Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/323830343a36343a3a2f33322d3332203d3e203237363933.roa
File:                     323830343a36343a3a2f33322d3332203d3e203237363933.roa (raw, json)
Hash identifier:          ZhhdlJLHAgpmeQcIaKKYqcji+jTYNJE/LbK5lkkKoHI=
Subject key identifier:   B9:CD:A4:D3:3E:4A:1B:E8:61:7C:4F:FA:09:B5:37:2D:5A:D4:D8:8C
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       6B33B83CF188DA6662DCD3A58FBA905AFB0605E2
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/323830343a36343a3a2f33322d3332203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:15 +0000
ROA not before:           Tue 22 Oct 2024 14:25:15 +0000
ROA not after:            Tue 21 Oct 2025 14:30:15 +0000
asID:                     27693
IP address blocks:        2804:64::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 24 Oct 2024 13:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:33:b8:3c:f1:88:da:66:62:dc:d3:a5:8f:ba:90:5a:fb:06:05:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:15 2024 GMT
            Not After : Oct 21 14:30:15 2025 GMT
        Subject: CN=B9CDA4D33E4A1BE8617C4FFA09B5372D5AD4D88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:ca:4f:87:d5:04:53:3f:45:8e:f3:6d:e0:
                    3e:3a:79:76:7f:7c:59:71:e9:76:0e:c3:36:93:ea:
                    90:ca:4b:1a:e5:94:fc:7d:9e:92:9d:b6:cc:45:27:
                    85:b4:f6:95:3f:0e:23:a9:54:94:35:98:47:79:94:
                    5e:9f:1d:a8:61:6b:0e:b6:e3:fb:e9:55:31:5a:e6:
                    b7:8a:c3:b1:c5:c5:e3:72:be:84:d3:27:e0:c4:8e:
                    c6:58:25:10:a6:6c:2a:fc:be:ad:39:77:12:70:f4:
                    10:38:f8:5a:d6:2c:09:99:d1:85:cf:98:8c:6b:57:
                    19:67:0f:3f:51:d6:dd:43:65:f5:62:45:5a:cc:96:
                    47:be:30:d3:bb:cb:f6:4e:48:b6:dd:c2:54:7c:90:
                    63:fb:c7:89:5e:12:21:86:df:19:b8:77:e5:6d:08:
                    48:69:c6:d6:74:12:88:8c:3d:a8:53:b7:2c:aa:e7:
                    15:ec:c0:e3:54:e6:b5:11:aa:09:11:15:57:1a:60:
                    80:88:2d:d4:ec:3f:3d:5b:6a:60:be:79:7d:9a:bb:
                    1f:9a:43:6d:b3:d8:53:39:9c:ec:6e:fc:53:43:0f:
                    63:50:2f:f7:2d:a3:66:c4:8e:57:ef:28:2f:59:69:
                    90:64:9f:16:28:5c:b9:1e:84:9b:b4:78:2b:09:6a:
                    dc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CD:A4:D3:3E:4A:1B:E8:61:7C:4F:FA:09:B5:37:2D:5A:D4:D8:8C
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/323830343a36343a3a2f33322d3332203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ce:08:68:73:e4:ef:98:94:6c:1c:a8:8d:05:e2:76:93:bb:
         9b:5f:f1:b4:f6:6a:ab:ce:ac:43:62:a7:0c:d5:98:35:f8:56:
         eb:54:3c:0c:07:25:af:70:58:a8:5e:97:08:1d:3a:da:9b:00:
         9d:3f:f1:eb:ab:66:85:23:5c:68:13:11:e4:01:53:65:2f:fb:
         cf:98:40:ba:c7:a3:33:8b:88:7c:fc:47:63:83:35:6e:65:10:
         38:f5:ec:b3:61:01:bd:3e:a9:7c:82:6d:8f:1b:cf:e5:89:3e:
         bb:9a:97:bd:3c:35:3c:16:79:7d:6f:f6:6d:a4:ef:de:9a:7d:
         24:13:ca:7b:59:1d:a1:8e:27:16:da:7c:ff:97:b4:e0:4b:fc:
         83:9f:57:bc:18:aa:51:aa:81:ba:e6:52:0a:c8:22:41:fe:0d:
         7d:f5:90:66:00:51:c8:87:df:fb:9d:9b:f2:5c:12:bd:3d:5c:
         ba:e9:87:16:fc:a5:c0:13:58:e4:de:98:d5:c1:4b:45:76:98:
         8a:9c:df:39:c1:df:11:dc:9c:7d:84:b5:85:71:9c:b1:8f:f2:
         55:af:f5:72:b1:40:31:9b:f7:71:f1:f0:23:03:88:aa:ae:60:
         b6:27:bb:e1:cc:86:35:28:c0:d4:48:2b:aa:7b:2f:f8:3d:ae:
         eb:46:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:21 2025 by rpki-client