Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33332d3333203d3e203631373337.roa
File:                     323830343a316239633a3a2f33332d3333203d3e203631373337.roa (raw, json)
Hash identifier:          wFr2Z2uWYL0MpJfv5JgJ61Ee5A6BpDBif7jcFaJQ/ho=
Subject key identifier:   C6:EC:04:30:5D:3C:42:86:01:47:8C:E0:FC:EB:0A:39:3B:56:42:F0
Certificate issuer:       /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial:       4F73F3E8267C8D3134FA5ADCE8EFDDC365CD32B7
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33332d3333203d3e203631373337.roa
Signing time:             Fri 14 Feb 2025 00:08:55 +0000
ROA not before:           Fri 14 Feb 2025 00:03:55 +0000
ROA not after:            Fri 13 Feb 2026 00:08:55 +0000
asID:                     61737
IP address blocks:        2804:1b9c::/33 maxlen: 33
Validation:               Failed, certificate revoked on Fri 28 Feb 2025 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:f3:e8:26:7c:8d:31:34:fa:5a:dc:e8:ef:dd:c3:65:cd:32:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
        Validity
            Not Before: Feb 14 00:03:55 2025 GMT
            Not After : Feb 13 00:08:55 2026 GMT
        Subject: CN=C6EC04305D3C428601478CE0FCEB0A393B5642F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:f4:01:3f:22:5b:78:e9:fb:df:5a:2c:9e:
                    fd:0a:80:bf:25:fb:a3:d2:ec:3b:97:33:2f:21:e1:
                    61:af:6c:e5:bb:1c:27:f2:4b:ab:7c:44:e0:a4:72:
                    04:20:e1:63:0e:81:e2:c5:d3:e0:cd:b3:47:db:d6:
                    81:e8:82:e1:6c:ea:47:67:9c:a0:d6:90:04:d0:24:
                    e2:ed:5e:7d:06:58:4f:6d:3d:55:f9:fc:13:df:8b:
                    60:2d:a9:b2:fa:5c:8b:fd:cb:08:d7:48:91:58:ce:
                    bf:75:a5:1d:15:94:ce:63:58:63:c8:1b:98:77:71:
                    43:d2:f9:f8:91:f6:e3:b4:e7:fc:18:82:e4:26:09:
                    a0:66:d2:89:19:70:34:98:1f:ca:fe:c5:50:23:c9:
                    d2:2c:ae:3c:cd:72:f3:2a:d3:3a:b2:ce:04:0b:8a:
                    a1:54:02:9d:ee:da:b2:75:0d:3c:55:a1:78:66:c0:
                    17:8e:2a:98:2c:a7:63:ad:c0:40:e1:a9:01:e6:e4:
                    d1:af:74:14:05:ad:b3:8e:a0:bb:81:31:c5:38:f1:
                    86:ca:c6:42:61:26:0a:bc:eb:a9:5a:b7:3c:ea:eb:
                    76:83:24:ba:4d:94:19:34:b0:3d:ec:16:d1:4a:08:
                    a7:09:82:3c:05:49:55:d5:d7:fb:25:d8:10:4e:e7:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:04:30:5D:3C:42:86:01:47:8C:E0:FC:EB:0A:39:3B:56:42:F0
            X509v3 Authority Key Identifier:
                keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33332d3333203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:ad:f0:2f:a2:5e:19:3a:d3:a9:e0:3f:c5:80:0e:40:8a:
         2a:48:4a:3a:b8:50:ed:bc:19:dd:46:ee:b7:d8:09:94:c8:45:
         3f:63:2e:d9:fb:08:75:be:b1:2d:91:d8:f8:86:21:21:ff:dd:
         7f:d7:6f:cd:a5:57:2c:9f:da:87:a3:bf:4a:bb:ce:11:9f:09:
         20:0c:0e:73:07:1c:31:85:c9:9a:be:fe:3d:60:44:c1:f8:87:
         5b:73:03:08:f6:67:52:8d:77:dd:dc:5f:93:0d:38:90:4e:27:
         60:3a:7e:eb:d3:4b:bf:53:3b:56:80:63:4d:8d:45:43:93:4b:
         3d:9f:ab:55:ca:e0:92:54:54:f7:3a:64:95:6b:6f:ff:d3:f2:
         e5:fa:80:cc:9f:da:00:c6:bc:08:94:44:d6:2b:da:86:b5:c7:
         79:35:ab:40:6c:3f:02:ae:07:38:49:47:14:0b:95:62:a1:7d:
         75:f1:10:df:b9:44:99:dc:46:08:a1:88:94:18:2b:20:07:19:
         3f:38:f6:08:09:2c:67:09:f1:31:4a:7e:52:70:c4:4b:c8:98:
         b2:a7:a9:d3:8f:ef:bd:6f:88:60:e4:d6:85:ed:60:bc:b9:71:
         b8:94:c4:31:0c:b7:c4:66:bb:8d:42:86:19:b5:eb:f5:8c:57:
         83:bc:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:53:05 2025 by rpki-client