Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a3a2f33322d3438203d3e20323730383832.roa
File:                     323830343a373265343a3a2f33322d3438203d3e20323730383832.roa (raw, json)
Hash identifier:          Q1oMy78+W9wmJq+OgWuojsNbbtgkzgotjoqlATshsK4=
Subject key identifier:   2F:C8:BC:31:EC:71:FD:28:6F:18:8D:40:F3:10:1B:EE:9A:B8:F4:AC
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       144CE9606EA399D39EF5E3B699D9B2F2547E5AC9
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a3a2f33322d3438203d3e20323730383832.roa
Signing time:             Wed 05 Jun 2024 18:57:05 +0000
ROA not before:           Wed 05 Jun 2024 18:52:05 +0000
ROA not after:            Wed 04 Jun 2025 18:57:05 +0000
asID:                     270882
IP address blocks:        2804:72e4::/32 maxlen: 48
Validation:               Failed, certificate revoked on Thu 07 Nov 2024 13:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4c:e9:60:6e:a3:99:d3:9e:f5:e3:b6:99:d9:b2:f2:54:7e:5a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: Jun  5 18:52:05 2024 GMT
            Not After : Jun  4 18:57:05 2025 GMT
        Subject: CN=2FC8BC31EC71FD286F188D40F3101BEE9AB8F4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:1a:ab:0a:90:c7:fc:e7:09:24:19:93:f8:
                    f2:fc:93:6a:e7:aa:5c:c3:65:83:9c:47:b6:69:9c:
                    67:22:57:a0:6d:83:7b:e7:c9:1c:f8:ce:17:0c:f5:
                    83:63:1c:72:f1:66:38:9f:fd:6d:01:eb:b2:7a:2c:
                    40:a5:f8:9b:ce:33:29:a8:57:32:4d:40:64:6d:94:
                    0f:19:bd:8b:c0:52:c3:e4:3e:bf:56:a0:8b:2a:33:
                    52:9e:f7:83:05:42:cb:e1:fe:1e:44:d3:3e:de:cf:
                    8c:df:6b:4e:c0:b7:85:88:a6:0d:5e:85:dd:89:e0:
                    9b:b7:83:26:cf:99:7b:12:87:8d:c3:d4:39:d3:1b:
                    a7:98:51:ef:24:57:73:4a:7b:8b:00:a7:60:ca:97:
                    64:c4:6f:33:f4:f8:a6:de:ee:92:34:4d:bf:26:e7:
                    71:c2:5e:f8:f4:3e:9a:f4:92:56:ef:f6:5e:f3:09:
                    72:a6:94:ca:c9:f0:bc:fc:db:34:54:fb:b5:7c:24:
                    79:41:f4:fc:c8:20:d7:9a:d3:91:6d:1b:86:27:63:
                    70:d6:a0:5d:fa:00:53:01:44:30:b4:a1:9b:dd:d8:
                    89:18:10:80:be:8f:8d:c8:29:8e:ac:cf:87:4f:98:
                    82:a2:75:d1:ec:8d:8c:c4:3e:f7:c8:d9:4e:ab:5e:
                    7d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C8:BC:31:EC:71:FD:28:6F:18:8D:40:F3:10:1B:EE:9A:B8:F4:AC
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a3a2f33322d3438203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:1b:46:27:60:69:b7:64:4f:0e:4f:16:01:49:d7:71:32:79:
         ce:d1:b0:a7:d8:d8:2d:20:7e:01:b9:e0:f8:90:42:94:93:f4:
         89:6d:67:cd:89:4d:b5:20:90:76:67:ff:3f:56:fd:6a:e4:0c:
         24:2e:05:f2:41:85:11:48:ba:00:a2:71:38:8d:cb:7c:b5:86:
         63:42:36:63:03:b3:b3:52:9a:51:4f:f6:93:18:61:92:4f:d6:
         dd:6e:fc:47:f8:aa:06:cb:61:08:30:d6:ef:fc:56:1e:e1:a0:
         d0:19:e4:b1:37:95:64:46:60:c3:b2:66:ca:5f:56:03:a3:df:
         1d:6a:fe:9e:f2:34:06:d5:41:c9:7a:e7:08:0d:90:47:9f:a4:
         09:0d:10:d8:95:7b:f8:d4:1b:52:7e:9b:39:94:cc:b5:56:e9:
         97:97:88:13:b4:05:ea:42:d1:36:25:cc:90:3f:f5:b4:41:92:
         ef:7e:df:c9:41:9c:55:28:f1:fe:6f:92:bc:3f:8d:21:c5:a8:
         09:55:f1:eb:41:b8:d4:33:e0:f3:36:83:c7:17:2b:94:e3:93:
         c5:92:57:3e:49:ff:b1:c8:13:fb:98:4e:22:4e:04:b8:be:9a:
         bf:dd:7b:fd:cb:3a:76:97:29:3f:d9:48:c7:fc:fb:31:42:47:
         29:28:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:43 2025 by rpki-client