Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa
File:                     323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (raw, json)
Hash identifier:          5GwZYk0IO/PvAiUWD1WkOaPem73hztR7pOC9gLW3gfk=
Subject key identifier:   D3:1E:48:BA:C6:98:24:E5:04:71:B7:67:7C:78:DE:3E:58:F7:AE:17
Certificate issuer:       /CN=6CDD46AD08DC9EA1A1012808F1B0F10F719846E0
Certificate serial:       79CED951D21CCFFBCDFF66637A47FEE0B8129E44
Authority key identifier: 6C:DD:46:AD:08:DC:9E:A1:A1:01:28:08:F1:B0:F1:0F:71:98:46:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDD46AD08DC9EA1A1012808F1B0F10F719846E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa
Signing time:             Tue 28 Jan 2025 19:09:35 +0000
ROA not before:           Tue 28 Jan 2025 19:04:35 +0000
ROA not after:            Tue 27 Jan 2026 19:09:35 +0000
asID:                     273433
IP address blocks:        2804:8e8c::/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 18 Mar 2025 11:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ce:d9:51:d2:1c:cf:fb:cd:ff:66:63:7a:47:fe:e0:b8:12:9e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CDD46AD08DC9EA1A1012808F1B0F10F719846E0
        Validity
            Not Before: Jan 28 19:04:35 2025 GMT
            Not After : Jan 27 19:09:35 2026 GMT
        Subject: CN=D31E48BAC69824E50471B7677C78DE3E58F7AE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:ac:0e:22:b8:ee:bb:83:5a:56:a9:d3:85:
                    c3:fb:b5:7a:d1:37:0e:fa:e8:14:81:1b:a0:d6:a0:
                    22:7b:d3:a4:38:eb:58:c6:07:51:e4:e8:f3:6e:ba:
                    44:5f:d8:84:0b:51:aa:57:e9:66:6a:af:2f:03:99:
                    c1:a9:b7:d2:02:4b:18:7e:29:35:03:08:23:91:1c:
                    b2:c0:dc:ad:13:93:6f:35:ed:81:a7:68:2f:7b:56:
                    37:e5:95:15:27:93:af:8b:d3:35:e9:2b:d6:62:8b:
                    ae:96:e1:4d:2d:13:66:e2:96:c0:6e:a8:df:25:58:
                    73:2b:b1:e8:39:82:96:98:e2:e3:fc:74:c7:de:f6:
                    7d:6f:b6:34:38:87:06:1c:62:4b:d5:ce:66:31:31:
                    14:6f:35:4a:86:5c:43:7a:bf:6b:a1:fd:99:3a:1c:
                    99:95:e3:c0:d0:5f:56:c7:cc:e5:be:8a:fe:19:52:
                    1d:fe:c0:02:3d:92:7e:93:eb:5f:14:94:8c:68:ae:
                    f9:6e:9d:fe:ec:c7:a8:80:71:bb:c9:f7:f5:35:ae:
                    fe:d6:40:6b:10:b5:eb:53:4d:0f:84:d7:8a:71:1f:
                    c8:83:2d:2b:f7:5a:0c:01:04:82:9e:a6:dd:7a:a8:
                    cb:1e:57:aa:2a:28:47:c0:48:3e:04:6a:af:4f:96:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1E:48:BA:C6:98:24:E5:04:71:B7:67:7C:78:DE:3E:58:F7:AE:17
            X509v3 Authority Key Identifier:
                keyid:6C:DD:46:AD:08:DC:9E:A1:A1:01:28:08:F1:B0:F1:0F:71:98:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/6CDD46AD08DC9EA1A1012808F1B0F10F719846E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDD46AD08DC9EA1A1012808F1B0F10F719846E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:11:30:40:2a:e3:a0:89:4f:83:b6:ac:a6:23:03:e8:8f:db:
         45:4f:42:4f:cd:23:2a:c3:3e:55:24:95:f8:f8:b1:4b:b3:c7:
         85:7a:33:1a:e2:cb:61:cc:85:58:b1:be:5a:6a:9b:f0:52:74:
         ec:09:72:06:62:57:8a:e4:31:c6:1b:59:12:4c:c9:35:f7:bf:
         c9:f3:ed:ff:46:08:f7:75:89:1f:b5:ae:c5:f3:78:02:4d:46:
         78:78:4d:bd:f4:df:d0:c3:41:4f:a1:d0:e1:8e:e6:2d:5e:94:
         4a:8b:34:47:4d:ed:a2:27:c7:35:09:8a:c5:7b:6a:a9:cb:2e:
         1c:16:7e:46:73:51:3d:89:a7:4d:e2:8e:80:65:15:19:1b:67:
         13:13:75:19:17:ec:1e:c8:30:d5:ea:d9:51:20:0b:55:3a:e0:
         33:d1:66:d5:93:34:5c:92:73:e4:36:28:01:e7:27:25:8f:6c:
         a8:f2:65:7c:1e:dd:1c:15:4a:fa:9b:b4:f9:8d:4c:61:ac:79:
         17:e8:86:cc:7c:f5:2d:d7:34:89:e5:51:43:79:2d:db:f5:1f:
         1a:b5:07:56:80:83:33:ae:20:a7:8c:84:91:fd:34:1f:91:fd:
         25:fe:50:e6:38:07:91:4d:3c:86:d8:0a:e4:dd:06:10:d8:57:
         9b:21:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:10:23 2025 by rpki-client