Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3438203d3e20323635303933.roa
File:                     323830343a333262303a3a2f33322d3438203d3e20323635303933.roa (raw, json)
Hash identifier:          MAmwCv8PA4wIvynAa+ItGIFFjmGMUALR7nLrQUmhwHc=
Subject key identifier:   F0:B6:EF:0B:1F:0D:03:1D:5D:C4:A0:34:F9:51:AE:C6:64:34:06:0B
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       35325737E3E320233D1EF5FDDE54206A7FC47188
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3438203d3e20323635303933.roa
Signing time:             Tue 16 Jul 2024 08:18:27 +0000
ROA not before:           Tue 16 Jul 2024 08:13:27 +0000
ROA not after:            Tue 15 Jul 2025 08:18:27 +0000
asID:                     265093
IP address blocks:        2804:32b0::/32 maxlen: 48
Validation:               Failed, certificate revoked on Wed 02 Oct 2024 00:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:32:57:37:e3:e3:20:23:3d:1e:f5:fd:de:54:20:6a:7f:c4:71:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Jul 16 08:13:27 2024 GMT
            Not After : Jul 15 08:18:27 2025 GMT
        Subject: CN=F0B6EF0B1F0D031D5DC4A034F951AEC66434060B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:f6:99:93:87:7e:84:29:76:57:1a:52:84:
                    71:61:3e:1f:47:11:bc:3e:a5:84:e9:2a:60:c5:67:
                    d8:07:8e:ef:0f:ee:23:f6:c4:a8:b9:e0:9a:0f:e6:
                    7d:99:d2:08:9e:63:45:d7:cd:e9:27:12:44:d2:10:
                    9e:26:57:82:ec:41:b8:f7:df:19:4d:96:8e:2c:13:
                    c1:fc:1f:75:86:61:2a:a9:5b:52:3d:d8:77:b3:db:
                    8a:d9:0e:66:d2:1f:d0:f3:83:a7:a4:8c:14:de:45:
                    db:2b:af:c9:9f:cf:25:f5:be:b3:b4:5f:42:9f:e6:
                    2d:56:9d:f8:a2:b0:a5:d2:ff:1f:87:b2:75:dd:f8:
                    50:e5:8f:53:40:07:90:e8:f2:f5:20:42:71:cb:77:
                    9e:5e:90:fd:4e:89:ce:63:d7:61:99:c4:c5:53:59:
                    92:5d:23:cc:9d:76:49:7a:c7:18:f4:c3:5e:91:10:
                    2a:03:30:0b:83:49:9d:4c:87:41:fd:c7:3b:50:20:
                    81:8a:e8:e4:96:6a:56:2c:76:f0:0f:09:09:67:16:
                    c6:90:8b:32:03:e8:0c:12:b3:c7:90:28:ed:98:a2:
                    9e:44:46:2b:4c:2d:37:9b:a3:bc:70:46:f2:a2:02:
                    28:ed:ce:23:78:66:93:65:d9:d7:42:68:c4:22:4d:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B6:EF:0B:1F:0D:03:1D:5D:C4:A0:34:F9:51:AE:C6:64:34:06:0B
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a3a2f33322d3438203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:f0:56:d3:18:3a:37:d8:3a:f2:ca:37:af:d8:9a:21:9c:
         0c:b0:71:73:42:c3:b5:f6:fe:a1:53:d6:0a:24:e1:ba:43:f2:
         65:99:92:67:32:2d:20:49:bb:fe:f9:cc:cd:6b:51:7b:58:ba:
         55:8a:3a:74:22:87:72:f8:90:a7:66:1b:cb:d7:85:63:2a:31:
         04:3d:5a:e1:77:4a:47:70:8c:22:1e:3d:a2:45:73:96:1e:3a:
         e8:cd:f7:8d:12:99:40:dc:cb:aa:00:ed:2d:fb:03:76:c9:2c:
         44:76:31:57:b1:99:5d:86:05:7e:a1:e2:17:f1:6d:d5:6b:39:
         21:f1:4b:8d:28:69:f7:ad:b5:cb:33:bd:62:57:19:7a:f3:d2:
         4b:63:66:d7:d6:23:c2:65:4f:ca:e2:e7:40:72:28:30:a9:1e:
         b8:9f:0f:99:69:db:e4:03:73:0d:d6:7d:bf:0d:12:30:34:12:
         45:e2:6c:b2:ea:f0:fe:2c:2f:78:e8:d6:7f:e3:ef:6a:f6:de:
         26:55:ee:e5:65:1d:33:dd:ff:4f:f3:39:5d:28:40:ee:03:34:
         5c:e4:f4:09:89:d5:99:2f:ed:50:7f:ce:46:a6:db:f1:45:d1:
         5b:e6:73:89:bd:a7:af:36:e9:47:6e:c4:ed:e9:e3:da:e9:44:
         a2:4a:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:11 2025 by rpki-client