Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3430303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3430303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          JFO3UNxvVJX6x2O2DMHCXPrlzctG3CUD2nRge6sZUSc=
Subject key identifier:   FB:C9:4B:9A:19:43:51:37:29:31:AA:3A:FD:FA:DE:12:F9:31:1C:25
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       5BD6984A683DEBE5F510A2F0F2664BC6F0D99A24
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3430303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Tue 11 Jun 2024 01:17:27 +0000
ROA not before:           Tue 11 Jun 2024 01:12:27 +0000
ROA not after:            Tue 10 Jun 2025 01:17:27 +0000
asID:                     265187
IP address blocks:        2804:2c00:400::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 04 Jul 2024 16:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d6:98:4a:68:3d:eb:e5:f5:10:a2:f0:f2:66:4b:c6:f0:d9:9a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jun 11 01:12:27 2024 GMT
            Not After : Jun 10 01:17:27 2025 GMT
        Subject: CN=FBC94B9A194351372931AA3AFDFADE12F9311C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:de:a3:a9:5d:fb:de:b0:f7:96:d3:c9:f6:
                    39:75:95:46:c3:33:d6:a9:78:f6:e7:71:25:58:b0:
                    ec:62:ea:cf:d6:63:f6:04:49:50:1f:23:f4:b5:5e:
                    89:8e:2d:fe:d1:83:44:92:4d:1e:c0:8e:67:a9:db:
                    07:b5:8b:d0:2e:b9:92:1c:98:88:89:0a:9f:ad:63:
                    b2:bc:43:dd:e8:7c:12:56:b4:e9:a9:b8:2d:2c:ff:
                    13:ba:03:3b:84:52:1b:3c:c7:93:07:9f:62:b4:10:
                    48:e8:07:61:72:36:83:2e:76:f7:3e:cb:d9:fe:9b:
                    8c:6a:3b:40:82:38:7e:7f:34:ff:b3:81:16:50:10:
                    c0:af:89:e8:cf:ff:78:2c:30:0b:1a:b2:61:2d:ff:
                    77:c7:79:49:f2:aa:ba:38:be:73:9e:e6:65:a9:2d:
                    0b:12:39:74:be:55:6a:63:6b:2c:80:e1:4f:2f:0b:
                    8f:47:48:0c:b8:09:a0:c7:67:55:62:be:6f:13:cb:
                    26:9e:4f:4e:2e:ce:9b:8b:35:d9:14:33:a7:25:c7:
                    be:bb:73:e1:ae:07:e9:a1:e7:dd:e0:36:ee:90:e4:
                    d5:77:66:46:ed:c4:67:a3:53:de:7a:ec:8d:8e:bb:
                    1b:7d:f4:d9:51:16:85:8d:5d:46:e3:d8:11:a8:d2:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C9:4B:9A:19:43:51:37:29:31:AA:3A:FD:FA:DE:12:F9:31:1C:25
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3430303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:400::/42

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:80:a9:17:5f:0b:8a:48:0f:26:9a:32:11:7b:d1:c0:b0:
         e3:4d:ed:eb:05:d7:e6:46:90:27:15:ab:cd:d3:cb:61:38:b7:
         b1:47:7d:e5:9a:b1:2b:04:23:33:ba:4b:09:82:f3:d8:f4:c7:
         e8:de:9c:ec:9e:ec:47:f7:c3:92:59:b3:24:68:f5:ca:fd:23:
         7e:bb:b2:c6:10:a9:1a:5c:d9:98:dc:28:be:e5:ba:82:bc:37:
         17:80:d9:8f:bc:c6:0a:20:c7:7b:32:35:c4:9d:4e:80:d9:5b:
         45:2d:de:20:aa:20:0f:82:97:0d:98:88:3e:75:05:19:37:fa:
         55:72:b5:9f:88:ea:3e:d3:43:35:b0:20:14:14:cb:7c:51:c3:
         71:d0:33:e3:2f:0f:db:63:da:e2:08:74:71:c1:0e:86:6f:c0:
         d3:9d:bb:cf:d6:fa:58:67:e8:d7:e6:63:e0:df:02:75:9f:13:
         92:9f:c1:94:96:f3:d0:16:d6:01:a3:37:4d:5d:6b:03:da:cc:
         b3:b7:6a:63:c0:a4:24:fd:b5:20:2e:92:d7:e2:bd:24:86:92:
         82:08:a3:a7:c1:26:c8:96:9b:ce:35:1b:39:9f:ab:4d:9c:58:
         f9:5a:06:f6:f4:02:7b:3d:d9:9e:1a:cc:df:da:42:11:31:a7:
         24:3b:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:13 2025 by rpki-client