Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33332d3333203d3e20323638313434.roa
File:                     323830343a353862303a3a2f33332d3333203d3e20323638313434.roa (raw, json)
Hash identifier:          8MF9+2G8jlqW/53acxK4jCrYWfFo8I3CJoKkEe3y37Y=
Subject key identifier:   06:C4:92:27:34:7D:56:9C:89:FF:01:16:FB:67:5D:83:58:DA:51:16
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       7E07F8B85DFCEF54507E8BF41FFE39253D2B92AF
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33332d3333203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:54:56 +0000
ROA not before:           Mon 13 Jan 2025 12:49:56 +0000
ROA not after:            Mon 12 Jan 2026 12:54:56 +0000
asID:                     268144
IP address blocks:        2804:58b0::/33 maxlen: 33
Validation:               Failed, certificate revoked on Mon 12 Jan 2026 12:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:07:f8:b8:5d:fc:ef:54:50:7e:8b:f4:1f:fe:39:25:3d:2b:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:56 2025 GMT
            Not After : Jan 12 12:54:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:6e:c7:10:c1:50:2d:23:90:e7:f7:b1:48:
                    d9:c9:c6:cd:fb:ed:e5:c6:60:41:73:fc:ad:bc:83:
                    a7:ee:c0:c1:ec:32:23:0f:fe:7b:22:74:ec:17:c0:
                    21:e8:4e:9d:60:71:01:54:c9:80:0c:a2:67:db:91:
                    2a:8f:54:41:0e:96:86:70:d6:8d:88:35:95:b5:9c:
                    7f:90:2e:01:0e:22:f5:d0:6b:44:89:f9:4a:45:67:
                    c6:3a:10:98:e6:9f:85:cd:0c:2c:e1:6a:01:79:52:
                    33:09:12:c8:ec:6b:81:95:23:e1:29:dd:c6:ee:ac:
                    c5:58:e0:6d:11:c6:9a:91:e6:8c:28:bc:fc:24:04:
                    55:58:c8:56:b3:77:e9:44:8a:24:f6:96:8a:6e:e2:
                    e6:d3:0e:fa:cc:7b:69:a2:0e:de:a3:9a:ed:da:67:
                    a1:41:e8:c2:75:17:c0:e5:70:f8:1d:db:15:6f:5f:
                    d6:7f:9f:6f:05:6c:68:f4:73:4e:91:3f:f8:17:07:
                    56:6e:16:dd:07:7d:3d:95:fe:30:83:0f:ed:cf:b7:
                    6c:d7:1e:cf:4f:30:8b:62:07:ac:77:8a:ce:bb:8d:
                    6b:a4:f8:8e:a6:91:c3:50:72:58:a9:9a:c3:9e:5c:
                    11:5c:60:0f:7d:e1:0e:14:69:97:bc:5b:b9:c9:3f:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C4:92:27:34:7D:56:9C:89:FF:01:16:FB:67:5D:83:58:DA:51:16
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33332d3333203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:0b:64:1d:a6:d3:0d:ce:84:db:30:a9:57:87:26:ce:30:
         2c:c9:6d:c3:d7:35:23:cf:86:2b:77:d3:91:ae:aa:29:7d:9f:
         6e:09:73:c8:26:65:58:64:b8:54:95:60:24:d3:6d:6b:71:32:
         c4:75:42:c1:19:ad:c4:77:11:82:4f:22:a6:6c:c3:33:d8:7f:
         d2:e8:03:47:c2:bd:34:9a:22:bb:68:d5:f4:33:46:de:63:85:
         a3:ab:2b:06:9e:62:55:2a:54:98:6c:bb:af:d2:1b:3d:94:39:
         cb:10:c8:04:22:03:dd:c6:7c:10:b1:68:d0:1f:1d:06:f5:28:
         8b:54:d4:ab:1f:cc:61:4f:89:59:7b:1b:4a:b4:ca:a9:92:06:
         5f:16:e2:ed:3e:4d:c2:45:d9:eb:3e:4f:4d:27:0e:1d:51:69:
         bc:96:4f:0f:90:77:71:6b:a6:74:e1:fb:53:5c:1d:34:76:5c:
         62:8f:2a:5d:4f:be:ee:ac:5b:db:31:c7:45:94:30:94:0e:bf:
         48:0d:77:c8:55:c6:df:62:94:39:09:d8:c4:89:48:32:d6:23:
         8e:50:81:ad:6b:b1:66:9c:77:25:da:74:5c:cd:3b:57:a2:ad:
         2f:56:49:94:08:c2:7b:d8:49:ed:d2:15:62:2e:01:74:a3:3f:
         d8:7d:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:37:39 2025 by rpki-client