Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a613030303a3a2f33352d3335203d3e20323633393830.roa
File:                     323830343a323863383a613030303a3a2f33352d3335203d3e20323633393830.roa (raw, json)
Hash identifier:          g8s8tLsJPvN5QmsbKUNB/jM+viUnxSJiR+ac163m4cQ=
Subject key identifier:   25:6C:06:F1:40:55:64:DB:2F:59:ED:FF:54:9C:E0:07:7E:28:23:79
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       0414A8A040F60069FFB682994F009AA8B7EA336E
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a613030303a3a2f33352d3335203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:57:18 +0000
ROA not before:           Tue 23 Apr 2024 12:52:18 +0000
ROA not after:            Tue 22 Apr 2025 12:57:18 +0000
asID:                     263980
IP address blocks:        2804:28c8:a000::/35 maxlen: 35
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:14:a8:a0:40:f6:00:69:ff:b6:82:99:4f:00:9a:a8:b7:ea:33:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:52:18 2024 GMT
            Not After : Apr 22 12:57:18 2025 GMT
        Subject: CN=256C06F1405564DB2F59EDFF549CE0077E282379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:d1:78:70:96:ec:c5:67:7b:ac:db:e4:76:
                    4a:d7:86:7d:db:a9:51:24:f4:f5:52:f9:4d:15:3e:
                    0b:50:b3:0e:2b:af:a4:f3:5f:d9:93:ad:44:95:40:
                    7c:dc:4c:47:4a:b5:bb:08:9b:94:42:06:00:ee:0e:
                    78:9d:39:e5:b2:a5:76:76:b4:b5:27:52:fe:14:50:
                    70:d7:39:e9:a4:71:6c:aa:4f:4e:ab:95:e3:82:c7:
                    a3:1e:af:ad:15:3e:d7:5f:5d:58:ce:84:e2:12:2d:
                    c7:03:a8:17:ce:d3:33:15:88:b4:61:f8:af:9c:3b:
                    0b:37:11:60:02:c5:d8:50:7e:76:17:4a:2a:10:2d:
                    df:09:b8:ac:5b:c7:ea:3b:6a:98:ee:e6:0f:a5:53:
                    4b:52:42:83:95:2e:3f:57:9f:35:da:2b:8b:bb:75:
                    57:ea:b4:a0:41:01:48:00:31:c6:e3:44:2a:1a:97:
                    44:dc:60:f7:88:2f:52:c8:0c:9b:c1:d2:c9:df:8b:
                    35:33:97:08:68:97:bf:f6:71:6f:69:f0:92:83:ec:
                    a3:42:ac:24:6e:5b:63:84:4c:a7:ce:4e:1a:61:f5:
                    2d:5e:a3:e8:84:bd:be:47:e8:43:01:1b:5f:7b:cb:
                    ee:27:99:8b:44:85:c7:59:01:ff:4c:aa:53:be:cd:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:06:F1:40:55:64:DB:2F:59:ED:FF:54:9C:E0:07:7E:28:23:79
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a613030303a3a2f33352d3335203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:3d:b7:d7:41:3f:cc:a4:a7:e2:4c:3d:08:4a:5e:b1:6d:
         f7:12:54:e4:19:47:66:50:bc:49:7e:ed:28:06:59:b3:27:c3:
         fd:08:68:94:3b:84:1c:0b:32:41:b6:ce:c2:69:26:80:ac:8c:
         ec:15:bf:7d:ee:cb:49:29:e2:5a:85:1e:f4:26:55:0a:31:67:
         d3:3c:c6:f6:9e:5d:eb:e3:01:4d:db:68:f4:fa:1d:a7:92:40:
         0f:49:ae:68:76:c7:84:49:00:81:da:ae:89:45:1d:39:dd:9c:
         1a:65:ad:34:34:f4:72:85:22:d6:ff:d3:54:df:ef:73:7c:2a:
         57:fd:2a:87:6c:fd:a8:9a:0f:a5:3a:bc:64:44:eb:27:07:4e:
         1a:4d:24:e8:d6:e9:9c:86:22:9f:f8:6b:46:d6:55:f6:1f:f9:
         2e:22:77:60:d5:ca:1c:12:8a:d5:b7:04:31:3b:d1:ff:00:48:
         2c:cc:c3:1e:0f:af:ef:a9:00:0c:a6:c8:06:84:9b:16:88:81:
         36:3a:88:d2:f1:e0:b9:0e:6d:64:5a:63:4c:fa:61:e0:6b:46:
         6e:9a:b4:40:ae:d4:50:dc:26:f8:ac:ad:d0:f5:9b:5e:66:ca:
         e3:30:97:a0:ae:52:89:e3:01:81:23:63:71:39:e8:a4:43:7f:
         f0:9d:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:36 2025 by rpki-client