Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323037383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323037383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          WXWcrIFeCEyUQUyYoUSf6TTOWL4ilmK7zCm8fcUd/Tc=
Subject key identifier:   5C:CE:86:1A:40:DF:6C:9C:40:46:1A:D4:BF:80:89:02:93:F1:A2:A3
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       7EE82E9C83AF973C24A3E24460994D96A621747C
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323037383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:24 +0000
ROA not before:           Thu 16 May 2024 11:33:24 +0000
ROA not after:            Thu 15 May 2025 11:38:24 +0000
asID:                     263338
IP address blocks:        2804:1494:2078::/45 maxlen: 45
Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e8:2e:9c:83:af:97:3c:24:a3:e2:44:60:99:4d:96:a6:21:74:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:24 2024 GMT
            Not After : May 15 11:38:24 2025 GMT
        Subject: CN=5CCE861A40DF6C9C40461AD4BF80890293F1A2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:78:ef:0d:12:aa:9c:da:43:ae:c1:58:3c:
                    55:3c:40:c7:47:83:a1:30:29:20:9c:19:96:98:c8:
                    a3:2b:65:2a:89:72:4c:91:3c:fd:40:c8:1a:8f:80:
                    c1:25:d9:a1:7b:78:30:8d:c4:69:a9:42:d9:bb:0e:
                    ea:fb:30:d3:07:2e:92:48:7f:78:dd:13:7b:dd:19:
                    08:3f:55:c1:42:19:4e:88:be:ee:03:81:7f:87:9b:
                    99:20:f1:8b:a0:55:63:31:1a:12:3e:98:e1:ea:18:
                    8b:13:bb:d3:03:3b:e4:29:47:93:dd:2e:8a:c2:92:
                    69:57:b1:bd:91:f9:bd:4a:b1:0c:02:f4:4c:9a:06:
                    93:c9:3a:81:75:1f:43:fb:b8:13:87:79:c9:fb:1f:
                    db:de:e5:d5:41:37:5b:3c:db:b7:0a:e2:d0:05:61:
                    23:f0:c7:4d:41:ba:30:01:74:9c:b6:2a:a4:c8:95:
                    a5:b7:ff:11:6e:3b:ec:1b:45:5c:e3:fa:82:7e:b7:
                    71:74:df:60:42:24:61:03:6f:c9:8d:60:00:76:14:
                    c7:6d:66:75:f6:92:07:51:51:c2:5c:bc:f5:ed:3d:
                    42:7e:7c:46:bd:c1:ff:ea:c1:70:7e:17:c4:51:43:
                    89:bd:95:e6:1b:5f:bf:f8:6f:3a:4c:02:31:b9:e5:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CE:86:1A:40:DF:6C:9C:40:46:1A:D4:BF:80:89:02:93:F1:A2:A3
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323037383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:2078::/45

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:04:5c:6f:57:3f:ce:4c:a0:b3:d0:e1:b1:6c:86:81:59:
         62:76:20:ca:f2:a2:f2:fb:80:4e:b9:48:eb:45:9b:f8:0e:94:
         24:91:c8:69:b1:aa:15:5d:27:ac:5f:6a:e3:d7:45:a0:e3:f7:
         86:ea:d2:53:6f:22:f8:8f:bb:5d:b2:f5:8f:92:7a:55:fb:69:
         7e:26:2f:49:46:ed:ea:29:fe:be:90:5d:aa:6d:25:9b:06:3f:
         92:bb:7a:a2:a9:ad:40:4e:77:63:88:c6:73:65:a1:c1:a0:9b:
         12:5c:8e:a2:3b:96:2e:e4:d9:b2:f6:b1:ee:79:2f:50:eb:3b:
         49:20:e2:49:aa:55:9d:b5:18:95:6b:8a:59:1e:a6:51:a7:60:
         28:a2:7a:fe:fe:28:37:aa:3d:d3:bb:0d:32:fc:38:ba:e5:24:
         2d:db:b1:5d:20:65:1d:68:25:9d:a3:73:d0:b4:11:ec:a2:ea:
         9f:87:4e:34:3c:40:da:e4:ec:eb:4a:8c:cc:e8:a1:34:3c:83:
         68:09:2d:82:34:88:8e:71:b1:d9:f8:ac:5d:c2:29:91:40:15:
         65:79:f2:e7:64:55:0c:ca:9c:6c:43:80:21:8d:f4:b0:d2:00:
         20:b6:cd:bb:3f:bd:46:ea:8e:c6:38:db:a4:a2:9a:d8:f5:f9:
         11:f2:43:9c
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUfugunIOvlzwko+JEYJlNlqYhdHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDA1MTYxMTMzMjRaFw0yNTA1MTUxMTM4MjRaMDMxMTAvBgNV
BAMTKDVDQ0U4NjFBNDBERjZDOUM0MDQ2MUFENEJGODA4OTAyOTNGMUEyQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93XjvDRKqnNpDrsFYPFU8QMdH
g6EwKSCcGZaYyKMrZSqJckyRPP1AyBqPgMEl2aF7eDCNxGmpQtm7Dur7MNMHLpJI
f3jdE3vdGQg/VcFCGU6Ivu4DgX+Hm5kg8YugVWMxGhI+mOHqGIsTu9MDO+QpR5Pd
LorCkmlXsb2R+b1KsQwC9EyaBpPJOoF1H0P7uBOHecn7H9ve5dVBN1s827cK4tAF
YSPwx01BujABdJy2KqTIlaW3/xFuO+wbRVzj+oJ+t3F032BCJGEDb8mNYAB2FMdt
ZnX2kgdRUcJcvPXtPUJ+fEa9wf/qwXB+F8RRQ4m9leYbX7/4bzpMAjG55c7vAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUXM6GGkDfbJxARhrUv4CJApPxoqMwHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzIzODMwMzQzYTMxMzQzOTM0M2EzMjMwMzczODNhM2EyZjM0MzUyZDM0MzUyMDNk
M2UyMDMyMzYzMzMzMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygEFJQgeDANBgkqhkiG9w0BAQsF
AAOCAQEANS4EXG9XP85MoLPQ4bFshoFZYnYgyvKi8vuATrlI60Wb+A6UJJHIabGq
FV0nrF9q49dFoOP3hurSU28i+I+7XbL1j5J6VftpfiYvSUbt6in+vpBdqm0lmwY/
krt6oqmtQE53Y4jGc2WhwaCbElyOojuWLuTZsvax7nkvUOs7SSDiSapVnbUYlWuK
WR6mUadgKKJ6/v4oN6o907sNMvw4uuUkLduxXSBlHWglnaNz0LQR7KLqn4dONDxA
2uTs60qMzOihNDyDaAktgjSIjnGx2fisXcIpkUAVZXny52RVDMqcbEOAIY30sNIA
ILbNuz+9RuqOxjjbpKKa2PX5EfJDnA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:08 2025 by rpki-client