Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33332d3333203d3e203631383035.roa
File:                     323830343a313939383a3a2f33332d3333203d3e203631383035.roa (raw, json)
Hash identifier:          L9+v8Ott8yIHD/onBbjDfdAHygpTstW70s7/aD8cNY4=
Subject key identifier:   C1:4F:A2:33:5E:42:DA:05:6B:BB:51:6D:80:36:1E:B7:38:BB:E1:8D
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       7B632A58322FCE6503B14188775223F28A42CBBF
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33332d3333203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:32:30 +0000
ROA not before:           Thu 25 Apr 2024 19:27:30 +0000
ROA not after:            Thu 24 Apr 2025 19:32:30 +0000
asID:                     61805
IP address blocks:        2804:1998::/33 maxlen: 33
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:63:2a:58:32:2f:ce:65:03:b1:41:88:77:52:23:f2:8a:42:cb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:27:30 2024 GMT
            Not After : Apr 24 19:32:30 2025 GMT
        Subject: CN=C14FA2335E42DA056BBB516D80361EB738BBE18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:8d:00:1b:35:e9:be:b0:e4:2a:58:d5:bf:
                    a4:f7:43:06:05:f1:3a:de:ee:68:dc:7e:fd:f7:5d:
                    5b:c4:91:58:0b:aa:30:6f:0d:f3:c5:b2:0d:7e:c1:
                    70:5e:6f:76:22:f9:d3:10:a8:e5:04:6b:4e:8f:f8:
                    4e:97:2a:f9:d7:33:3e:d5:64:90:5a:c7:e7:25:c7:
                    17:7e:a3:31:42:b4:9b:cf:92:55:96:02:96:9a:6e:
                    a0:6a:f3:b2:f8:c1:9f:09:59:4c:fd:f5:9f:31:29:
                    94:cf:24:32:69:ae:2a:e0:3f:78:01:92:61:ac:24:
                    64:64:4e:97:91:31:ba:2c:ad:7f:d4:0e:6a:9c:c8:
                    cb:c8:40:17:59:ea:36:33:53:2f:71:2f:35:da:84:
                    72:69:8e:c3:84:c3:49:f4:8a:7b:85:8e:a5:1d:97:
                    f7:5a:9a:63:3b:2a:b1:da:db:29:cb:44:0e:43:d1:
                    e6:0d:ea:80:05:b7:8a:bc:1a:52:16:ed:a5:35:bd:
                    e7:3d:88:92:66:55:2d:8e:36:8f:87:be:5a:8e:1f:
                    d0:7a:fe:6e:d0:66:8a:b9:4f:a7:9e:19:fe:9a:03:
                    cc:2e:c4:ea:f2:5c:ce:9f:19:1d:af:03:63:00:f6:
                    d4:d9:5e:4b:e1:ab:66:69:29:7d:5f:ea:06:3c:c7:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4F:A2:33:5E:42:DA:05:6B:BB:51:6D:80:36:1E:B7:38:BB:E1:8D
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33332d3333203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1998::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:80:ef:86:b0:7b:19:45:30:e5:78:5a:2f:fc:ca:af:80:
         4c:5d:5b:2d:bf:36:47:c7:17:5f:a6:30:e1:98:f8:fe:0a:72:
         b3:42:d4:51:f5:e9:a2:78:24:1d:9a:d4:2c:49:68:e6:e7:4d:
         3d:5b:75:3a:0a:14:9d:ac:1f:4a:cc:6a:2a:d2:6d:8e:87:0e:
         5f:45:f8:13:85:89:87:59:5b:34:a7:17:c9:c9:47:8a:a9:06:
         14:5b:f5:dc:f7:a5:e3:b6:51:47:48:ab:82:74:ef:77:d8:64:
         a4:3e:5d:3b:cc:90:e6:75:81:90:72:a5:b6:24:4a:9f:57:bb:
         4b:5b:77:3e:19:18:58:a2:57:c0:dc:ff:95:37:39:4b:c1:73:
         58:0b:b6:97:98:61:7e:95:7a:dc:4b:b1:3e:dd:2a:f2:b6:24:
         07:b6:55:9d:9d:65:ad:2f:56:c9:81:0d:b5:37:48:af:27:a0:
         6f:79:c3:d5:bc:95:29:68:61:68:20:bc:c1:ea:da:d9:32:62:
         46:c7:2c:ba:b3:c8:ed:3b:b7:25:5e:8e:71:07:95:49:77:51:
         4d:31:aa:97:74:59:7a:54:d0:e8:ac:a1:6c:15:a8:45:dc:7c:
         cf:e1:32:75:54:a1:72:02:d1:80:c7:eb:7a:d1:3c:91:cc:88:
         65:0f:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:15 2025 by rpki-client