Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323732373632.roa
File:                     323830343a3635383a383030303a3a2f33352d3335203d3e20323732373632.roa (raw, json)
Hash identifier:          EUmUXSY8lTStAOt5PpAJp1anvi2nhJ2RYR9UWNsDpqw=
Subject key identifier:   EA:87:9B:8E:DB:08:50:8A:54:0B:34:82:CC:56:92:31:40:7B:76:93
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       57A28E81F88716765B4C495D64F372C781074963
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323732373632.roa
Signing time:             Fri 28 Jun 2024 17:35:39 +0000
ROA not before:           Fri 28 Jun 2024 17:30:39 +0000
ROA not after:            Fri 27 Jun 2025 17:35:39 +0000
asID:                     272762
IP address blocks:        2804:658:8000::/35 maxlen: 35
Validation:               Failed, certificate revoked on Mon 29 Jul 2024 14:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a2:8e:81:f8:87:16:76:5b:4c:49:5d:64:f3:72:c7:81:07:49:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: Jun 28 17:30:39 2024 GMT
            Not After : Jun 27 17:35:39 2025 GMT
        Subject: CN=EA879B8EDB08508A540B3482CC569231407B7693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:49:cc:19:53:8f:87:09:17:c7:3a:96:97:
                    50:84:77:a3:22:de:b2:04:a5:63:79:fa:99:8e:dd:
                    62:4f:79:52:11:aa:bf:3f:b2:0e:3a:08:d9:43:2d:
                    96:18:69:96:12:22:71:a3:3c:d9:d5:86:6c:91:28:
                    fa:af:ad:e9:81:2e:27:79:73:34:4e:b2:9f:67:6f:
                    e9:3c:1d:cd:5c:2a:39:0d:48:29:c2:69:fe:1b:5c:
                    4a:db:0e:dc:c3:51:7c:52:8e:be:ee:a3:01:f2:34:
                    06:37:a7:dd:a3:a7:5f:ed:24:f5:61:44:0a:05:84:
                    48:3a:89:41:3b:41:5d:0b:d5:13:cc:c4:f5:80:52:
                    81:ff:ee:58:be:65:ff:5a:a7:31:08:1f:14:ae:71:
                    da:52:d6:da:15:3f:9d:62:1a:bb:33:22:e2:3a:0d:
                    f2:75:1e:d1:23:ed:67:31:1c:06:69:97:55:64:50:
                    86:c4:ae:9d:2a:8e:c2:95:7f:9c:d3:24:79:53:e7:
                    48:dc:d5:91:65:bc:1e:ae:da:ca:6b:47:01:aa:73:
                    cb:42:02:51:91:ba:d8:a9:b1:ed:9a:f9:0c:28:f3:
                    33:5f:ca:aa:58:82:bd:f3:35:73:a4:b7:c6:99:2b:
                    ff:57:e1:f6:7d:db:f4:44:cc:68:57:35:50:2c:9c:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:87:9B:8E:DB:08:50:8A:54:0B:34:82:CC:56:92:31:40:7B:76:93
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323732373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:f0:89:5f:ca:2d:4b:57:11:24:2b:ce:3d:7c:d9:68:10:
         04:0b:0a:aa:f4:a5:86:ad:50:30:38:f6:dc:a9:d4:ca:0a:7f:
         cc:1f:2b:da:3f:53:eb:db:9b:9b:bc:07:a6:b0:8e:a7:a0:49:
         62:59:23:01:5f:6e:82:c8:8c:62:5c:49:b8:c4:e9:67:b0:d9:
         15:ff:19:35:b0:6f:2b:97:61:cf:79:b5:29:f9:ae:7a:99:fd:
         5e:f9:61:67:82:d2:81:fd:7b:91:d9:6a:ec:46:77:45:ae:54:
         bc:e8:76:ea:dd:e2:dd:88:93:d9:fa:12:11:5d:80:1a:c6:df:
         ce:18:0d:68:e7:89:21:fb:72:ec:a1:4f:3f:0d:08:9c:2b:2f:
         19:7e:53:f1:ce:88:0f:f6:44:51:e1:05:b2:48:2e:f2:0d:5e:
         de:03:40:6d:c7:02:e8:d6:6f:c6:e0:8b:62:4f:d1:48:45:3a:
         a8:09:d4:5d:c1:6a:13:dc:51:56:b2:33:1f:76:ca:a6:7e:2c:
         9c:de:bd:88:f9:49:69:d1:94:f7:5b:d9:f0:1f:2a:f1:cd:2c:
         61:bb:0f:a8:9e:29:27:62:5f:91:3e:94:09:e5:82:61:82:ca:
         db:1c:e0:3a:36:92:ba:92:81:23:64:b2:04:84:f5:40:21:89:
         e8:b4:fa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:44 2025 by rpki-client