f9:bd:7c:41:b7:96:df:3e:ba:0f:d6:4f:3b:b4:2a:7e:fa:7a:
         95:8f:5a:64:e4:78:f6:c1:e3:c1:6a:83:fd:7c:e7:0f:46:76:
         f2:0b:80:6b:b9:ad:aa:85:45:df:8e:43:2d:a9:71:cd:a2:26:
         1f:d3:20:29:d0:5d:62:ca:d4:96:51:1c:11:f4:58:f0:00:e8:
         0c:02:fc:53:ef:38:a4:63:96:cb:7a:9f:f5:2d:2e:ab:42:d6:
         47:27:c2:50:17:c5:58:15:ca:6c:f2:4a:b6:58:e9:27:4c:26:
         28:b2:b5:a9:12:46:d1:00:a9:4e:c3:d0:72:0f:a5:10:d4:ad:
         d8:9b:39:0d:2f:52:1f:f2:15:c6:fe:93:28:ac:ec:de:f6:52:
         4d:63:2e:57:82:32:96:eb:fd:0d:b8:1d:2f:7b:d3:5e:95:8b:
         fc:f9:83:e1:7b:96:63:8d:03:57:3b:01:c2:66:dc:c0:d4:52:
         78:bc:8e:ba:50:2d:4e:63:a3:15:e8:da:f8:77:1c:ff:fc:47:
         8a:92:89:9f:42:4a:7d:c5:72:8b:1d:ac:cc:1e:2c:58:80:b5:
         a6:42:65:53:a0:96:e9:7b:b5:90:ef:f6:1b:92:dc:85:7b:69:
         60:28:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:37 2025 by rpki-client