Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a653030303a3a2f33362d3336203d3e20323632333338.roa
File:                     323830343a3830343a653030303a3a2f33362d3336203d3e20323632333338.roa (raw, json)
Hash identifier:          lU5lWWfwAU9fOusMpY3VaAp/incmEoFgVCkGER6aplw=
Subject key identifier:   AE:7B:9D:3D:EA:77:9D:A8:8F:7F:D5:D4:7E:FC:03:58:62:3D:D1:90
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       29C855163473B2046CA0AA8FB4108D47B7FF011B
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a653030303a3a2f33362d3336203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:45:00 +0000
ROA not before:           Wed 24 Apr 2024 12:40:00 +0000
ROA not after:            Wed 23 Apr 2025 12:45:00 +0000
asID:                     262338
IP address blocks:        2804:804:e000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c8:55:16:34:73:b2:04:6c:a0:aa:8f:b4:10:8d:47:b7:ff:01:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:40:00 2024 GMT
            Not After : Apr 23 12:45:00 2025 GMT
        Subject: CN=AE7B9D3DEA779DA88F7FD5D47EFC0358623DD190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:8b:e8:98:4f:ac:fe:78:b7:f3:d5:07:c6:
                    89:44:28:7f:90:14:ae:86:b9:e6:36:86:1c:ba:6a:
                    c3:5a:c0:0e:42:43:b3:95:c9:6e:27:9a:bc:c6:73:
                    6f:b6:4c:f2:5a:17:5e:c9:95:04:82:bf:2a:b6:c7:
                    d4:a8:e4:01:ae:40:a6:a3:b8:76:53:08:bd:73:67:
                    06:77:f2:e1:71:0f:9b:d9:e0:b7:38:39:e5:5f:c2:
                    d8:0b:ee:b7:5e:18:10:05:0c:a7:ef:fe:3e:ab:96:
                    86:21:8f:d3:69:90:2c:e0:1c:d9:13:30:8c:62:98:
                    b1:9f:b8:a7:d0:ec:ab:c7:4e:99:c0:c8:2b:c2:51:
                    1f:db:d0:8d:7c:d5:d7:b5:93:c0:7f:4e:e2:b3:bf:
                    f2:03:40:97:6e:be:f9:81:8a:d7:4e:ae:81:3e:ee:
                    33:e0:16:e2:59:46:0f:1c:e0:d3:4b:96:cd:3b:ad:
                    00:d1:d9:ad:34:0e:29:dd:e4:9e:31:b9:8c:3a:45:
                    d5:70:1e:6b:60:11:da:f9:11:75:f1:54:d1:b5:04:
                    55:86:b8:e8:d1:38:8e:45:3b:8a:99:9a:1c:85:c5:
                    b7:48:a8:2a:b9:5f:66:8c:45:e9:ef:cc:e0:c4:0b:
                    a2:c9:ab:76:f3:7b:c7:10:d2:5d:05:e7:fe:5a:65:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:9D:3D:EA:77:9D:A8:8F:7F:D5:D4:7E:FC:03:58:62:3D:D1:90
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a653030303a3a2f33362d3336203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:804:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:7d:87:67:5d:e5:27:19:da:8f:f8:86:bb:3e:98:ac:54:
         06:0c:0b:e6:1c:a5:dd:d7:ca:ff:10:25:af:39:5f:1a:41:e6:
         e4:9c:26:7d:e7:3a:3a:62:e6:28:90:6a:da:ea:ba:31:e0:9b:
         d4:19:99:5f:0b:bc:31:72:97:d6:9b:95:b6:7a:e5:de:70:16:
         fd:50:b7:2c:64:f8:d3:77:c4:fd:23:bd:36:5b:c1:69:65:d7:
         5e:14:e0:ba:1e:92:3e:dc:68:da:3b:36:9c:e2:cf:0e:07:5c:
         36:84:c2:1e:7c:f8:a2:d6:66:80:27:2e:d2:27:a7:c6:93:51:
         7d:14:83:5a:64:a2:78:ec:7e:e5:a6:38:1e:e7:86:b3:bd:68:
         11:7c:1c:d0:10:1e:e6:22:2a:f5:4c:77:51:4a:d3:75:48:43:
         88:17:b8:86:a0:13:c7:6b:b8:4e:6b:c8:4f:45:28:9f:72:27:
         fa:10:66:1a:3c:02:0c:3c:91:c1:ea:1a:2b:ef:2a:0a:ab:56:
         9d:2b:47:2b:be:04:92:c1:fe:53:f7:6a:d4:ed:1c:3f:1c:6e:
         e4:09:db:85:7f:3b:f0:e4:af:37:44:15:78:69:b3:f9:2d:d9:
         a2:59:78:71:24:70:cd:87:22:22:cf:88:db:28:8b:36:26:58:
         32:97:b5:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKchVFjRzsgRsoKqPtBCNR7f/ARswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxQTEyMEQ3MjgxMjVGNjBGRjREQ0JGMUVDN0RBNTRG
MERCRUQwMzAeFw0yNDA0MjQxMjQwMDBaFw0yNTA0MjMxMjQ1MDBaMDMxMTAvBgNV
BAMTKEFFN0I5RDNERUE3NzlEQTg4RjdGRDVENDdFRkMwMzU4NjIzREQxOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFIvomE+s/ni389UHxolEKH+Q
FK6GueY2hhy6asNawA5CQ7OVyW4nmrzGc2+2TPJaF17JlQSCvyq2x9So5AGuQKaj
uHZTCL1zZwZ38uFxD5vZ4Lc4OeVfwtgL7rdeGBAFDKfv/j6rloYhj9NpkCzgHNkT
MIximLGfuKfQ7KvHTpnAyCvCUR/b0I181de1k8B/TuKzv/IDQJduvvmBitdOroE+
7jPgFuJZRg8c4NNLls07rQDR2a00Dind5J4xuYw6RdVwHmtgEdr5EXXxVNG1BFWG
uOjROI5FO4qZmhyFxbdIqCq5X2aMRenvzODEC6LJq3bze8cQ0l0F5/5aZc1vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrnudPep3naiPf9XUfvwDWGI90ZAwHwYDVR0j
BBgwFoAUXRoSDXKBJfYP9Ny/HsfaVPDb7QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH
c3YvMC81RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUExMjBENzI4MTI1RjYw
RkY0RENCRjFFQzdEQTU0RjBEQkVEMDMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlva3NmM3NMeG5icWd4UGVDUGhDTWFzOXQ3alJBa1Y4MnZuOFRrTFJ4R3N2LzAv
MzIzODMwMzQzYTM4MzAzNDNhNjUzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAgE4DANBgkqhkiG9w0BAQsFAAOC
AQEAWox9h2dd5ScZ2o/4hrs+mKxUBgwL5hyl3dfK/xAlrzlfGkHm5Jwmfec6OmLm
KJBq2uq6MeCb1BmZXwu8MXKX1puVtnrl3nAW/VC3LGT403fE/SO9NlvBaWXXXhTg
uh6SPtxo2js2nOLPDgdcNoTCHnz4otZmgCcu0ienxpNRfRSDWmSieOx+5aY4HueG
s71oEXwc0BAe5iIq9Ux3UUrTdUhDiBe4hqATx2u4TmvIT0Uon3In+hBmGjwCDDyR
weoaK+8qCqtWnStHK74EksH+U/dq1O0cPxxu5AnbhX878OSvN0QVeGmz+S3Zoll4
cSRwzYciIs+I2yiLNiZYMpe1tw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:50 2025 by rpki-client