Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33332d3333203d3e20323635313937.roa
File:                     323830343a326332303a3a2f33332d3333203d3e20323635313937.roa (raw, json)
Hash identifier:          lNEr7yL1f2S6VLqm3WHlAj7klLRq1Um6k+MSpR3iqBQ=
Subject key identifier:   F3:FF:5C:CB:F7:0D:3C:57:8B:18:4D:AB:3C:44:21:8C:E1:1A:5F:3D
Certificate issuer:       /CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
Certificate serial:       17BCAEBFA63347771C18649EC76DE25DE5562896
Authority key identifier: C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33332d3333203d3e20323635313937.roa
Signing time:             Thu 18 Apr 2024 19:57:38 +0000
ROA not before:           Thu 18 Apr 2024 19:52:38 +0000
ROA not after:            Thu 17 Apr 2025 19:57:38 +0000
asID:                     265197
IP address blocks:        2804:2c20::/33 maxlen: 33
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bc:ae:bf:a6:33:47:77:1c:18:64:9e:c7:6d:e2:5d:e5:56:28:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
        Validity
            Not Before: Apr 18 19:52:38 2024 GMT
            Not After : Apr 17 19:57:38 2025 GMT
        Subject: CN=F3FF5CCBF70D3C578B184DAB3C44218CE11A5F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:9d:4a:05:23:23:91:a2:36:d4:ee:79:76:
                    cd:f6:5c:e7:f8:c2:d3:2d:f4:0a:dd:64:e9:c2:27:
                    6a:45:b4:35:57:78:7a:02:f8:05:31:c4:d4:43:2a:
                    3a:a7:79:5a:85:e6:49:6d:b9:e9:9f:68:2a:1b:6a:
                    08:1c:cf:e1:a4:e0:83:4c:1e:f5:04:fc:7d:2e:bc:
                    b7:9c:bb:95:d4:24:15:91:98:eb:e7:b6:ca:bd:57:
                    c0:a8:7f:b7:b0:70:db:f2:0a:a9:57:16:48:5d:08:
                    6a:3c:82:14:c6:b6:99:32:5f:97:91:da:2d:50:cc:
                    ee:e2:3e:91:ea:00:06:12:62:93:79:1e:eb:e6:c9:
                    f4:33:71:e4:21:e2:e9:a3:9a:62:33:c5:84:1d:98:
                    f4:38:e7:ae:ea:d2:bc:00:e2:07:c7:29:af:b3:0e:
                    4e:df:37:75:8e:e9:6c:5a:6a:0e:ea:bb:d5:bb:41:
                    e6:e7:ca:6f:33:61:e6:da:71:17:16:2f:c1:29:f2:
                    3e:bf:76:b7:eb:f4:6e:20:cc:9c:34:e9:b7:b3:f1:
                    f8:1e:58:44:d5:34:70:30:91:4a:cb:c4:bf:7f:e3:
                    a7:c2:93:0a:73:7e:e3:d7:7a:78:14:d3:81:ef:c5:
                    fd:8c:4f:ca:53:be:2b:90:0b:e0:ad:8f:ea:74:6e:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:5C:CB:F7:0D:3C:57:8B:18:4D:AB:3C:44:21:8C:E1:1A:5F:3D
            X509v3 Authority Key Identifier:
                keyid:C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33332d3333203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c20::/33

    Signature Algorithm: sha256WithRSAEncryption
         c0:3b:b4:38:c9:d3:d2:7a:4d:84:6b:af:5f:ca:99:4a:54:25:
         37:03:8c:13:3c:7a:ed:c3:e7:0b:7f:46:a9:8e:3d:ad:4f:dc:
         b7:e5:50:02:97:93:44:96:75:02:a4:a9:ac:bd:e8:4d:95:f2:
         d6:5c:9c:22:68:bd:b3:f0:36:0f:b3:3e:52:68:2f:61:91:1f:
         83:e4:a6:5d:65:38:c0:35:90:90:11:2c:e0:2e:78:30:22:64:
         0a:06:ef:bd:59:92:ef:70:8f:7e:b8:2b:6a:67:f0:f0:57:09:
         ab:15:7a:9d:02:5b:65:c3:5b:54:0a:69:62:e5:40:5a:6d:13:
         b0:db:f7:06:91:e9:eb:8f:ea:a5:09:1d:4a:2a:2d:9c:64:41:
         e1:87:07:4d:d4:14:41:e2:31:eb:e5:e5:75:23:2b:69:00:12:
         49:0c:51:b0:a6:6c:fd:1a:e1:04:96:51:6c:a5:b5:08:9b:b0:
         3b:5f:b6:31:00:8e:93:d9:e2:3d:1f:79:49:2e:02:a9:50:ad:
         fb:05:55:a5:0e:e5:e8:73:b1:29:1d:20:e9:82:4c:9f:d5:0e:
         5b:5f:10:ac:c4:76:a4:ac:4c:d9:a4:8f:85:db:f0:47:6b:40:
         61:fd:4b:cf:ab:fc:31:6d:bf:7b:5d:e5:52:ba:15:c7:c0:42:
         9b:64:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:05 2025 by rpki-client