Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f34382d3438203d3e20323638383130.roa
File:                     323830343a356166383a3a2f34382d3438203d3e20323638383130.roa (raw, json)
Hash identifier:          8JwsKzR0aqtkU9zmZbuVtVwsZ+E51cQ4fvK8ecUcqgQ=
Subject key identifier:   C6:21:FB:24:7F:54:1D:9D:A5:E5:AF:9D:8C:3F:AF:CA:BB:C6:B0:F1
Certificate issuer:       /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Certificate serial:       1ECEBDEE5AEA28C32460A37B3F36A4D222A355BA
Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f34382d3438203d3e20323638383130.roa
Signing time:             Mon 16 Dec 2024 17:23:38 +0000
ROA not before:           Mon 16 Dec 2024 17:18:38 +0000
ROA not after:            Mon 15 Dec 2025 17:23:38 +0000
asID:                     268810
IP address blocks:        2804:5af8::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 17 Dec 2024 14:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ce:bd:ee:5a:ea:28:c3:24:60:a3:7b:3f:36:a4:d2:22:a3:55:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
        Validity
            Not Before: Dec 16 17:18:38 2024 GMT
            Not After : Dec 15 17:23:38 2025 GMT
        Subject: CN=C621FB247F541D9DA5E5AF9D8C3FAFCABBC6B0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:11:18:45:eb:a1:f5:37:4e:05:8b:ec:53:b3:
                    83:73:b6:17:9a:11:74:f9:6a:f3:aa:d5:db:38:e0:
                    8a:0d:85:95:fa:4c:09:bf:62:02:e9:fd:cf:62:7d:
                    4e:72:3c:98:a8:d4:33:9a:1d:40:1e:af:dd:88:70:
                    f0:b1:25:b2:6f:c5:76:fa:50:97:b0:0f:61:78:e2:
                    fc:4c:c3:e1:21:89:31:d9:aa:70:bf:08:62:58:7d:
                    a1:85:7e:af:05:30:65:a3:db:9e:96:b2:67:cc:2f:
                    8e:1a:b1:f8:04:3f:a6:33:2e:75:8a:b2:a8:64:7f:
                    82:a5:e5:58:0a:79:25:80:8b:72:ba:9b:03:70:e1:
                    62:c3:9f:8b:20:91:19:64:c1:c2:a3:57:39:1d:20:
                    8e:9b:74:9a:8e:64:69:a9:08:1e:c9:a0:02:e0:43:
                    1c:07:31:76:4b:fe:99:81:50:74:c7:90:74:af:c9:
                    9a:fc:d6:8f:2a:30:9a:1f:f7:ff:9a:fa:5d:7b:0f:
                    09:f5:bb:8b:64:99:34:ee:e5:dc:87:75:fd:90:5d:
                    29:5a:93:e8:0f:8f:8f:a2:02:67:e7:17:48:80:3c:
                    4a:37:fc:48:b7:0b:41:59:8e:95:5c:30:e4:bc:2d:
                    23:d9:ca:bb:3e:a4:f6:45:9c:39:c9:4f:85:b0:ec:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:21:FB:24:7F:54:1D:9D:A5:E5:AF:9D:8C:3F:AF:CA:BB:C6:B0:F1
            X509v3 Authority Key Identifier:
                keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f34382d3438203d3e20323638383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af8::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:39:cf:35:31:36:23:a7:bc:87:c4:09:1f:f1:2f:e0:c6:46:
         d7:2e:41:7a:53:8c:72:cf:6c:70:fc:19:9a:60:d1:47:1b:01:
         f5:00:1e:98:0b:97:c0:02:09:60:9a:cb:62:b5:ae:6c:30:cf:
         f7:cc:87:62:1b:c1:38:e4:b7:d9:10:ce:75:8d:4d:5f:e3:a8:
         13:03:54:eb:55:d5:10:d0:5b:39:56:96:17:cf:a6:fe:17:a2:
         86:da:af:ba:5f:d5:9a:70:0a:4c:b0:81:e0:ab:f7:9b:9d:61:
         85:3a:bf:17:8d:30:b2:54:db:6c:bd:d2:b8:f1:a0:9b:96:42:
         79:79:51:29:f2:e6:37:bd:97:0b:17:d4:9f:d5:3b:01:3e:9d:
         7a:11:8a:25:11:18:2a:f5:7e:e9:38:b2:36:f5:ca:92:ae:1c:
         f1:62:08:11:b7:80:c4:6e:77:02:b2:38:77:7d:46:db:37:36:
         4e:9d:4f:35:52:87:2b:14:32:52:0b:b5:bc:44:98:9e:e3:48:
         32:07:40:23:93:63:6b:6c:3c:d2:eb:f7:ba:0b:3e:7e:3e:db:
         2f:3f:f1:d8:47:9b:f1:1f:9c:3f:61:ce:2e:66:f2:fa:d4:e8:
         de:ee:44:5d:97:0a:90:c3:37:f0:98:5a:bc:b4:e3:7d:64:93:
         bd:2c:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:52 2025 by rpki-client