Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a333030303a3a2f34382d3438203d3e20323730383832.roa
File:                     323830343a373265343a333030303a3a2f34382d3438203d3e20323730383832.roa (raw, json)
Hash identifier:          sbFfFE/R0gkawV/ooiYVoKHyjH5YZ+IsrzExusbmUOg=
Subject key identifier:   DA:95:33:94:E8:36:52:BD:1E:95:77:4C:6A:FE:0B:1B:63:08:9A:32
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       24D956BA522B1FD1874144826BE3D2C3F2AA1E59
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a333030303a3a2f34382d3438203d3e20323730383832.roa
Signing time:             Tue 23 Apr 2024 12:49:09 +0000
ROA not before:           Tue 23 Apr 2024 12:44:09 +0000
ROA not after:            Tue 22 Apr 2025 12:49:09 +0000
asID:                     270882
IP address blocks:        2804:72e4:3000::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d9:56:ba:52:2b:1f:d1:87:41:44:82:6b:e3:d2:c3:f2:aa:1e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: Apr 23 12:44:09 2024 GMT
            Not After : Apr 22 12:49:09 2025 GMT
        Subject: CN=DA953394E83652BD1E95774C6AFE0B1B63089A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:30:a1:27:68:82:9c:c3:1a:df:34:2a:26:
                    98:b1:cd:81:39:8e:1c:b1:fc:f0:59:ea:80:58:31:
                    86:82:6c:11:37:21:9a:52:41:bd:c7:ff:82:98:2f:
                    ef:86:ed:0d:aa:9d:af:c8:93:a9:48:aa:9b:a0:9c:
                    0d:45:24:60:a3:79:31:e3:be:22:33:03:a7:1e:4e:
                    63:e4:f2:12:df:7d:8b:8b:de:0b:f9:12:7f:1e:46:
                    cb:15:65:70:d4:a4:e9:bc:aa:9d:ca:98:71:bd:5f:
                    47:36:4c:e3:b8:6e:1d:cb:16:9b:2c:56:72:97:c2:
                    72:b7:0b:1a:35:51:a2:30:86:2e:a2:b7:a8:29:da:
                    a7:68:a1:4c:3e:b3:4a:86:1f:ff:2b:94:09:dd:4c:
                    37:4b:16:eb:b3:d8:03:85:b4:91:18:58:ee:81:d8:
                    12:3e:71:99:75:28:f7:f4:97:05:36:8c:17:7b:95:
                    1e:48:84:c7:ec:3d:91:28:5b:d0:44:8d:03:59:bb:
                    9e:42:22:21:8d:d0:4f:af:aa:44:0f:9d:26:79:0b:
                    76:97:3c:ae:06:b2:70:7b:ed:b3:cc:13:cc:1b:fd:
                    e7:0d:1a:e1:69:a8:51:9f:5f:37:f2:f0:80:43:e1:
                    9b:a0:32:1a:ed:2e:d1:e5:7c:38:88:87:da:2c:fc:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:33:94:E8:36:52:BD:1E:95:77:4C:6A:FE:0B:1B:63:08:9A:32
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a333030303a3a2f34382d3438203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72e4:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:7d:f6:9a:f3:09:eb:cf:19:b0:2f:e1:c9:34:be:ba:1b:
         a2:85:c7:29:f1:1f:b7:4f:2c:03:26:a9:2c:45:6f:89:97:11:
         99:40:04:a4:e1:d6:88:95:cc:9d:86:25:7e:4e:08:df:9d:b7:
         ae:8f:80:09:49:e2:d4:a4:29:c2:c4:0c:55:60:ba:5a:d8:e1:
         3b:f0:4a:1b:ab:57:72:f9:e3:e0:80:7b:74:9c:64:b3:92:57:
         5a:32:f9:e5:24:a5:3b:8c:cf:ce:0c:de:b8:1b:01:40:7a:ef:
         26:1a:f5:08:3f:e1:92:c8:90:a2:35:1c:b3:2a:d1:2d:8d:53:
         57:52:b8:56:46:0b:e7:9f:69:bc:97:1c:8b:83:09:a9:f6:82:
         da:b6:13:0d:1e:e2:80:c3:d6:6d:a5:12:d3:3a:30:a6:9d:61:
         ae:07:4a:93:14:d2:3a:e4:e0:12:96:18:e0:7c:a6:1c:8e:d6:
         93:eb:c1:9c:94:95:6c:d2:f7:d8:bd:3f:27:87:d7:c2:34:5f:
         bb:34:d3:b5:4e:24:1b:49:29:ad:2c:b3:84:6b:ca:e0:26:51:
         97:f2:45:ab:10:61:0c:93:ea:64:23:09:eb:0e:41:60:04:79:
         eb:ea:64:c8:68:20:5c:de:81:74:4e:37:c3:ec:ce:05:81:bb:
         e2:41:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:53 2025 by rpki-client