Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a3a2f33342d3334203d3e20323731373030.roa
File:                     323830343a376661343a3a2f33342d3334203d3e20323731373030.roa (raw, json)
Hash identifier:          GrglbDEc1Dp/d6BoigQ89WjDilgxj1cfmSRglUGK/ZA=
Subject key identifier:   4F:8F:A0:75:5F:0F:25:C1:42:41:D1:7E:10:42:2F:31:DC:01:09:15
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       22A89B35A3F37EBA9FBEC9E4D6310B5063F488ED
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a3a2f33342d3334203d3e20323731373030.roa
Signing time:             Mon 16 Dec 2024 19:56:56 +0000
ROA not before:           Mon 16 Dec 2024 19:51:56 +0000
ROA not after:            Mon 15 Dec 2025 19:56:56 +0000
asID:                     271700
IP address blocks:        2804:7fa4::/34 maxlen: 34
Validation:               Failed, certificate revoked on Thu 09 Jan 2025 17:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a8:9b:35:a3:f3:7e:ba:9f:be:c9:e4:d6:31:0b:50:63:f4:88:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Dec 16 19:51:56 2024 GMT
            Not After : Dec 15 19:56:56 2025 GMT
        Subject: CN=4F8FA0755F0F25C14241D17E10422F31DC010915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:36:72:83:5a:bb:70:cc:05:e0:ca:21:e8:
                    5a:e8:6c:a7:cc:0f:1c:7b:bc:57:ef:a0:90:56:ad:
                    75:20:1b:f9:34:cf:02:fa:04:e9:bf:7c:4f:13:c4:
                    30:d4:c1:98:48:c7:49:73:59:12:a1:8d:c8:c9:34:
                    35:19:e5:c5:3e:37:10:81:62:fe:6d:c9:04:13:7f:
                    af:4b:0e:07:dc:07:22:e6:52:15:48:9e:23:55:49:
                    56:5d:a1:17:f6:3d:60:20:b6:2a:37:23:6a:75:e4:
                    9b:32:0c:49:54:9f:c9:8b:73:58:d6:b9:8a:55:40:
                    1b:f8:e2:65:4d:9d:ce:e4:d3:3a:1f:11:93:26:37:
                    2a:1d:17:20:0b:56:05:50:a4:fb:cd:b1:31:db:5a:
                    ca:13:ac:6e:54:c6:94:5f:9c:93:fb:f8:f9:53:c2:
                    94:29:32:87:f5:fa:62:07:63:80:58:7f:fb:79:09:
                    a1:3d:22:fd:5f:74:c6:eb:b1:07:ac:3b:10:71:3a:
                    78:9c:e3:cd:d9:dc:9b:9e:93:0d:31:ba:0f:85:ec:
                    37:b0:f8:33:9c:98:7f:99:0c:be:72:c6:06:aa:c8:
                    4a:84:cb:f1:ac:63:96:a1:95:53:bd:b9:e1:21:33:
                    a2:db:f4:d4:85:01:ee:bf:11:12:84:67:03:90:38:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8F:A0:75:5F:0F:25:C1:42:41:D1:7E:10:42:2F:31:DC:01:09:15
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a3a2f33342d3334203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa4::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:1a:2d:a3:21:2d:11:a3:9c:94:17:76:ca:7a:5a:b4:6d:70:
         3f:f9:3e:ee:a8:8e:2a:b5:9a:ef:58:12:71:d7:e4:29:09:77:
         b7:9f:25:ed:bf:9e:f8:2b:14:63:ab:79:ee:45:51:80:14:e3:
         8f:a2:ca:26:7a:cc:96:d2:40:11:fd:38:51:8f:e1:76:c4:99:
         e4:db:f9:74:fc:e0:e3:9b:92:5c:62:44:3d:58:db:f8:a8:e3:
         6d:dd:9c:52:ff:9a:90:ce:a2:ba:4c:e3:01:fd:11:42:b1:93:
         1a:50:97:7d:a8:eb:96:c3:02:65:18:db:a5:a4:b7:c0:b1:d5:
         df:f6:5e:f0:3c:2a:2b:03:6a:d0:03:ff:ef:8c:5a:c2:e5:e7:
         5a:1f:62:82:57:e4:4e:a3:e2:3d:cf:f9:2d:c9:92:c6:9b:53:
         ca:9a:6a:4a:b6:ff:2e:dd:5e:3c:64:5e:1a:ee:31:66:05:55:
         9b:b4:0f:60:c0:9c:4c:55:20:da:4a:b8:5c:22:a3:3f:c2:30:
         05:19:92:24:96:ee:bc:13:d6:10:ad:fd:a2:c9:28:51:6f:ca:
         7b:fc:4e:28:3e:b7:d1:dd:dd:b6:b6:b4:94:f1:5e:66:52:44:
         cf:40:d4:52:58:d7:f3:7a:49:c1:3c:52:11:f6:66:2d:80:a1:
         eb:bf:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:27 2025 by rpki-client