Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a633030303a3a2f33342d3334203d3e20323731373030.roa
File:                     323830343a376661343a633030303a3a2f33342d3334203d3e20323731373030.roa (raw, json)
Hash identifier:          HkfbxX1RgyVYha+EEWNqbAZwe6b5n7ZJuqEgPfIYQwQ=
Subject key identifier:   C4:08:5B:B2:56:CA:D4:3A:3B:AD:E9:BB:A1:36:4B:0A:BB:CB:CA:C5
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       6E8643A041AF181F80C188B6BED01F5A13CE1272
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a633030303a3a2f33342d3334203d3e20323731373030.roa
Signing time:             Mon 16 Dec 2024 19:56:58 +0000
ROA not before:           Mon 16 Dec 2024 19:51:58 +0000
ROA not after:            Mon 15 Dec 2025 19:56:58 +0000
asID:                     271700
IP address blocks:        2804:7fa4:c000::/34 maxlen: 34
Validation:               Failed, certificate revoked on Thu 09 Jan 2025 17:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:86:43:a0:41:af:18:1f:80:c1:88:b6:be:d0:1f:5a:13:ce:12:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Dec 16 19:51:58 2024 GMT
            Not After : Dec 15 19:56:58 2025 GMT
        Subject: CN=C4085BB256CAD43A3BADE9BBA1364B0ABBCBCAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:f2:dc:61:25:23:92:9b:0a:8f:76:bf:9f:
                    e0:8d:7b:30:be:17:80:5b:2c:92:c8:5d:98:ff:61:
                    76:87:ae:fc:ea:20:c4:1f:97:96:d4:07:b7:5c:54:
                    90:b9:cf:a5:b6:1d:7d:da:69:66:9e:e9:9f:e0:df:
                    38:0a:d9:a3:ce:12:69:56:80:23:74:d2:96:97:a6:
                    1c:08:c6:ba:c6:58:eb:80:53:5c:a0:d6:d4:03:52:
                    a7:0a:47:00:57:30:33:f2:98:c4:74:66:c8:02:0d:
                    2e:78:e8:a4:7e:3d:18:1e:ea:b0:b2:f8:b1:09:9a:
                    1b:59:50:fd:cd:ad:31:ec:56:e8:9b:09:da:b9:f2:
                    6e:52:bd:6f:8a:51:61:92:3b:8e:23:78:d4:da:4b:
                    4f:3b:6a:2b:2f:81:f7:96:72:d7:8c:3a:b5:fc:6c:
                    99:56:6d:aa:cd:47:92:4c:62:af:dd:68:14:4b:ed:
                    81:cc:ad:3a:33:32:e4:59:bc:b2:27:c7:94:6f:e8:
                    4d:25:3a:26:49:5b:03:9a:ab:62:9d:3e:51:ed:dc:
                    f9:af:ed:4c:7a:98:33:02:d8:63:03:cd:e2:8f:d3:
                    8a:5a:7c:c9:d5:c5:48:84:53:db:d2:b9:38:16:19:
                    cf:ea:69:5a:e7:b4:a3:11:9f:cc:1f:41:2d:6b:62:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:5B:B2:56:CA:D4:3A:3B:AD:E9:BB:A1:36:4B:0A:BB:CB:CA:C5
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/323830343a376661343a633030303a3a2f33342d3334203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         36:37:4e:af:25:6f:8d:6d:55:58:db:52:39:cf:5e:e9:e3:ac:
         0e:e7:38:39:81:a3:da:3d:44:48:e3:57:15:0b:48:7b:92:2c:
         6a:f5:89:4e:b5:7b:50:8f:d2:21:62:56:49:a9:36:f5:f3:d1:
         2f:87:69:5b:56:d0:e9:65:75:6e:2b:61:e8:23:79:5f:69:c2:
         48:19:25:06:77:16:ac:01:c9:28:f1:bb:c0:0d:63:ce:e8:dd:
         78:cd:24:31:68:22:18:78:83:09:74:9b:7c:c7:26:cb:41:18:
         a3:55:95:11:fa:fc:03:fd:aa:2b:9e:ad:70:97:93:81:b4:a1:
         14:c8:ea:00:35:ec:d2:91:10:0a:ba:b7:60:69:e0:2b:d9:a9:
         4f:2e:9e:76:d0:c8:19:2b:b5:52:54:43:b8:38:93:ff:2e:cf:
         88:4b:36:a6:aa:48:b3:f6:80:28:b3:bf:ae:aa:f1:92:a7:70:
         74:f2:5f:d7:92:c0:1d:3f:11:49:20:d3:18:47:ff:5b:e5:03:
         c6:69:2f:b6:16:31:15:ed:7b:ec:43:a8:29:52:a4:f7:45:86:
         20:32:87:b6:44:02:ab:1f:23:37:db:9f:5b:ee:db:a0:0c:43:
         b2:cb:25:3a:86:ef:3c:bf:8f:85:75:e9:4a:19:bb:46:e0:44:
         41:92:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:32 2025 by rpki-client