Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3332203d3e203631383035.roa
File:                     323830343a313939383a3a2f33322d3332203d3e203631383035.roa (raw, json)
Hash identifier:          Cj6Hk0TQ/blS3REHFz3u9NFxg3vEF8YzKD8LCRVPejA=
Subject key identifier:   CB:8D:86:A0:33:DB:5E:F7:0D:50:B5:A8:80:99:E7:5A:B4:B3:30:F0
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       6A5A1C2CD18C0BC3499A0D865933E4FE8CECBF77
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3332203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:31:49 +0000
ROA not before:           Thu 25 Apr 2024 19:26:49 +0000
ROA not after:            Thu 24 Apr 2025 19:31:49 +0000
asID:                     61805
IP address blocks:        2804:1998::/32 maxlen: 32
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5a:1c:2c:d1:8c:0b:c3:49:9a:0d:86:59:33:e4:fe:8c:ec:bf:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:26:49 2024 GMT
            Not After : Apr 24 19:31:49 2025 GMT
        Subject: CN=CB8D86A033DB5EF70D50B5A88099E75AB4B330F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:0f:f7:f1:76:f1:25:05:f6:15:92:cf:69:
                    2b:af:57:7c:ee:33:56:02:fe:a3:f2:2f:0f:92:73:
                    d0:14:b4:95:39:2c:71:ff:bc:f2:9b:b7:a0:60:2d:
                    72:8c:69:38:cb:5b:9c:f2:a5:bf:c6:5f:0d:9f:5f:
                    bb:8b:f8:5b:6c:9e:98:9d:d4:42:ee:ef:31:74:e6:
                    bd:53:3d:52:77:af:82:ca:cd:32:34:2c:a5:25:46:
                    b1:09:1e:b1:90:1c:ca:4c:56:5b:cc:e4:57:4b:b7:
                    aa:2d:9a:f3:a8:4b:80:6a:12:b5:bb:6f:88:2e:ce:
                    f4:5f:48:33:28:c0:f6:93:98:5b:2c:48:5e:9f:ef:
                    78:e2:a2:8b:ef:97:04:ac:86:26:c4:50:34:c0:d7:
                    b8:92:6e:84:84:30:53:1b:c6:1e:be:2e:0f:0b:40:
                    06:98:eb:fd:e9:5e:db:93:62:27:61:f1:a4:93:10:
                    1d:c4:d0:82:b3:ae:36:97:34:fe:0a:c4:09:de:67:
                    3a:15:65:2c:79:b0:da:dd:1f:c8:bc:6a:5d:33:58:
                    08:fc:c3:e5:be:b7:c4:8d:ae:68:5d:cd:bf:80:f2:
                    1f:cd:7a:86:61:68:8f:80:81:df:b6:e2:dd:97:78:
                    db:bd:62:17:f6:0c:42:ba:11:16:cc:20:b3:e7:09:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8D:86:A0:33:DB:5E:F7:0D:50:B5:A8:80:99:E7:5A:B4:B3:30:F0
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3332203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1998::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:78:8c:c2:11:eb:99:1f:22:53:7c:8d:f4:f6:63:d6:d8:
         93:f6:91:8f:80:af:bf:53:5a:a3:80:f8:ed:70:38:b3:5c:f9:
         d8:31:69:f7:a0:90:c9:cb:5b:15:0d:5c:3d:9f:e9:a7:e1:08:
         e8:20:83:61:28:f6:96:5a:59:10:2a:20:1c:b5:fe:88:ce:55:
         97:81:3d:e0:0e:24:74:cc:e6:3a:7d:32:84:65:1a:19:fb:78:
         45:2b:64:19:53:f7:2d:98:fe:2e:09:83:96:2c:bb:b8:63:99:
         64:12:ad:b0:e8:dd:47:b3:89:7a:fe:2a:59:40:e3:52:a3:ef:
         2e:64:d4:3c:ad:fd:0d:5d:a3:35:57:db:93:e7:78:bc:b1:99:
         10:d9:4e:20:ff:12:2a:23:93:81:0f:ce:33:7c:b8:4d:46:ec:
         df:7c:48:b5:0d:bd:c9:18:fd:dc:0f:b6:b8:7a:ed:f9:7c:1c:
         47:0c:56:82:82:4b:fd:54:21:3e:88:94:84:b2:46:b8:23:d7:
         2b:c1:03:1f:2a:ee:a5:05:0e:f4:39:c5:33:ce:00:d1:2a:27:
         2d:8e:7d:84:e3:3b:06:01:bf:0e:70:5c:40:95:75:1f:e9:bf:
         f2:fc:ea:65:3e:a0:66:ea:61:d8:81:29:dc:f3:73:b2:0a:06:
         ab:a4:0b:b6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUalocLNGMC8NJmg2GWTPk/ozsv3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3MEJGNDgyMUIyMURDNTkwNUZERDc0RUQwM0MxMzZB
MTZBMjgzMDAeFw0yNDA0MjUxOTI2NDlaFw0yNTA0MjQxOTMxNDlaMDMxMTAvBgNV
BAMTKENCOEQ4NkEwMzNEQjVFRjcwRDUwQjVBODgwOTlFNzVBQjRCMzMwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskg/38XbxJQX2FZLPaSuvV3zu
M1YC/qPyLw+Sc9AUtJU5LHH/vPKbt6BgLXKMaTjLW5zypb/GXw2fX7uL+Ftsnpid
1ELu7zF05r1TPVJ3r4LKzTI0LKUlRrEJHrGQHMpMVlvM5FdLt6otmvOoS4BqErW7
b4guzvRfSDMowPaTmFssSF6f73jioovvlwSshibEUDTA17iSboSEMFMbxh6+Lg8L
QAaY6/3pXtuTYidh8aSTEB3E0IKzrjaXNP4KxAneZzoVZSx5sNrdH8i8al0zWAj8
w+W+t8SNrmhdzb+A8h/NeoZhaI+Agd+24t2XeNu9Yhf2DEK6ERbMILPnCT8/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUy42GoDPbXvcNULWogJnnWrSzMPAwHwYDVR0j
BBgwFoAU/nC/SCGyHcWQX9107QPBNqFqKDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FC
OUgvMC9GRTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNzBCRjQ4MjFCMjFEQzU5
MDVGREQ3NEVEMDNDMTM2QTE2QTI4MzAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0RFp0OHBHaDlGWE1OV0w4TXd1dUFwc0JzQWQzTEhWdkx6ZGtBcXNRQjlILzAv
MzIzODMwMzQzYTMxMzkzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM4
MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGZgwDQYJKoZIhvcNAQELBQADggEBADOqeIzCEeuZ
HyJTfI309mPW2JP2kY+Ar79TWqOA+O1wOLNc+dgxafegkMnLWxUNXD2f6afhCOgg
g2Eo9pZaWRAqIBy1/ojOVZeBPeAOJHTM5jp9MoRlGhn7eEUrZBlT9y2Y/i4Jg5Ys
u7hjmWQSrbDo3UeziXr+KllA41Kj7y5k1Dyt/Q1dozVX25PneLyxmRDZTiD/Eioj
k4EPzjN8uE1G7N98SLUNvckY/dwPtrh67fl8HEcMVoKCS/1UIT6IlISyRrgj1yvB
Ax8q7qUFDvQ5xTPOANEqJy2OfYTjOwYBvw5wXECVdR/pv/L86mU+oGbqYdiBKdzz
c7IKBqukC7Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:23:22 2025 by rpki-client