Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a383030303a3a2f33342d3334203d3e20323632343434.roa
File:                     323830343a6437383a383030303a3a2f33342d3334203d3e20323632343434.roa (raw, json)
Hash identifier:          SarbiaEckaXoXvmnhuWvPrf6Fz3B8p1vRXc2h8KTMXQ=
Subject key identifier:   4F:85:F4:31:BD:EE:0F:24:2C:9A:47:18:96:CD:C2:D7:D9:D2:C8:4C
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       3A08E0306BEAF81746A2B0BD5099121478C9AC2A
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a383030303a3a2f33342d3334203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:33 +0000
ROA not before:           Wed 07 Aug 2024 13:09:33 +0000
ROA not after:            Wed 06 Aug 2025 13:14:33 +0000
asID:                     262444
IP address blocks:        2804:d78:8000::/34 maxlen: 34
Validation:               Failed, certificate revoked on Tue 12 Nov 2024 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:08:e0:30:6b:ea:f8:17:46:a2:b0:bd:50:99:12:14:78:c9:ac:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:33 2024 GMT
            Not After : Aug  6 13:14:33 2025 GMT
        Subject: CN=4F85F431BDEE0F242C9A471896CDC2D7D9D2C84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:7b:7a:9d:2a:48:8e:b4:cb:d6:45:ce:cc:
                    9b:f7:d8:49:38:c7:a8:69:ca:25:f0:0c:23:fa:1f:
                    80:44:61:c3:d1:80:56:5e:5d:81:05:1c:0d:d2:b4:
                    b8:63:a6:4e:3f:fd:19:58:80:ee:2a:dc:fb:d7:20:
                    1d:05:2e:6a:3f:36:91:ad:79:e2:21:20:8c:a2:5b:
                    db:7e:b7:34:ca:7f:a1:5d:b1:e4:bd:cd:f7:6f:14:
                    4a:57:c2:e7:35:52:ab:e1:2e:16:48:4c:69:da:33:
                    f8:b4:8d:3d:6b:4b:20:3f:81:1c:02:9b:d9:04:dc:
                    4a:91:d6:9e:bd:c4:bb:e0:15:3c:a9:73:a1:7d:50:
                    8d:7e:c3:bd:3b:d2:66:e0:ea:8c:a9:c7:1b:61:07:
                    03:a9:bd:a9:67:0f:60:80:88:d0:d9:bb:7c:81:64:
                    2e:6d:f9:27:ea:06:d8:6e:e6:21:d5:af:4f:c6:bc:
                    6d:a0:64:e8:2f:b9:33:a4:cc:36:27:79:24:24:eb:
                    87:3b:09:76:ec:36:76:b1:a2:94:df:3d:91:61:2a:
                    0c:8c:1f:d0:71:dd:6b:c0:b2:fc:2b:1e:df:3c:94:
                    50:9b:2e:4a:6d:8d:85:a6:82:d5:73:d7:c4:97:e3:
                    29:3c:1a:e3:f6:9e:86:1b:81:69:8c:f9:b2:3f:ba:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:F4:31:BD:EE:0F:24:2C:9A:47:18:96:CD:C2:D7:D9:D2:C8:4C
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a383030303a3a2f33342d3334203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d78:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         97:3a:20:cc:ee:33:2e:fb:fa:ab:ba:94:b2:b2:95:75:1c:c1:
         a1:45:08:f2:15:e5:f2:1c:2e:27:5f:66:86:0f:71:a5:a6:d4:
         c4:46:af:45:ea:e1:57:74:4c:d7:e1:05:8c:0e:50:c9:e7:1f:
         eb:d4:22:b2:35:6e:ba:45:65:53:3d:a5:54:4b:af:50:ed:17:
         e4:1e:10:86:a4:78:d1:dd:33:0c:36:d7:6c:35:0f:3d:4f:e2:
         f5:d9:64:3b:03:11:ee:59:e4:96:05:0b:eb:e7:0a:03:77:59:
         a3:2b:52:45:83:21:01:61:95:1d:09:52:31:f6:d6:ea:10:b6:
         b4:5c:db:16:f1:c9:73:d5:56:19:f0:95:1b:f6:81:2a:87:ac:
         b1:5d:ee:14:d5:5c:fc:20:bf:ae:3f:c4:30:2f:0f:69:e1:c9:
         35:17:3b:82:94:73:6b:40:d2:ac:bb:56:0a:29:4f:22:8f:d0:
         c5:66:55:40:ef:36:71:5d:7c:d6:bd:cc:4d:a6:bb:d1:26:54:
         94:97:4b:2a:e3:29:ca:c8:df:aa:1d:15:3e:c4:f6:39:36:70:
         08:f1:4c:e1:83:63:11:86:a9:06:0b:cd:d9:e1:9b:e1:46:88:
         35:5b:25:89:f8:72:fb:d5:1c:5b:22:6c:3b:e5:ca:55:72:77:
         6f:a0:f1:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOgjgMGvq+BdGorC9UJkSFHjJrCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MDcxMzA5MzNaFw0yNTA4MDYxMzE0MzNaMDMxMTAvBgNV
BAMTKDRGODVGNDMxQkRFRTBGMjQyQzlBNDcxODk2Q0RDMkQ3RDlEMkM4NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJnt6nSpIjrTL1kXOzJv32Ek4
x6hpyiXwDCP6H4BEYcPRgFZeXYEFHA3StLhjpk4//RlYgO4q3PvXIB0FLmo/NpGt
eeIhIIyiW9t+tzTKf6FdseS9zfdvFEpXwuc1UqvhLhZITGnaM/i0jT1rSyA/gRwC
m9kE3EqR1p69xLvgFTypc6F9UI1+w7070mbg6oypxxthBwOpvalnD2CAiNDZu3yB
ZC5t+SfqBthu5iHVr0/GvG2gZOgvuTOkzDYneSQk64c7CXbsNnaxopTfPZFhKgyM
H9Bx3WvAsvwrHt88lFCbLkptjYWmgtVz18SX4yk8GuP2noYbgWmM+bI/ul51AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUT4X0Mb3uDyQsmkcYls3C19nSyEwwHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzIzODMwMzQzYTY0MzczODNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA14gDANBgkqhkiG9w0BAQsFAAOC
AQEAlzogzO4zLvv6q7qUsrKVdRzBoUUI8hXl8hwuJ19mhg9xpabUxEavRerhV3RM
1+EFjA5Qyecf69QisjVuukVlUz2lVEuvUO0X5B4QhqR40d0zDDbXbDUPPU/i9dlk
OwMR7lnklgUL6+cKA3dZoytSRYMhAWGVHQlSMfbW6hC2tFzbFvHJc9VWGfCVG/aB
KoessV3uFNVc/CC/rj/EMC8PaeHJNRc7gpRza0DSrLtWCilPIo/QxWZVQO82cV18
1r3MTaa70SZUlJdLKuMpysjfqh0VPsT2OTZwCPFM4YNjEYapBgvN2eGb4UaINVsl
ifhy+9UcWyJsO+XKVXJ3b6DxdA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:29:08 2025 by rpki-client