Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a313030303a3a2f34302d3430203d3e20323632333135.roa
File:                     323830343a3762383a313030303a3a2f34302d3430203d3e20323632333135.roa (raw, json)
Hash identifier:          NjrJkBNtNXCkAtUU3EOPi/NtEFdsVI3GkSKAhq/8BmU=
Subject key identifier:   E1:0D:B5:5C:BC:84:F0:8B:A7:3F:9A:36:09:9D:23:D0:24:F9:CC:59
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       7C05B7C41100B999FD4FD13DC3CD0257772A3E0C
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a313030303a3a2f34302d3430203d3e20323632333135.roa
Signing time:             Wed 03 Apr 2024 21:41:42 +0000
ROA not before:           Wed 03 Apr 2024 21:36:42 +0000
ROA not after:            Wed 02 Apr 2025 21:41:42 +0000
asID:                     262315
IP address blocks:        2804:7b8:1000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 04 Jun 2024 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:05:b7:c4:11:00:b9:99:fd:4f:d1:3d:c3:cd:02:57:77:2a:3e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Apr  3 21:36:42 2024 GMT
            Not After : Apr  2 21:41:42 2025 GMT
        Subject: CN=E10DB55CBC84F08BA73F9A36099D23D024F9CC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c4:0c:42:66:97:36:a3:b1:75:96:96:34:79:
                    50:8b:f6:4f:8d:16:74:91:b6:82:5a:97:c7:3e:c6:
                    da:08:8e:20:f6:36:95:c7:7e:1c:e7:3c:44:92:43:
                    25:c0:28:3d:d2:df:96:70:22:87:47:89:0a:5f:27:
                    c5:1d:0b:f8:98:20:ba:21:cd:bc:16:73:0b:50:e0:
                    56:59:20:79:98:00:b9:23:bf:d2:42:6e:b5:fd:c0:
                    5e:7b:01:6f:41:58:14:c3:99:ca:ca:85:6f:57:0b:
                    8a:54:00:ba:b1:3d:3b:6f:8d:b9:86:d9:a0:b6:19:
                    b0:e6:5d:ef:87:22:eb:92:3b:f5:02:17:2e:b5:ba:
                    41:c0:53:4d:a7:20:1d:f1:5d:03:d0:a4:b4:e0:c0:
                    38:9f:50:e1:5a:05:50:df:97:06:7b:90:0c:8c:bc:
                    57:e1:27:35:b1:44:47:b0:f1:07:00:22:ec:61:c1:
                    1c:07:c5:ab:63:c9:3e:c4:6e:3e:47:27:ff:a6:95:
                    6a:87:f2:7e:80:6e:79:11:fa:cc:ca:4e:f5:a7:e1:
                    39:8a:fe:a9:95:0a:31:6b:75:85:d3:0b:3e:f4:94:
                    d5:8f:ad:e1:c5:66:eb:1c:ce:3d:3a:ce:e3:b0:10:
                    bf:da:ef:77:6a:d7:3b:d9:4f:d3:50:5d:de:55:3d:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0D:B5:5C:BC:84:F0:8B:A7:3F:9A:36:09:9D:23:D0:24:F9:CC:59
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a313030303a3a2f34302d3430203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b8:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:25:b9:29:1b:05:db:fc:95:26:46:62:19:7a:ed:59:03:
         29:eb:72:9e:68:aa:57:e1:e9:57:b6:05:42:b5:7e:40:19:f2:
         66:76:b3:b4:e8:28:24:94:3b:67:b2:24:85:c2:a7:36:fd:47:
         8f:b1:e5:02:a2:56:3c:75:99:de:fd:e6:92:4d:46:82:6f:28:
         cd:12:64:94:f3:ea:28:70:11:60:d1:da:61:61:44:0c:16:3c:
         15:c8:93:6c:b2:eb:c0:e6:ca:69:35:f9:f9:84:e5:5c:35:ba:
         a7:d3:a1:b2:4d:c0:1b:98:f4:2e:4f:42:1d:41:0b:03:4f:79:
         e3:b3:b3:3d:a8:ea:43:90:89:82:34:b1:e7:d5:42:f8:06:a9:
         5b:ab:59:e4:54:9b:41:1b:ec:32:da:f9:4c:06:2e:d4:21:07:
         bd:a9:5f:cc:c8:5f:37:a3:14:8f:b6:8b:4d:5d:25:0e:00:91:
         c3:05:9f:9b:d3:28:34:03:1d:6c:91:92:a4:b7:de:7b:fd:c8:
         73:13:c2:54:37:65:09:89:72:66:b7:7b:72:73:54:d5:61:1e:
         95:37:b3:74:b2:89:a7:12:c7:b2:3c:c7:7e:a9:d7:90:12:3e:
         12:72:ef:65:c1:a0:f2:a6:cb:a2:5f:da:1c:da:ad:95:17:c9:
         ce:ea:ce:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:07 2025 by rpki-client