Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3134303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3134303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          Sd0hX54/omp7sRq52t5CbsnGsQK+B0OfBt5Gy+ozjJM=
Subject key identifier:   B2:62:35:16:72:4F:49:29:F9:41:EE:F3:55:4E:DA:6F:93:C2:FA:DF
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       13A3484A2474C714186DA75F353AF6723E09BF56
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3134303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Tue 14 May 2024 17:10:12 +0000
ROA not before:           Tue 14 May 2024 17:05:12 +0000
ROA not after:            Tue 13 May 2025 17:10:12 +0000
asID:                     265187
IP address blocks:        2804:2c00:140::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 04 Jul 2024 16:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a3:48:4a:24:74:c7:14:18:6d:a7:5f:35:3a:f6:72:3e:09:bf:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: May 14 17:05:12 2024 GMT
            Not After : May 13 17:10:12 2025 GMT
        Subject: CN=B2623516724F4929F941EEF3554EDA6F93C2FADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:3c:35:a6:9c:cd:3e:a1:64:03:19:a4:45:
                    7f:b6:7e:9f:37:a6:61:44:6e:5f:85:6f:e3:7e:46:
                    5c:f0:46:a1:63:8c:c2:63:3b:e5:59:e2:48:0c:74:
                    d0:0f:d2:54:2c:5b:d5:9c:cc:42:c1:39:31:2a:56:
                    64:d6:50:98:eb:6e:ac:31:13:1e:c9:de:16:38:40:
                    a6:2b:78:38:5d:9f:7c:ad:e9:96:ac:2b:8f:cc:7b:
                    ec:bc:6a:51:a9:bb:43:59:6c:e3:dd:c1:7c:db:f7:
                    ff:86:aa:53:f9:d2:b7:ed:d2:2c:31:e7:c0:e9:9c:
                    bb:ed:3f:75:01:cf:33:76:5f:97:d7:9a:58:4b:d2:
                    62:e4:9e:d5:b4:2c:ac:da:63:05:85:35:d7:78:b1:
                    18:e2:99:27:ab:6b:3b:3e:af:56:d4:9d:48:68:6c:
                    a3:dc:d9:0b:b0:59:0d:28:0f:26:25:c9:bb:ba:6d:
                    24:f7:0e:be:75:ca:41:1d:42:1b:cd:bb:3e:d2:c6:
                    07:19:ff:63:85:42:10:45:60:f0:10:69:5b:34:1e:
                    56:30:26:01:2f:92:ba:86:32:97:07:d4:48:d6:10:
                    37:0b:5b:9f:87:6d:96:dc:b1:f7:1e:d2:c6:79:16:
                    98:6a:54:90:c8:98:01:8e:fa:d2:bd:32:b8:b7:50:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:62:35:16:72:4F:49:29:F9:41:EE:F3:55:4E:DA:6F:93:C2:FA:DF
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3134303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:140::/42

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:c4:fa:cf:6f:12:4c:48:06:5d:84:62:f3:cf:e6:ff:37:
         67:12:9b:d4:5e:fa:11:5f:76:1a:38:f2:07:b6:33:62:51:98:
         9e:77:9f:14:c4:df:7d:5f:2b:1c:83:2b:65:25:c9:ad:bb:66:
         8b:39:89:ac:65:99:f3:cc:9b:48:05:91:ef:f0:74:29:1b:59:
         21:fc:51:df:e4:57:9d:c4:c8:72:30:f0:06:33:b2:ad:9d:d7:
         bc:34:7d:6b:c9:5a:06:50:ff:43:23:75:46:40:5c:28:de:a8:
         d0:22:63:15:74:57:a8:d3:84:df:9d:e0:c4:e7:d8:c4:14:19:
         d4:1a:c9:35:95:89:08:6f:36:8b:73:7a:0e:57:1e:5e:b2:c0:
         5c:61:0a:9f:11:ca:5c:aa:65:3f:4f:eb:92:94:11:80:9d:82:
         4f:5e:b8:69:39:02:27:b8:98:07:f3:13:3e:8b:74:03:c8:f2:
         25:3b:37:b3:60:ea:d8:4e:7f:a5:66:20:7d:77:15:93:c7:df:
         31:b2:83:ee:a4:36:67:e6:fe:bd:ee:e7:89:46:ee:ab:cd:cc:
         9e:9a:23:f2:24:bd:55:cd:1b:bb:0a:d6:97:50:ab:2c:95:7b:
         bb:a2:9d:37:e4:d4:46:46:fc:46:5c:73:1d:5a:55:4e:8e:50:
         1a:5e:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:20:27 2025 by rpki-client