Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33322d3332203d3e20323634343530.roa
File:                     323830343a316564633a3a2f33322d3332203d3e20323634343530.roa (raw, json)
Hash identifier:          wWbIAPNGFvyYhTJP2/8udgT7Xc0o8IQj43RhwNX2s+Q=
Subject key identifier:   E0:BD:07:19:68:D7:11:B5:08:46:53:D4:03:22:8A:58:BE:32:59:9D
Certificate issuer:       /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial:       7D56498C3C5D39383359794F92CF7CBD5B8375CC
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33322d3332203d3e20323634343530.roa
Signing time:             Fri 31 Jan 2025 18:08:53 +0000
ROA not before:           Fri 31 Jan 2025 18:03:53 +0000
ROA not after:            Fri 30 Jan 2026 18:08:53 +0000
asID:                     264450
IP address blocks:        2804:1edc::/32 maxlen: 32
Validation:               Failed, certificate revoked on Fri 07 Feb 2025 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:56:49:8c:3c:5d:39:38:33:59:79:4f:92:cf:7c:bd:5b:83:75:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
        Validity
            Not Before: Jan 31 18:03:53 2025 GMT
            Not After : Jan 30 18:08:53 2026 GMT
        Subject: CN=E0BD071968D711B5084653D403228A58BE32599D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:1c:73:c2:4f:7c:86:39:10:ab:1e:27:4a:
                    40:17:ea:a0:39:4a:4f:e5:ef:e1:dd:95:f6:62:1b:
                    87:42:ed:1c:e8:7f:06:88:27:a2:76:b6:6e:5e:27:
                    f7:c8:26:03:54:81:3d:4c:d6:25:2d:32:cc:70:f5:
                    fd:81:50:82:5a:2b:fe:f6:20:c0:3d:76:55:5f:dc:
                    61:71:f0:0d:b6:3e:a5:38:96:7e:3a:0c:4c:a1:d4:
                    67:16:af:a8:3d:47:5d:af:5c:d9:8c:20:75:0e:17:
                    16:52:9d:92:c2:f8:26:c5:d6:0b:99:fc:a2:25:02:
                    4b:d2:10:b1:8f:dd:fb:61:28:44:2a:cc:da:98:e1:
                    ae:3a:b3:f4:7a:b1:c1:2a:55:1a:da:c0:ce:f6:73:
                    df:ac:88:f1:c0:d1:86:5e:6b:3b:20:cd:c2:13:65:
                    24:f2:d5:68:16:62:23:cb:d5:73:cc:8c:4a:35:1c:
                    8f:ac:5d:3c:ee:fd:51:e1:67:d6:78:bb:7f:16:6b:
                    03:05:fd:19:dc:2d:f1:04:0e:94:76:01:ab:d2:cc:
                    5e:79:bb:48:c5:ad:f6:1a:5c:e4:d7:bb:02:57:07:
                    6d:6d:a5:3e:9e:dc:77:43:64:c8:93:f8:3d:5b:f9:
                    5a:94:da:06:eb:77:36:3e:01:ef:59:70:9d:28:8e:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BD:07:19:68:D7:11:B5:08:46:53:D4:03:22:8A:58:BE:32:59:9D
            X509v3 Authority Key Identifier:
                keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33322d3332203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:a9:ff:6b:06:68:d4:62:09:ac:12:d9:a2:18:04:61:48:b2:
         30:0f:30:d5:3f:45:56:10:92:eb:1c:83:1d:49:c1:86:87:5b:
         6b:d4:c2:24:a2:29:da:d4:9f:d6:7f:65:01:2f:82:fb:66:07:
         7b:a8:61:97:6e:78:9c:be:a8:bf:b2:4c:0b:64:be:16:b8:0e:
         88:d7:02:2c:48:7f:82:7b:69:82:d7:42:29:9c:27:74:f6:55:
         f4:25:31:33:19:e6:13:fc:b9:4b:8e:88:f1:db:68:38:76:7d:
         c1:6f:22:52:50:db:1b:06:e0:0e:84:df:4e:24:4a:16:5e:b7:
         b3:ea:83:91:cf:6d:89:68:03:69:4f:cc:c9:b6:7d:e2:67:ad:
         73:4e:7c:fd:22:e1:cc:e8:7d:16:cb:61:6b:cf:d2:8c:b5:65:
         53:90:4a:f6:95:49:c9:52:46:34:cc:bb:97:e1:de:a0:0f:b1:
         e7:b4:d9:06:3f:64:99:b8:2e:e3:a1:b1:f4:d8:9e:8e:f5:54:
         d5:c8:a9:a8:d3:1c:8d:f6:85:0f:1f:a7:88:f1:7a:ac:b5:b8:
         08:2b:69:ac:fc:40:f7:8d:6e:9d:fd:96:03:75:1c:58:ab:df:
         d6:20:ef:88:71:30:81:1d:03:46:3e:45:8d:e5:6f:b9:25:2c:
         6f:14:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:58:27 2025 by rpki-client