Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a653030303a3a2f33362d3336203d3e20323633393830.roa
File:                     323830343a323863383a653030303a3a2f33362d3336203d3e20323633393830.roa (raw, json)
Hash identifier:          612lVZ46mgJi41AGXMpkk38W654zboP9fpf66j7W7r4=
Subject key identifier:   5C:C1:68:64:A4:42:D7:08:92:A3:E3:15:D2:58:F0:20:5A:42:50:EB
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       17E834771DB11734CF22919B8D22F8060D4DA4A8
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a653030303a3a2f33362d3336203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:57:49 +0000
ROA not before:           Tue 23 Apr 2024 12:52:49 +0000
ROA not after:            Tue 22 Apr 2025 12:57:49 +0000
asID:                     263980
IP address blocks:        2804:28c8:e000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e8:34:77:1d:b1:17:34:cf:22:91:9b:8d:22:f8:06:0d:4d:a4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:52:49 2024 GMT
            Not After : Apr 22 12:57:49 2025 GMT
        Subject: CN=5CC16864A442D70892A3E315D258F0205A4250EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:bc:fc:3d:c7:d9:fa:e1:2e:de:d9:67:c3:
                    56:2d:b6:cc:7b:75:f6:74:0c:f8:60:e8:00:94:73:
                    1a:72:de:a4:66:70:26:c6:dd:d1:ed:6b:79:ee:4d:
                    a7:d3:e9:80:23:b2:fb:4c:c1:d2:1d:53:2b:62:a1:
                    66:53:09:84:3b:ed:9e:a6:9e:fd:38:c9:5c:73:3a:
                    32:7f:64:91:39:4e:ee:ac:c6:dd:88:e6:32:6b:33:
                    5f:9f:ea:8e:88:3b:28:eb:57:71:04:02:ab:96:13:
                    1b:c6:4f:b0:43:91:73:37:56:74:90:2b:35:c0:87:
                    1f:d1:32:4b:de:29:76:3b:b1:15:ad:f2:88:0b:61:
                    a1:ec:84:3d:d8:f0:66:e1:72:16:f4:f9:d7:e6:a3:
                    81:dc:de:50:4f:a4:57:ed:f7:39:4c:2c:33:30:48:
                    d8:36:e6:5f:ae:3c:05:6d:dd:21:f5:89:7e:5d:8c:
                    1c:a0:9a:60:1f:73:b8:0f:4c:5e:3f:24:a2:61:9f:
                    50:f0:a3:b4:cb:62:53:c1:b0:75:2c:66:9f:5a:dd:
                    73:1d:c0:a7:52:84:7a:70:6c:44:71:d5:88:c2:ae:
                    1d:9d:70:65:58:db:1b:ab:3d:36:06:dc:3b:6e:c8:
                    0b:a7:e7:bb:bf:c0:5a:ed:f1:51:b8:81:b7:0c:e2:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C1:68:64:A4:42:D7:08:92:A3:E3:15:D2:58:F0:20:5A:42:50:EB
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a653030303a3a2f33362d3336203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:a0:91:a8:c2:2b:f7:dc:ae:85:8d:f1:25:65:ec:75:f3:
         c3:c0:04:ab:37:d7:34:68:2a:40:2e:91:87:62:e3:72:56:2b:
         61:e5:08:5b:fd:c3:76:ce:7a:2b:76:eb:21:c4:91:af:5a:fe:
         1f:4d:e6:3f:34:5a:54:ee:57:66:8b:42:1a:7e:11:63:76:7e:
         b7:da:86:0e:98:2e:1f:6f:b1:66:cf:50:a2:e9:a4:c9:58:ab:
         57:cb:6d:d5:44:fa:0e:01:0c:7d:ea:7a:5c:9e:c1:a6:e8:33:
         ca:d2:21:dd:43:34:c1:46:0f:4d:6d:a5:5b:42:7b:58:e1:f0:
         ac:8a:41:44:11:a0:e6:b7:8a:81:10:6c:0d:85:9f:8a:52:3e:
         0e:46:a2:de:6f:9d:81:9e:bf:45:22:52:81:05:a0:c6:b5:89:
         a2:1f:a2:3e:2c:51:1f:a5:ec:9b:34:70:d6:67:59:ea:c2:ca:
         eb:c4:3d:29:a4:cf:f7:58:e8:13:da:ac:e3:f0:81:5f:47:72:
         42:3f:dd:7e:b1:1b:d9:09:95:42:cf:57:db:e4:3b:b3:02:d8:
         fa:81:ac:60:0c:57:fa:68:2d:27:ce:cd:c5:fb:c4:cc:5f:b5:
         04:97:c9:49:6b:bd:34:63:1e:75:56:65:2f:ba:90:73:89:ec:
         9a:88:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:24 2025 by rpki-client