Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/323830343a3631383a3a2f33322d313238203d3e203238323534.roa
File:                     323830343a3631383a3a2f33322d313238203d3e203238323534.roa (raw, json)
Hash identifier:          bnq9+MXqIeY+t1MgmFUgy7+2mTarr6uqV1CO/0iZdek=
Subject key identifier:   B3:FF:A5:73:E7:FF:CB:DB:1D:F4:F2:00:2C:01:24:6E:77:EE:95:AF
Certificate issuer:       /CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
Certificate serial:       224A4E7E4CC497161AE459CCAF1335C1EE76DE00
Authority key identifier: 91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/323830343a3631383a3a2f33322d313238203d3e203238323534.roa
Signing time:             Tue 14 May 2024 13:06:37 +0000
ROA not before:           Tue 14 May 2024 13:01:37 +0000
ROA not after:            Tue 13 May 2025 13:06:37 +0000
asID:                     28254
IP address blocks:        2804:618::/32 maxlen: 128
Validation:               Failed, certificate revoked on Thu 16 May 2024 18:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4a:4e:7e:4c:c4:97:16:1a:e4:59:cc:af:13:35:c1:ee:76:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
        Validity
            Not Before: May 14 13:01:37 2024 GMT
            Not After : May 13 13:06:37 2025 GMT
        Subject: CN=B3FFA573E7FFCBDB1DF4F2002C01246E77EE95AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:10:91:65:67:4b:94:41:67:81:52:9b:04:
                    42:40:59:0b:5c:83:98:f9:b6:c5:1e:10:61:18:ff:
                    83:df:d5:f6:63:30:63:fd:73:77:3c:46:79:36:80:
                    18:da:97:c2:43:ab:eb:ef:64:1d:10:51:9d:de:41:
                    7c:87:e6:77:5d:cc:0e:39:49:c3:53:fe:62:53:5e:
                    9c:3c:3a:f9:5f:f2:8c:cc:8b:a2:63:ad:57:19:31:
                    49:2a:b9:bb:b3:a5:85:fe:09:5d:52:8f:6c:69:41:
                    20:f0:8c:da:6e:67:83:ff:be:48:04:38:d6:a4:1e:
                    37:59:a9:b8:a3:ff:8d:2e:0c:1c:63:43:27:f8:5d:
                    7e:06:65:94:29:0e:de:ac:36:42:51:6e:93:d7:a8:
                    b4:87:8a:b3:45:3a:3a:3f:63:05:10:6b:9a:f3:2e:
                    9d:f8:f5:08:0b:50:ca:a0:fe:64:12:11:33:ce:08:
                    c9:00:c1:6d:fe:4f:33:da:4f:55:27:23:ac:72:55:
                    90:4a:fc:04:38:c9:ec:b4:a7:9b:76:8d:3f:a5:e2:
                    08:55:a9:22:74:fb:6d:87:2d:0d:53:f3:ef:f2:5e:
                    00:a9:5d:e5:f2:04:40:eb:30:34:c4:9c:62:de:bb:
                    f7:b9:e3:45:97:29:4c:b7:f7:55:fb:e4:00:ec:65:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:A5:73:E7:FF:CB:DB:1D:F4:F2:00:2C:01:24:6E:77:EE:95:AF
            X509v3 Authority Key Identifier:
                keyid:91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/323830343a3631383a3a2f33322d313238203d3e203238323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:618::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:df:57:29:25:7b:f9:12:42:a9:e8:54:aa:e3:b2:2b:b1:4c:
         4b:f7:5c:e4:f2:20:bd:bd:8c:ba:10:a5:c6:46:d8:f7:9e:35:
         ba:29:b5:78:26:d7:42:e1:b8:8c:4c:de:5c:eb:c0:d2:4e:77:
         c0:cc:e1:b0:a3:6d:47:22:98:79:2f:64:73:89:66:8a:6d:36:
         eb:3d:0f:cf:58:35:56:89:90:fb:0d:c1:09:87:c2:b7:80:61:
         89:f3:5b:e7:01:5a:24:eb:bd:d9:63:47:81:75:7f:1e:72:e1:
         9e:0c:40:d6:62:19:3d:e0:55:e0:ed:45:d5:ef:ba:96:54:1f:
         93:32:5a:e2:24:22:54:2f:e3:64:e0:e2:ee:4f:bd:8a:43:0f:
         25:2a:8c:b4:f4:2c:4b:b6:e2:85:96:cd:b9:35:9d:99:19:95:
         30:3f:fc:89:9c:27:5a:db:c0:2e:46:91:5f:4d:8e:93:9f:8a:
         89:cc:7e:71:bd:73:3a:50:5c:3c:24:6d:ec:40:1c:b1:18:74:
         a3:42:c6:48:8b:4e:7a:a5:06:5d:20:44:50:e4:64:bf:7b:06:
         0f:56:b0:d0:47:05:3d:44:70:eb:ab:51:0a:f5:e9:88:77:5c:
         38:cf:40:e1:2e:db:14:07:93:b2:3a:cd:93:19:5e:8d:67:2d:
         d5:ca:b9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:49:28 2025 by rpki-client