Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a343030303a3a2f34382d3438203d3e20323730383832.roa
File:                     323830343a373265343a343030303a3a2f34382d3438203d3e20323730383832.roa (raw, json)
Hash identifier:          1eBJ51ABJfJn/S+8CtRT4ESYmTsudpM9jxJOVGf+Scw=
Subject key identifier:   00:C7:93:C6:91:32:C7:2F:AB:AC:73:65:7A:9C:42:0C:9D:6D:84:A6
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       337C82233860B7AB7CCE061084B387FEA51B5860
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a343030303a3a2f34382d3438203d3e20323730383832.roa
Signing time:             Tue 23 Apr 2024 12:49:12 +0000
ROA not before:           Tue 23 Apr 2024 12:44:12 +0000
ROA not after:            Tue 22 Apr 2025 12:49:12 +0000
asID:                     270882
IP address blocks:        2804:72e4:4000::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7c:82:23:38:60:b7:ab:7c:ce:06:10:84:b3:87:fe:a5:1b:58:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: Apr 23 12:44:12 2024 GMT
            Not After : Apr 22 12:49:12 2025 GMT
        Subject: CN=00C793C69132C72FABAC73657A9C420C9D6D84A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:8e:34:d9:3c:92:bb:c6:b0:05:63:c2:3c:
                    76:53:04:02:58:05:f2:6d:a5:e6:a2:a2:68:ae:1c:
                    e0:33:c6:a1:35:59:6e:6a:22:aa:36:83:40:6e:9c:
                    c3:89:86:b2:9d:f1:d9:94:3c:b0:19:0d:79:1d:05:
                    fe:25:c3:37:39:57:0e:8d:81:f8:50:dc:41:77:5c:
                    24:c8:1c:d1:3d:ac:84:52:09:57:19:f4:20:66:fa:
                    1f:e2:02:ee:4f:50:2b:ab:01:49:87:bb:a0:92:05:
                    8d:25:73:a5:fa:5d:b0:cc:f5:6a:58:df:02:a5:b7:
                    08:b3:23:e1:f2:ef:b3:6a:38:f5:a3:8c:1f:3a:2b:
                    89:c5:c5:96:1b:54:41:cf:fd:3f:38:cb:a3:d8:2b:
                    19:24:bc:81:74:28:a5:ee:16:0d:25:37:4d:b6:fd:
                    d7:73:c4:05:5c:9e:5d:87:7a:78:08:51:9d:eb:f9:
                    aa:2c:59:53:28:17:bc:05:da:da:c2:1d:9c:09:44:
                    33:5a:42:b6:09:01:1a:81:88:92:76:ef:40:81:aa:
                    d8:79:82:45:cc:ff:78:82:7a:59:e8:26:3a:1f:80:
                    aa:72:de:f4:1f:36:71:84:5c:85:54:b2:24:aa:83:
                    72:68:28:c6:06:3d:d3:34:2f:b3:3e:cf:88:19:a6:
                    2a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C7:93:C6:91:32:C7:2F:AB:AC:73:65:7A:9C:42:0C:9D:6D:84:A6
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a343030303a3a2f34382d3438203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72e4:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:76:66:3b:17:71:b3:ce:1f:fd:d4:43:c6:c4:cf:0b:1d:41:
         14:68:96:2a:f9:42:12:b1:48:0b:52:c7:83:eb:ea:95:ab:1f:
         4c:9d:de:ea:80:bd:c9:7e:f8:41:95:b9:ff:8c:93:a7:69:f6:
         a2:26:4f:3e:9b:29:f7:00:cb:1a:85:3c:a5:41:5a:b6:2c:0d:
         88:85:09:a6:a0:11:b5:75:26:5f:89:63:44:c7:5b:0e:ee:c0:
         76:02:95:84:0a:65:60:42:ae:1a:43:ed:ab:cc:82:e5:db:0a:
         6d:87:d2:e3:19:5e:85:e4:e9:40:97:8e:85:80:e5:48:e0:f8:
         db:47:42:78:f9:d2:b0:b6:db:af:3e:2e:ce:fd:f8:78:36:fe:
         f0:ab:0c:c5:b6:f6:10:b2:2b:38:1d:a2:bf:5c:3e:fa:1c:9d:
         52:7d:a2:a1:ee:56:3d:50:2e:de:88:87:2d:95:e1:3c:97:75:
         7d:5a:68:44:5d:35:54:6a:83:cc:05:cd:2b:38:65:62:d7:54:
         0e:c6:56:8a:d5:1e:39:9d:e5:d6:1f:c1:ea:07:ec:1b:8b:62:
         9f:b9:58:97:4c:14:ed:49:96:a4:c3:da:fd:1f:5b:2c:d2:47:
         2b:c9:c6:03:31:9f:0e:72:fd:ee:13:5a:2b:3d:d5:3f:43:b2:
         38:e0:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:40 2025 by rpki-client