Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/323830343a383539343a3a2f33322d3332203d3e20323732353838.roa
File:                     323830343a383539343a3a2f33322d3332203d3e20323732353838.roa (raw, json)
Hash identifier:          EA1bO1rT78s7aDM2CRJrnry/gZuDKzc9HMECtT+ffxM=
Subject key identifier:   50:3D:CE:D8:69:BA:14:A7:5C:CC:F9:9C:32:EC:AA:95:7A:29:86:C3
Certificate issuer:       /CN=404EF1E548374354D9B828749323416749EF23B4
Certificate serial:       36821CB5EDF2810B3A7099DF7F110745269DF945
Authority key identifier: 40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/323830343a383539343a3a2f33322d3332203d3e20323732353838.roa
Signing time:             Wed 30 Apr 2025 15:58:06 +0000
ROA not before:           Wed 30 Apr 2025 15:53:06 +0000
ROA not after:            Wed 29 Apr 2026 15:58:06 +0000
asID:                     272588
IP address blocks:        2804:8594::/32 maxlen: 32
Validation:               Failed, certificate revoked on Mon 05 May 2025 11:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:82:1c:b5:ed:f2:81:0b:3a:70:99:df:7f:11:07:45:26:9d:f9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404EF1E548374354D9B828749323416749EF23B4
        Validity
            Not Before: Apr 30 15:53:06 2025 GMT
            Not After : Apr 29 15:58:06 2026 GMT
        Subject: CN=503DCED869BA14A75CCCF99C32ECAA957A2986C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:06:53:81:53:a9:38:d3:5d:be:38:09:36:
                    3f:68:bd:c3:1c:a1:05:88:fd:b1:38:b1:18:09:28:
                    f6:83:94:ee:60:75:02:b8:ec:10:6a:30:0f:6a:d6:
                    5f:cf:58:13:1b:5e:68:8e:03:f1:9a:7b:ff:d0:8f:
                    5c:9c:f7:0a:ee:e3:84:db:20:a2:f6:89:f6:df:36:
                    6d:50:6a:90:74:20:be:f2:14:f4:7e:2e:0d:ef:6d:
                    d0:b7:eb:98:aa:c7:09:8f:2b:1a:ca:70:a7:66:79:
                    59:50:78:a1:d4:ad:87:01:39:0e:d4:b4:4a:52:b3:
                    fd:43:df:3f:43:88:e9:ed:d5:e3:0d:6e:4c:d6:fd:
                    c7:ac:9c:59:ab:d8:6c:00:71:26:66:a7:31:9a:77:
                    bf:ba:65:a4:21:d3:94:e1:6f:70:f9:29:26:6f:0f:
                    e3:62:d0:0c:07:5c:17:31:86:cb:a0:1b:01:08:ab:
                    73:91:36:a3:ad:a5:ae:48:e1:4d:9d:c3:ef:ec:33:
                    fa:00:cb:5e:27:6e:a3:da:22:7e:24:a3:69:04:d9:
                    79:d3:9a:0c:bd:89:6d:53:2c:dd:e1:6e:36:e4:93:
                    50:d4:0e:29:7b:e9:0f:56:18:b8:c8:9f:92:c3:91:
                    4f:8b:61:9e:ff:59:b7:1a:30:8e:e3:10:19:d0:6a:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3D:CE:D8:69:BA:14:A7:5C:CC:F9:9C:32:EC:AA:95:7A:29:86:C3
            X509v3 Authority Key Identifier:
                keyid:40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/323830343a383539343a3a2f33322d3332203d3e20323732353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8594::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:86:b8:8b:5e:01:bb:e3:c8:36:80:45:27:21:f6:6d:77:f8:
         5c:d6:7b:0d:3b:6f:4a:44:53:e5:8d:e7:fb:d4:97:72:49:ac:
         7e:cf:e2:45:f4:9a:bf:19:7d:c1:7b:c9:d3:8a:2a:48:b3:b7:
         c7:c3:8f:b2:4a:bd:24:ab:fb:57:03:d5:59:e1:7f:8f:1f:09:
         37:6c:13:c5:3e:b8:a6:d3:a9:2c:32:eb:41:75:fb:4e:9e:58:
         71:ab:c8:53:6f:60:b3:7b:f9:76:7c:8f:11:9c:ad:4d:95:89:
         08:6e:bf:4c:d2:dd:1b:64:91:44:0b:5a:b1:f4:7c:0a:44:22:
         dc:21:28:1a:c7:ab:33:9a:5f:33:22:db:1f:e1:22:92:f4:14:
         db:5e:b3:fb:00:2a:32:5b:5b:d2:31:60:d2:21:67:6f:d2:51:
         a9:c1:67:01:0d:d3:c5:78:a1:48:54:4f:bf:85:99:bb:29:b4:
         8f:4f:b9:99:26:5e:aa:71:7f:05:b4:df:76:b6:07:4d:aa:d2:
         2e:15:c5:52:34:27:3c:b9:f5:aa:6d:71:24:de:7d:69:fe:2a:
         68:98:b3:83:0c:6c:c4:83:3c:dc:29:e6:e0:58:8a:40:d7:c8:
         1a:3d:50:b9:b3:cb:88:af:c4:75:31:dd:bd:52:4a:80:b9:c5:
         d6:fc:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 07:38:47 2025 by rpki-client