Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          BeeZCiUjrCXKNgJ2mD8QGv4AJGWiMS7MoPdzS7k+Dzw=
Subject key identifier:   EB:36:AB:4C:82:CE:EF:04:5D:6F:4B:BA:52:9D:AA:8A:EC:43:D8:43
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       4EAF29B4AF97F08215FCE9ED39E43A6DEC2E2387
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Thu 24 Oct 2024 13:09:00 +0000
ROA not before:           Thu 24 Oct 2024 13:04:00 +0000
ROA not after:            Thu 23 Oct 2025 13:09:00 +0000
asID:                     263283
IP address blocks:        2804:1658:fffd::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 29 Nov 2024 13:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:af:29:b4:af:97:f0:82:15:fc:e9:ed:39:e4:3a:6d:ec:2e:23:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Oct 24 13:04:00 2024 GMT
            Not After : Oct 23 13:09:00 2025 GMT
        Subject: CN=EB36AB4C82CEEF045D6F4BBA529DAA8AEC43D843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:0a:69:53:bb:96:33:7e:f3:08:ca:cd:45:
                    61:03:36:35:b0:51:6b:c7:db:a8:a6:a8:ae:c8:9f:
                    fa:ca:81:5e:cb:7a:12:e4:08:4d:4f:73:9a:61:11:
                    0c:bf:77:61:76:0b:14:cc:42:26:93:c0:f8:af:1c:
                    88:81:34:16:80:b7:57:cf:42:2f:5f:88:ed:cf:69:
                    bb:8d:20:b3:a9:5c:78:8c:18:85:f5:49:df:f7:59:
                    5e:d5:12:27:18:8d:d1:12:1c:60:6a:21:e1:71:2c:
                    70:8f:25:88:15:ef:96:ad:65:44:9f:d0:fb:ca:71:
                    88:4c:61:f5:b0:32:54:55:7c:57:e3:32:8d:05:af:
                    38:2a:f8:cf:d5:8d:3d:59:de:57:ff:d4:27:68:c3:
                    5e:97:d6:43:b1:86:f8:c0:83:3a:2b:7e:06:8f:25:
                    1c:02:d9:b9:a1:0c:f1:76:9d:ae:72:e6:67:60:8f:
                    5a:aa:80:fd:98:bf:32:90:16:ee:82:66:74:ec:23:
                    be:8f:cc:e4:23:bc:01:ad:d1:5d:98:d2:18:3d:33:
                    e7:9d:0d:1e:7b:94:ce:29:13:44:aa:8c:f0:1e:d9:
                    e6:7e:00:11:8f:62:a9:5b:65:bb:8d:cb:79:3e:50:
                    d0:80:e5:92:33:56:e7:11:36:af:2e:30:fe:d7:20:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:AB:4C:82:CE:EF:04:5D:6F:4B:BA:52:9D:AA:8A:EC:43:D8:43
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:c1:93:4b:d7:51:95:7d:3a:e6:0f:84:6f:a1:49:fc:3f:80:
         cc:d7:ea:63:c4:5e:06:d9:63:89:e1:dc:7f:2a:33:10:4b:90:
         58:d9:86:31:34:7a:09:f5:d5:62:73:ca:3f:40:76:e9:03:3f:
         f6:12:28:cd:54:f5:ef:31:a8:fc:a0:87:e4:d1:5f:29:d4:bd:
         92:5a:11:08:77:8f:81:dc:f1:bd:a8:55:4e:f2:30:44:db:df:
         e4:7c:47:40:23:23:fa:5b:ad:99:cb:e2:b0:3c:e4:92:b8:81:
         14:e8:9f:95:ad:b6:7d:a9:2a:08:18:2f:8a:77:2f:6a:7f:c1:
         e9:60:89:42:9d:ea:07:e0:9a:79:a4:ab:64:00:b9:d5:6e:a2:
         89:3b:50:7c:f1:52:fb:c5:ff:7e:29:7b:18:50:ae:02:91:ab:
         85:a1:58:ab:26:90:7d:e1:2c:9f:0a:ff:ae:76:7f:45:9b:b4:
         29:0a:5a:d8:b7:1e:b3:3f:fa:fb:60:46:e0:6c:57:77:73:ec:
         fc:94:fe:1d:27:80:ca:12:ed:23:bf:16:cd:0f:e6:54:f5:3d:
         72:2f:f2:10:1e:a8:55:3b:b7:51:f3:10:7d:12:b0:73:b5:42:
         42:22:a4:5b:61:e4:22:ff:dd:cf:84:33:aa:5f:78:40:e5:c6:
         2c:e0:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:16 2025 by rpki-client