Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a633030303a3a2f33342d3334203d3e20323634343530.roa
File:                     323830343a316564633a633030303a3a2f33342d3334203d3e20323634343530.roa (raw, json)
Hash identifier:          R2pTEogSkrS5ZXemu0bKADyg4CkLMevXSmcz4NmhF/I=
Subject key identifier:   69:03:73:5C:F8:95:87:BD:34:97:96:FA:F7:F7:B4:61:9C:BA:81:61
Certificate issuer:       /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial:       76B37827385F1295189F8D010FA89C89A9E080C0
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a633030303a3a2f33342d3334203d3e20323634343530.roa
Signing time:             Fri 31 Jan 2025 18:08:54 +0000
ROA not before:           Fri 31 Jan 2025 18:03:54 +0000
ROA not after:            Fri 30 Jan 2026 18:08:54 +0000
asID:                     264450
IP address blocks:        2804:1edc:c000::/34 maxlen: 34
Validation:               Failed, certificate revoked on Fri 07 Feb 2025 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b3:78:27:38:5f:12:95:18:9f:8d:01:0f:a8:9c:89:a9:e0:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
        Validity
            Not Before: Jan 31 18:03:54 2025 GMT
            Not After : Jan 30 18:08:54 2026 GMT
        Subject: CN=6903735CF89587BD349796FAF7F7B4619CBA8161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a4:b3:8c:40:fb:f8:12:df:f4:f8:f6:19:5d:
                    c9:5d:af:bb:d8:fe:80:5c:be:53:14:ce:d6:4e:af:
                    81:b0:78:f1:0d:3b:2b:45:fe:c5:25:11:8d:ee:f0:
                    4c:cc:06:39:36:d9:f0:a8:29:eb:3f:68:8d:72:6b:
                    88:0b:79:9b:4d:84:db:4a:60:45:f6:d8:bd:87:87:
                    3e:26:79:49:e4:da:d3:54:f5:90:ec:65:4b:b7:05:
                    5e:1c:54:24:76:6c:b4:1d:2f:83:a8:35:45:c5:0a:
                    b3:4e:88:49:56:5c:65:bd:b7:a5:01:92:ba:db:49:
                    c5:b6:7f:ba:fb:00:fe:94:57:8e:94:59:b0:5c:65:
                    dc:3c:18:cc:a6:3c:b9:40:fa:5d:eb:be:e1:d3:8d:
                    9f:5f:84:7c:ab:87:08:7f:72:a5:80:7a:03:a8:51:
                    32:b8:d3:25:89:fb:3e:e0:54:ba:75:63:59:cb:93:
                    3e:69:78:38:dc:cb:2e:f5:08:db:2d:70:1a:ae:11:
                    2a:87:7c:08:34:24:8c:45:85:28:e0:aa:d5:d0:25:
                    fe:41:42:e9:b6:f9:8e:92:9d:f1:2c:a4:d6:4b:ca:
                    20:eb:16:58:69:1f:33:0e:8e:f5:3e:0b:a4:aa:66:
                    04:70:e2:a2:f7:93:fc:31:68:71:2c:f2:8b:f8:07:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:03:73:5C:F8:95:87:BD:34:97:96:FA:F7:F7:B4:61:9C:BA:81:61
            X509v3 Authority Key Identifier:
                keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a633030303a3a2f33342d3334203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:a4:70:f5:be:0f:0c:6e:2e:33:ff:ad:e9:ae:29:19:fb:88:
         4a:7f:60:20:20:93:ff:d3:15:37:49:46:eb:06:33:7b:1d:ad:
         bc:bf:d2:7e:6c:dd:5d:5c:59:ae:00:e7:b5:f5:87:a1:4a:14:
         a7:c2:ae:a2:bf:a1:ec:88:4d:a7:bf:cd:73:31:fd:0b:66:1a:
         ea:d9:bc:45:dc:3c:18:e2:86:29:91:93:61:fb:8b:90:4b:12:
         d2:9c:9f:0a:ea:f0:e0:91:a8:c0:c6:cd:9d:a1:92:27:7b:5e:
         56:ca:5b:e9:b9:80:1a:7c:45:dd:7e:92:b2:bc:1e:64:ba:b0:
         e0:9a:b3:1c:e6:49:5c:33:e8:34:98:bf:7e:1a:8f:77:51:a1:
         8c:ac:30:9f:eb:b5:5f:01:e1:7f:b0:7c:c5:c1:4e:b4:3f:5c:
         d7:74:f3:cf:e3:fb:3a:d2:c4:35:07:38:e5:a1:23:68:c6:7e:
         67:d9:e6:d4:19:b4:ea:fa:67:b7:43:7e:c6:b9:0a:71:db:a7:
         25:fc:00:ea:e9:f6:04:ac:f0:c9:5b:15:e1:3d:cf:16:90:f3:
         82:7b:59:34:89:b7:5e:b4:b9:93:ae:e0:67:aa:e6:61:77:be:
         9e:c1:53:bd:f3:5a:de:f1:de:af:53:6b:24:4f:90:a6:4c:93:
         ce:66:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:54 2025 by rpki-client