Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          Rcp21IbLGmzhLeTAoBdj0cvOnfIfa8Nf49UIX0iD5cE=
Subject key identifier:   70:06:AD:DB:7D:92:AC:92:A0:2E:87:2E:98:20:92:99:69:4E:C3:6B
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       0374BAD6654F6B451759937F18FB3D53EACB00B8
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Tue 14 May 2024 17:10:24 +0000
ROA not before:           Tue 14 May 2024 17:05:24 +0000
ROA not after:            Tue 13 May 2025 17:10:24 +0000
asID:                     265187
IP address blocks:        2804:2c00:3c0::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 04 Jul 2024 17:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:74:ba:d6:65:4f:6b:45:17:59:93:7f:18:fb:3d:53:ea:cb:00:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: May 14 17:05:24 2024 GMT
            Not After : May 13 17:10:24 2025 GMT
        Subject: CN=7006ADDB7D92AC92A02E872E98209299694EC36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:52:25:50:b8:f1:76:a9:2d:17:8f:05:29:
                    b8:7f:40:1d:60:6e:cc:90:75:7a:3e:02:07:39:d0:
                    6f:eb:b2:af:18:27:80:59:01:29:70:ae:f1:80:84:
                    45:47:5f:12:8d:b8:7d:44:ea:fd:9f:aa:77:e8:b0:
                    e9:2b:91:14:2a:ef:97:6b:3e:89:f2:75:fa:e0:2b:
                    6c:8e:0d:fe:b7:52:81:c6:c9:49:38:62:12:64:0c:
                    b0:23:c6:93:87:97:78:34:85:26:ad:ec:8f:99:74:
                    9a:bc:a2:81:bd:b5:b9:a2:c2:06:16:74:a9:91:ad:
                    6e:9e:ab:68:f7:81:7d:af:d6:ae:71:7e:4c:f5:71:
                    1d:61:29:48:43:10:d9:dd:4a:5c:f1:ad:07:7c:4c:
                    b5:0c:27:f5:d1:87:8a:9f:75:5b:fd:50:2d:b3:01:
                    89:a7:fc:66:1d:2d:54:0f:3b:11:27:e2:9b:a9:48:
                    63:d2:f7:cf:ca:67:12:f1:0a:a9:2c:f6:b5:a3:89:
                    b4:83:38:38:d5:e3:29:20:c8:1d:d5:91:a9:d6:8d:
                    50:81:be:39:5d:9b:02:1b:a8:d5:e5:b8:a7:74:14:
                    74:d1:2c:57:23:8d:36:a0:db:87:83:73:ca:1d:10:
                    33:0f:67:23:a8:67:65:1f:0d:d1:24:70:c8:0f:f0:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:06:AD:DB:7D:92:AC:92:A0:2E:87:2E:98:20:92:99:69:4E:C3:6B
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:3c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         99:ba:8e:cf:42:85:d4:9c:18:3d:dd:da:9a:a9:fb:75:32:a1:
         f5:04:76:78:50:9e:47:0e:c0:3d:a2:14:c8:9a:aa:23:ca:74:
         9a:38:e0:ea:45:fd:57:e1:db:ae:b2:2a:7a:b5:b2:8f:24:be:
         66:36:2d:3d:a3:69:1c:d9:9d:d6:80:07:de:68:3b:e1:fc:35:
         ce:b1:45:d2:a0:f9:c4:06:d2:b8:7a:1a:10:96:f2:fe:92:76:
         4f:09:06:64:ba:b2:02:87:d6:03:21:1b:25:6f:94:16:d4:35:
         02:0b:e7:3d:8b:04:54:a8:61:b3:ab:69:31:0e:0e:29:44:b9:
         1b:39:2f:0c:41:af:b9:98:68:73:6e:25:da:80:5f:85:5d:95:
         59:1a:d9:a7:f6:bf:56:a6:b8:9b:ba:72:0f:67:14:b5:54:15:
         b3:72:6d:eb:6d:55:59:25:b9:98:d1:b8:6d:e5:56:b4:d6:89:
         da:cb:eb:cd:7e:84:4a:95:d8:bd:ad:f8:7b:70:93:27:b7:5f:
         32:9e:d0:72:b7:e0:1a:c5:58:23:69:44:57:03:77:eb:15:82:
         40:1e:99:e9:f2:bf:7c:1e:f8:8e:b7:a0:75:6b:5a:38:81:39:
         e1:13:b3:b5:1d:89:a0:4e:b5:47:ea:ec:c5:e7:a1:52:de:80:
         c2:98:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:48 2025 by rpki-client