Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3433203d3e20323635313837.roa
File:                     323830343a326330303a3330303a3a2f34322d3433203d3e20323635313837.roa (raw, json)
Hash identifier:          cHjIc7n73RAkc5UkRVVeL3sJ6FZpZrCxmJ1BcWk9Q0g=
Subject key identifier:   B5:D4:F1:76:E1:33:AA:72:AD:82:17:1A:96:3A:E9:96:30:34:A7:6E
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       759F0BCF5F8ADD1A029C80EEF426AC79DB700342
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3433203d3e20323635313837.roa
Signing time:             Fri 05 Jul 2024 13:14:48 +0000
ROA not before:           Fri 05 Jul 2024 13:09:48 +0000
ROA not after:            Fri 04 Jul 2025 13:14:48 +0000
asID:                     265187
IP address blocks:        2804:2c00:300::/42 maxlen: 43
Validation:               Failed, certificate revoked on Thu 23 Jan 2025 09:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9f:0b:cf:5f:8a:dd:1a:02:9c:80:ee:f4:26:ac:79:db:70:03:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jul  5 13:09:48 2024 GMT
            Not After : Jul  4 13:14:48 2025 GMT
        Subject: CN=B5D4F176E133AA72AD82171A963AE9963034A76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:48:ea:a4:7f:3d:98:ee:e2:85:09:94:9d:
                    22:5d:15:67:a4:2e:f8:bd:44:5d:e8:c0:76:be:3c:
                    5b:d5:00:75:fb:29:ac:3e:65:69:2d:93:20:02:5b:
                    f6:cc:52:bb:bf:d0:74:0e:55:90:3b:96:e9:c0:35:
                    4f:69:5e:f0:bc:a0:ae:fe:1e:1d:08:53:12:6d:b0:
                    6f:44:85:b6:63:63:51:31:13:ad:79:4f:50:a8:c5:
                    ab:21:30:f8:95:7a:fe:e8:49:76:73:73:bd:e1:7b:
                    74:e9:78:29:b0:26:f0:f5:40:6d:47:93:ed:28:17:
                    79:e7:13:79:72:18:73:93:64:04:67:33:5e:fd:8f:
                    3b:55:0c:c1:91:67:70:c4:8f:e0:4c:23:06:fc:97:
                    c5:26:da:1e:92:11:f5:9b:98:fd:56:69:17:60:01:
                    6b:48:18:9a:39:a4:bf:40:30:79:5a:21:a1:07:80:
                    3d:6e:81:fd:66:6d:17:da:dd:44:8d:97:6d:48:f9:
                    6a:54:47:fa:08:44:0f:6d:71:cf:7a:37:c4:41:cd:
                    ce:34:7e:6c:9f:85:54:e2:39:27:07:63:43:46:13:
                    8b:05:85:f7:26:79:7b:f4:1e:52:9d:7d:b8:bc:40:
                    ca:52:7f:92:06:8c:d3:7b:2a:8d:f9:80:ba:c0:f5:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D4:F1:76:E1:33:AA:72:AD:82:17:1A:96:3A:E9:96:30:34:A7:6E
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3330303a3a2f34322d3433203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:300::/42

    Signature Algorithm: sha256WithRSAEncryption
         8f:38:21:9e:b7:bb:26:77:a7:21:67:4c:99:a8:03:4f:2a:a6:
         a2:19:06:32:68:50:87:b8:73:a2:64:4b:62:80:e8:b6:de:89:
         ff:be:c6:82:6d:57:67:59:64:fa:2e:f5:e9:f6:b8:66:a3:f7:
         9a:8f:67:1b:14:f3:ec:cb:59:65:a3:c6:19:6e:bb:15:50:e3:
         d8:27:23:8d:b7:5b:22:db:3c:29:28:2b:d3:14:1f:4a:bf:f1:
         7e:b3:7d:a4:d7:23:78:b9:1d:f6:07:71:68:22:72:4e:57:4c:
         88:a8:00:fe:9c:18:60:da:76:d4:27:9e:f1:4b:0e:19:3d:9e:
         b9:52:64:09:21:a6:44:8d:ff:5b:d2:a0:4c:b1:c0:36:f0:9b:
         19:2b:6d:04:81:a3:ce:5c:6f:32:7f:fa:0c:6f:fa:ee:20:9b:
         e5:a9:1a:54:ee:5b:76:74:9c:54:a3:81:f2:0c:3f:78:9a:0a:
         72:ac:75:5e:5b:5a:18:73:03:87:28:ef:9b:72:6f:67:df:c4:
         44:41:75:50:41:ab:00:7f:93:d2:f7:77:de:d0:6a:2e:36:30:
         89:e4:7e:cf:c8:df:21:87:cb:cd:3c:2d:5f:1f:c8:60:6d:9d:
         49:0d:1c:46:f9:b4:21:d1:43:b8:c3:ef:84:f4:ff:f7:54:17:
         95:ce:4b:ac
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUdZ8Lz1+K3RoCnIDu9CasedtwA0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ1NUQwQkU1MTM4QUU1NTJCNDg1NzI3MEVFRDJBN0NF
NUI1QzZGMjAeFw0yNDA3MDUxMzA5NDhaFw0yNTA3MDQxMzE0NDhaMDMxMTAvBgNV
BAMTKEI1RDRGMTc2RTEzM0FBNzJBRDgyMTcxQTk2M0FFOTk2MzAzNEE3NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+EjqpH89mO7ihQmUnSJdFWek
Lvi9RF3owHa+PFvVAHX7Kaw+ZWktkyACW/bMUru/0HQOVZA7lunANU9pXvC8oK7+
Hh0IUxJtsG9EhbZjY1ExE615T1CoxashMPiVev7oSXZzc73he3TpeCmwJvD1QG1H
k+0oF3nnE3lyGHOTZARnM179jztVDMGRZ3DEj+BMIwb8l8Um2h6SEfWbmP1WaRdg
AWtIGJo5pL9AMHlaIaEHgD1ugf1mbRfa3USNl21I+WpUR/oIRA9tcc96N8RBzc40
fmyfhVTiOScHY0NGE4sFhfcmeXv0HlKdfbi8QMpSf5IGjNN7Ko35gLrA9VvvAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUtdTxduEzqnKtghcaljrpljA0p24wHwYDVR0j
BBgwFoAU9FXQvlE4rlUrSFcnDu0qfOW1xvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDdGSFE3YlkzN1Z4VkpvM2RFVmpwUGFweHBiekhrTUxnUUtUem5HYlFh
eGIvMC9GNDU1RDBCRTUxMzhBRTU1MkI0ODU3MjcwRUVEMkE3Q0U1QjVDNkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NTVEMEJFNTEzOEFFNTUy
QjQ4NTcyNzBFRUQyQTdDRTVCNUM2RjIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q3RkhRN2JZMzdWeFZKbzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAv
MzIzODMwMzQzYTMyNjMzMDMwM2EzMzMwMzAzYTNhMmYzNDMyMmQzNDMzMjAzZDNl
MjAzMjM2MzUzMTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBCwAAwAwDQYJKoZIhvcNAQELBQAD
ggEBAI84IZ63uyZ3pyFnTJmoA08qpqIZBjJoUIe4c6JkS2KA6Lbeif++xoJtV2dZ
ZPou9en2uGaj95qPZxsU8+zLWWWjxhluuxVQ49gnI423WyLbPCkoK9MUH0q/8X6z
faTXI3i5HfYHcWgick5XTIioAP6cGGDadtQnnvFLDhk9nrlSZAkhpkSN/1vSoEyx
wDbwmxkrbQSBo85cbzJ/+gxv+u4gm+WpGlTuW3Z0nFSjgfIMP3iaCnKsdV5bWhhz
A4co75tyb2ffxERBdVBBqwB/k9L3d97Qai42MInkfs/I3yGHy808LV8fyGBtnUkN
HEb5tCHRQ7jD74T0//dUF5XOS6w=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:52 2025 by rpki-client