Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a383030303a3a2f33332d3333203d3e20323635313937.roa
File:                     323830343a326332303a383030303a3a2f33332d3333203d3e20323635313937.roa (raw, json)
Hash identifier:          0qhBQWCSa95M+c9bddSwVP491Sg+UhNAweCYA8nFR0w=
Subject key identifier:   49:5E:B9:FE:E3:D2:02:70:02:E4:62:0D:17:0F:8D:F0:8B:5B:8F:AC
Certificate issuer:       /CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
Certificate serial:       3F73B1AEC8BF2FA0716C29E63CEF95F6AF2723C4
Authority key identifier: C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a383030303a3a2f33332d3333203d3e20323635313937.roa
Signing time:             Thu 18 Apr 2024 19:57:48 +0000
ROA not before:           Thu 18 Apr 2024 19:52:48 +0000
ROA not after:            Thu 17 Apr 2025 19:57:48 +0000
asID:                     265197
IP address blocks:        2804:2c20:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:73:b1:ae:c8:bf:2f:a0:71:6c:29:e6:3c:ef:95:f6:af:27:23:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
        Validity
            Not Before: Apr 18 19:52:48 2024 GMT
            Not After : Apr 17 19:57:48 2025 GMT
        Subject: CN=495EB9FEE3D2027002E4620D170F8DF08B5B8FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:9e:ca:1a:16:29:1d:33:06:24:6e:31:78:
                    8a:a5:63:7d:a2:3a:d4:d8:16:0c:45:25:14:28:a9:
                    aa:42:f4:24:d9:ce:88:13:71:90:38:bb:73:ab:1a:
                    40:bd:47:0e:cf:c3:df:3c:e6:95:6a:38:10:f2:fb:
                    4d:62:a0:81:00:0a:15:2a:80:13:2b:76:7f:0b:95:
                    4c:ea:9c:63:58:2f:aa:7b:ff:86:cc:c3:67:ae:20:
                    23:fd:7e:9c:c6:42:50:5d:6f:22:5d:5a:db:b3:44:
                    00:64:a6:c9:16:f3:37:1c:1c:5d:4a:af:2f:67:87:
                    33:9c:e9:5a:0c:28:9a:8c:07:65:21:63:16:69:35:
                    3c:cf:17:e9:4b:e4:e2:a3:90:20:6f:80:a0:d0:5f:
                    2a:6f:3a:d8:80:53:30:b8:74:b6:34:95:eb:36:b0:
                    75:dd:b4:1e:66:36:cc:33:03:1f:52:0c:54:25:01:
                    9a:d4:8e:16:fc:21:ae:40:0a:88:19:ab:3e:25:e0:
                    86:6c:7e:d7:10:47:f2:17:1f:c4:70:c1:24:c1:12:
                    c0:69:72:32:56:3c:87:31:d5:bc:97:27:30:f2:ed:
                    c2:88:2d:ab:4f:6a:08:5c:6c:59:72:9d:93:1e:ca:
                    e4:0c:4c:12:eb:fb:17:81:ab:e8:8d:f7:a9:52:04:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:B9:FE:E3:D2:02:70:02:E4:62:0D:17:0F:8D:F0:8B:5B:8F:AC
            X509v3 Authority Key Identifier:
                keyid:C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a383030303a3a2f33332d3333203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c20:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:71:1b:ab:9d:79:23:1c:59:eb:92:00:91:7f:64:0f:17:0f:
         92:17:1f:c0:3c:f7:59:08:87:d4:22:89:ab:12:58:2d:ae:29:
         05:82:39:17:de:79:e8:ad:5e:2f:f6:6d:29:91:3c:7d:80:90:
         a3:90:5d:22:5d:f8:04:e1:bd:af:6f:32:00:2c:9b:90:cc:65:
         e7:9a:8d:be:c5:14:58:45:96:1a:92:7d:87:9e:28:48:7e:b9:
         e2:9b:71:bc:30:c1:2e:0a:d8:23:bd:b2:96:cf:69:55:a6:2e:
         8d:87:91:00:d3:09:38:3e:12:6f:aa:31:d2:b5:17:b3:73:f3:
         56:a6:75:b8:6c:c4:b1:c6:b7:aa:91:d8:da:e3:54:4b:a2:93:
         ad:76:00:42:f5:a7:8c:2a:08:5b:ad:79:6d:97:17:0e:84:ea:
         a5:7d:b2:a4:6b:1e:20:06:3e:2d:09:18:83:6f:81:b1:e5:43:
         bb:69:6d:5c:af:2c:64:e4:3b:f3:90:ec:06:78:23:b8:96:42:
         a4:b3:f5:1f:51:d4:4c:4e:ea:5f:33:b5:01:f8:c2:c5:c0:41:
         4f:6c:27:31:73:fd:36:33:9d:da:83:9e:a7:de:dc:b7:70:76:
         1f:d4:74:5e:e3:31:bc:43:be:44:65:d1:8e:ef:c6:37:7b:2f:
         cb:fb:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org