Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3433203d3e20323635313837.roa
File:                     323830343a326330303a34303a3a2f34322d3433203d3e20323635313837.roa (raw, json)
Hash identifier:          Y4vr4lcjSmZ48G9Qm+d3meRdFykJ3OliBxVDre9X/IM=
Subject key identifier:   F1:64:55:18:81:BF:74:4B:0B:D0:2A:63:89:19:E4:70:66:B1:6E:E4
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       66653167F45689D846F9A658635E369731BD0FEF
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3433203d3e20323635313837.roa
Signing time:             Thu 04 Jul 2024 17:14:42 +0000
ROA not before:           Thu 04 Jul 2024 17:09:42 +0000
ROA not after:            Thu 03 Jul 2025 17:14:42 +0000
asID:                     265187
IP address blocks:        2804:2c00:40::/42 maxlen: 43
Validation:               Failed, certificate revoked on Thu 23 Jan 2025 09:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:65:31:67:f4:56:89:d8:46:f9:a6:58:63:5e:36:97:31:bd:0f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jul  4 17:09:42 2024 GMT
            Not After : Jul  3 17:14:42 2025 GMT
        Subject: CN=F164551881BF744B0BD02A638919E47066B16EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:f3:12:24:98:f0:16:31:74:b8:a9:a1:0a:
                    01:6f:3e:ff:95:17:15:51:c7:5f:8a:67:83:3b:04:
                    71:b2:2a:d4:3c:0c:d7:d2:87:ab:15:49:7b:cd:3e:
                    18:74:da:ce:51:e3:47:dd:6e:3b:33:e4:36:20:dd:
                    5c:4c:7a:14:d5:cf:ff:1a:bf:ee:c5:ba:15:2f:33:
                    05:d5:91:5a:bd:95:2b:0c:4e:2e:1f:3e:e4:f1:4a:
                    33:4b:3e:c2:aa:2a:b3:d8:95:06:97:56:7a:d4:78:
                    6d:51:15:6c:2d:d5:cc:32:64:57:d7:5f:f9:c5:dd:
                    6d:b2:85:fd:6e:cc:42:8e:fd:6f:6e:c0:e5:b7:b1:
                    28:1f:cc:94:e4:20:20:9c:c8:6a:18:cf:74:3e:ac:
                    7b:ce:b0:52:68:d4:e4:c2:44:22:37:02:6a:82:4e:
                    bb:03:4d:5e:08:0e:73:44:eb:ca:1c:48:af:06:99:
                    dd:3d:4b:1d:4a:68:8f:de:4d:4c:f3:2b:fa:c0:3e:
                    6a:35:66:c9:7c:1b:cd:e6:8b:27:0f:c4:5b:19:db:
                    a9:17:4a:06:d4:c1:56:da:cb:77:a7:c6:16:2c:d3:
                    de:7d:4a:e0:03:0f:17:cf:ef:8d:4e:51:02:47:d0:
                    dc:58:d7:f0:03:68:57:a6:ab:d9:3e:df:0f:a5:5b:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:55:18:81:BF:74:4B:0B:D0:2A:63:89:19:E4:70:66:B1:6E:E4
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34322d3433203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:e7:4c:52:23:1f:17:21:d7:bf:da:2d:d4:17:12:67:e5:
         ec:34:29:35:f0:80:3d:38:0f:1a:dd:7e:2c:f9:83:91:bf:03:
         6c:7f:25:1d:85:4e:aa:72:e7:ff:ab:11:db:63:e6:b1:7f:d5:
         a9:96:63:ec:85:17:ab:c6:9b:c4:4a:0f:79:7f:6e:e7:4c:f7:
         10:44:84:f6:3a:16:67:bc:6f:09:49:05:9f:cd:6b:c8:4c:09:
         15:e0:fb:cf:81:f3:12:1c:f4:d6:d9:3e:8a:55:40:6a:37:d2:
         b7:ed:76:2f:55:e0:e1:6e:46:58:21:8f:48:30:ce:6a:6e:b1:
         04:2d:93:ec:96:d9:3a:6c:87:ee:ab:4a:85:46:c4:a8:d8:4a:
         21:8a:af:4b:dd:95:62:a9:d9:44:9d:5c:a4:c1:42:54:3d:b5:
         52:e9:05:5c:d5:67:97:0c:00:56:87:22:e8:1f:7e:2b:a4:8d:
         62:4a:dd:ea:5e:33:7a:57:35:e4:6b:f3:02:3d:83:2f:65:31:
         02:75:61:0e:1e:b6:24:a3:84:f9:a5:15:68:2d:71:e8:49:c1:
         1f:9e:01:18:b3:a3:42:38:5b:77:49:98:69:5e:43:62:92:39:
         cb:e3:8e:5e:0d:8d:cf:6f:0a:94:d1:72:3f:6b:6c:20:4c:92:
         55:78:5f:eb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUZmUxZ/RWidhG+aZYY142lzG9D+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ1NUQwQkU1MTM4QUU1NTJCNDg1NzI3MEVFRDJBN0NF
NUI1QzZGMjAeFw0yNDA3MDQxNzA5NDJaFw0yNTA3MDMxNzE0NDJaMDMxMTAvBgNV
BAMTKEYxNjQ1NTE4ODFCRjc0NEIwQkQwMkE2Mzg5MTlFNDcwNjZCMTZFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+fMSJJjwFjF0uKmhCgFvPv+V
FxVRx1+KZ4M7BHGyKtQ8DNfSh6sVSXvNPhh02s5R40fdbjsz5DYg3VxMehTVz/8a
v+7FuhUvMwXVkVq9lSsMTi4fPuTxSjNLPsKqKrPYlQaXVnrUeG1RFWwt1cwyZFfX
X/nF3W2yhf1uzEKO/W9uwOW3sSgfzJTkICCcyGoYz3Q+rHvOsFJo1OTCRCI3AmqC
TrsDTV4IDnNE68ocSK8Gmd09Sx1KaI/eTUzzK/rAPmo1Zsl8G83miycPxFsZ26kX
SgbUwVbay3enxhYs0959SuADDxfP741OUQJH0NxY1/ADaFemq9k+3w+lW1A3AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU8WRVGIG/dEsL0CpjiRnkcGaxbuQwHwYDVR0j
BBgwFoAU9FXQvlE4rlUrSFcnDu0qfOW1xvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDdGSFE3YlkzN1Z4VkpvM2RFVmpwUGFweHBiekhrTUxnUUtUem5HYlFh
eGIvMC9GNDU1RDBCRTUxMzhBRTU1MkI0ODU3MjcwRUVEMkE3Q0U1QjVDNkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NTVEMEJFNTEzOEFFNTUy
QjQ4NTcyNzBFRUQyQTdDRTVCNUM2RjIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q3RkhRN2JZMzdWeFZKbzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAv
MzIzODMwMzQzYTMyNjMzMDMwM2EzNDMwM2EzYTJmMzQzMjJkMzQzMzIwM2QzZTIw
MzIzNjM1MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKAQsAABAMA0GCSqGSIb3DQEBCwUAA4IB
AQBszudMUiMfFyHXv9ot1BcSZ+XsNCk18IA9OA8a3X4s+YORvwNsfyUdhU6qcuf/
qxHbY+axf9WplmPshRerxpvESg95f27nTPcQRIT2OhZnvG8JSQWfzWvITAkV4PvP
gfMSHPTW2T6KVUBqN9K37XYvVeDhbkZYIY9IMM5qbrEELZPsltk6bIfuq0qFRsSo
2Eohiq9L3ZViqdlEnVykwUJUPbVS6QVc1WeXDABWhyLoH34rpI1iSt3qXjN6VzXk
a/MCPYMvZTECdWEOHrYko4T5pRVoLXHoScEfngEYs6NCOFt3SZhpXkNikjnL445e
DY3PbwqU0XI/a2wgTJJVeF/r
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:05 2025 by rpki-client