Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33342d3334203d3e20323633393830.roa
File:                     323830343a323863383a383030303a3a2f33342d3334203d3e20323633393830.roa (raw, json)
Hash identifier:          AoAsEp2/l3ZSFuy1c4V7xAliAI4mKvIiRcIM4Bb3tis=
Subject key identifier:   F4:38:56:BE:49:45:0E:36:51:25:9A:70:13:B2:7C:94:D3:F5:C9:82
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       5DA63BF1DB4F79B03125BBE366171EA8C6DE78E3
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33342d3334203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:57:06 +0000
ROA not before:           Tue 23 Apr 2024 12:52:06 +0000
ROA not after:            Tue 22 Apr 2025 12:57:06 +0000
asID:                     263980
IP address blocks:        2804:28c8:8000::/34 maxlen: 34
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a6:3b:f1:db:4f:79:b0:31:25:bb:e3:66:17:1e:a8:c6:de:78:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:52:06 2024 GMT
            Not After : Apr 22 12:57:06 2025 GMT
        Subject: CN=F43856BE49450E3651259A7013B27C94D3F5C982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:39:c7:b9:38:e2:0c:4a:83:a1:06:a0:3f:
                    f6:3f:fc:f8:57:36:5e:71:8e:ce:5b:50:ea:b9:4b:
                    ed:78:21:28:14:d1:89:d5:11:75:61:c1:a1:62:06:
                    ec:c9:bf:90:95:ec:07:ed:0b:4a:83:5d:4c:7b:3f:
                    d3:14:ac:fb:db:e7:58:1d:e2:b2:eb:05:88:a4:e6:
                    7e:88:7b:43:df:89:ed:11:69:c7:b2:e9:d0:c8:6f:
                    6d:f6:ce:06:a2:64:f6:76:fe:86:76:cc:bb:6a:ec:
                    0e:90:e9:c2:f8:b7:71:fc:d0:d0:20:0e:11:96:a1:
                    71:34:20:6a:7b:c0:43:f7:09:90:3d:70:3b:22:b3:
                    81:bc:1e:b3:c8:f2:61:69:24:49:b1:84:1d:a0:ae:
                    2e:cd:ad:dc:61:62:d6:ba:e4:7e:bf:cf:ff:09:fe:
                    fa:c7:fc:f6:6a:12:22:66:6b:8e:83:b8:ca:a2:81:
                    fc:22:b8:d2:73:3b:b2:d9:8d:4a:6b:5a:46:20:71:
                    5f:5b:38:99:c5:31:3c:c0:e2:83:e4:68:ef:69:5e:
                    51:c2:a3:60:51:c5:e6:54:81:c9:50:6d:2b:8e:5c:
                    eb:05:fb:99:ca:93:3b:22:6d:a8:cc:e3:85:70:b1:
                    68:0e:0e:1c:8f:1b:68:75:77:16:e6:23:47:37:b8:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:38:56:BE:49:45:0E:36:51:25:9A:70:13:B2:7C:94:D3:F5:C9:82
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33342d3334203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:9e:f7:66:e5:2d:51:ef:df:b1:1d:43:a3:2b:90:59:3a:
         82:73:40:96:89:86:36:a2:52:76:0f:0e:cc:c2:d1:bb:8d:a0:
         d2:47:73:53:ae:d3:ce:a8:df:1f:1f:5c:f0:63:78:ca:67:2a:
         70:96:64:7f:db:38:74:78:60:05:98:5d:f3:02:7a:fc:55:3e:
         c6:47:ee:d4:39:ea:81:9e:e7:5b:22:ee:91:0e:3c:50:ff:ee:
         87:0b:1d:7a:fc:b2:03:95:89:6c:ae:4b:3b:3e:cd:01:e4:cb:
         e2:57:f7:0c:3e:32:c1:ae:28:0c:02:a4:f0:fc:56:12:d9:69:
         92:f1:29:b1:58:38:ee:4f:5e:dc:bd:5f:d6:49:d5:4b:fc:5e:
         c4:29:24:7b:a5:cd:39:ae:67:26:8c:ec:1c:78:7b:5c:0a:ce:
         39:0b:d7:22:9b:71:96:6e:9f:92:68:e7:30:32:98:93:e3:99:
         b6:11:e5:c9:70:eb:eb:6c:f1:11:b6:6f:60:f5:57:a1:6c:08:
         b3:1e:c1:c5:4a:d2:8f:55:a8:73:c8:37:ec:03:5a:12:54:61:
         10:44:c5:93:7b:ae:04:01:86:65:80:2a:4f:46:0b:f5:af:0b:
         31:ce:52:70:1f:8f:a3:1a:c5:d7:66:2b:13:4d:b6:66:2b:1d:
         8d:5b:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:49:18 2025 by rpki-client