Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3430303a3a2f33382d3338203d3e20323731363332.roa
File:                     323830343a376539303a3430303a3a2f33382d3338203d3e20323731363332.roa (raw, json)
Hash identifier:          ZxoTNYbApINJqAAGxK0YNjCGGEGhI5zOVNxwDwZ78S0=
Subject key identifier:   CD:07:A7:0D:4B:43:AF:37:36:3B:13:C8:06:C7:4B:AC:0F:9B:C7:CA
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       06AF71FBEADBE61EA288B03C4ECE71C9CE5A00FE
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3430303a3a2f33382d3338203d3e20323731363332.roa
Signing time:             Thu 06 Mar 2025 17:57:48 +0000
ROA not before:           Thu 06 Mar 2025 17:52:48 +0000
ROA not after:            Thu 05 Mar 2026 17:57:48 +0000
asID:                     271632
IP address blocks:        2804:7e90:400::/38 maxlen: 38
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 19:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:af:71:fb:ea:db:e6:1e:a2:88:b0:3c:4e:ce:71:c9:ce:5a:00:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Mar  6 17:52:48 2025 GMT
            Not After : Mar  5 17:57:48 2026 GMT
        Subject: CN=CD07A70D4B43AF37363B13C806C74BAC0F9BC7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:21:15:d4:9b:e2:12:9e:c9:2e:55:7b:81:
                    80:76:70:30:16:00:1c:7d:c6:e4:b6:d2:e7:8a:19:
                    f4:f7:ee:ce:b6:82:4d:bd:33:50:8d:6e:cc:53:7f:
                    63:0b:4b:18:1e:7b:dc:1e:37:54:87:ce:63:81:df:
                    9b:1c:57:6c:5d:c8:21:60:70:40:a1:c0:bf:7b:3f:
                    5f:cf:d7:5e:98:34:7a:52:20:16:d8:77:6c:ed:34:
                    a1:46:35:5d:82:70:e8:cf:41:34:77:03:2f:4d:ab:
                    7f:64:44:51:e4:5e:96:d8:3f:01:ec:d1:64:a5:1d:
                    dc:5d:23:89:c3:b6:fb:4a:67:46:b4:33:cb:d0:05:
                    43:1a:ee:98:c7:e0:26:84:69:e3:58:77:3b:dc:b7:
                    fd:ee:e2:fd:26:e3:45:b1:cf:c8:4c:24:fb:42:63:
                    41:5d:9b:3d:39:35:b3:e4:0c:c4:29:b2:c1:d3:dd:
                    c5:85:e9:a4:13:ef:7f:04:c4:50:1b:3a:af:e1:4b:
                    9e:01:96:31:41:82:c0:ec:eb:ce:09:98:7a:9d:15:
                    b6:a7:0a:b9:30:d0:c8:e5:60:c3:17:bd:38:ae:10:
                    6a:89:11:03:45:28:8a:72:9f:c7:65:62:1b:fc:b1:
                    d1:43:8b:b9:f4:f8:ad:bf:bf:13:32:f9:38:55:39:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:07:A7:0D:4B:43:AF:37:36:3B:13:C8:06:C7:4B:AC:0F:9B:C7:CA
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3430303a3a2f33382d3338203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e90:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         23:f5:4f:7a:73:b9:de:f3:fc:b9:33:5d:ef:9b:b4:b0:33:c7:
         56:c0:40:18:03:8f:62:97:8f:b8:6e:f0:30:3f:2a:97:9a:dd:
         cb:c1:c5:b4:f4:fb:76:3b:0d:ae:04:ec:f2:ef:d4:75:95:e1:
         e2:14:79:78:81:b2:71:00:22:a5:af:df:3a:b1:55:cf:96:69:
         23:f1:c5:ca:25:f5:e7:f3:63:28:81:9e:7c:10:a0:12:7b:35:
         8f:d4:fa:c8:c9:b6:1d:59:1a:cd:87:c0:a7:f4:d3:13:09:c5:
         47:49:1a:6a:10:0c:1b:2c:c7:56:f4:2f:e4:dd:a5:be:58:2d:
         bc:ff:8d:05:5c:f8:51:89:65:68:d3:46:17:e9:96:f1:69:a6:
         31:89:10:1b:0d:50:d0:cf:a9:85:85:c8:a2:e7:8c:d5:75:4a:
         25:2c:d4:79:bd:bf:cc:57:5a:27:d6:5e:75:c6:31:ac:15:46:
         85:16:c2:cf:f1:d7:7d:54:bb:02:0e:61:05:63:fc:67:74:1a:
         df:80:f9:ee:c3:3b:8a:c4:b5:47:4e:be:58:a2:ca:e0:85:c5:
         72:4a:16:b6:b1:26:97:12:25:e4:a9:29:07:46:01:1a:30:55:
         57:79:3d:03:40:5e:ba:c3:d9:49:f5:f8:a1:27:15:15:9e:38:
         88:e2:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:28 2025 by rpki-client