Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/323830343a366539633a3a2f33322d3332203d3e20323730363038.roa
File:                     323830343a366539633a3a2f33322d3332203d3e20323730363038.roa (raw, json)
Hash identifier:          jhPmATkADLIIpKmXgU+Uqb2x3S5bsuCHIOTi8Qlio8M=
Subject key identifier:   E3:3E:82:E9:AD:DE:7E:5B:E2:07:2D:E2:9B:D3:8A:D0:C3:FB:04:8C
Certificate issuer:       /CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
Certificate serial:       53B198CECA3D062E1EE473924F1202A47972C2B6
Authority key identifier: 60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/323830343a366539633a3a2f33322d3332203d3e20323730363038.roa
Signing time:             Fri 21 Feb 2025 13:35:42 +0000
ROA not before:           Fri 21 Feb 2025 13:30:42 +0000
ROA not after:            Fri 20 Feb 2026 13:35:42 +0000
asID:                     270608
IP address blocks:        2804:6e9c::/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 25 Feb 2025 19:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b1:98:ce:ca:3d:06:2e:1e:e4:73:92:4f:12:02:a4:79:72:c2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
        Validity
            Not Before: Feb 21 13:30:42 2025 GMT
            Not After : Feb 20 13:35:42 2026 GMT
        Subject: CN=E33E82E9ADDE7E5BE2072DE29BD38AD0C3FB048C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:d5:8e:37:29:f6:8f:fa:42:94:7e:38:c8:
                    98:49:16:ba:58:a4:ae:65:ce:05:a5:71:71:3f:76:
                    91:74:0a:37:21:60:07:bd:a8:21:16:c4:c7:08:cf:
                    af:00:32:96:d5:52:2b:65:4a:66:07:49:b5:3f:e7:
                    94:85:1e:b5:9e:c6:12:af:92:2d:42:90:22:94:eb:
                    75:79:b0:34:a5:e3:7a:56:2c:96:66:f9:e6:98:01:
                    46:8b:dd:10:7e:1d:de:e1:3b:23:e2:09:a8:1d:74:
                    3b:dd:74:11:f5:26:69:e2:3d:5d:89:55:a7:c2:51:
                    c0:7b:7e:bd:17:a4:72:ac:91:3e:73:73:4c:b2:5b:
                    86:fd:97:e8:14:87:e2:73:44:31:e2:b0:78:9b:26:
                    65:6e:06:1a:66:bc:d4:47:8f:ed:d3:d1:ee:1f:ed:
                    46:ff:ad:43:33:9c:02:eb:db:d1:2a:81:00:e0:dc:
                    9a:17:86:84:2f:45:51:d2:f1:4b:09:59:b5:a1:c0:
                    aa:42:00:28:db:3e:ca:cd:39:c6:4c:6b:49:4f:8b:
                    34:00:ce:a7:95:b5:79:26:fc:49:e2:59:f6:eb:8f:
                    19:9d:54:53:d3:5c:31:06:77:aa:58:8f:44:30:a5:
                    f0:63:5f:72:08:cb:39:ba:ba:32:09:98:26:25:0c:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3E:82:E9:AD:DE:7E:5B:E2:07:2D:E2:9B:D3:8A:D0:C3:FB:04:8C
            X509v3 Authority Key Identifier:
                keyid:60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/323830343a366539633a3a2f33322d3332203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:49:07:1d:0a:1f:35:83:76:83:5e:f2:8b:47:70:62:0f:a8:
         c6:95:6f:23:ea:f9:a2:7e:6e:20:a9:73:98:8f:05:e8:d7:5e:
         7c:18:2c:cc:d2:f9:85:f2:f4:8d:72:9f:e0:c8:9c:d2:a1:2a:
         d6:e8:7c:2e:71:86:93:02:44:56:00:73:72:02:f7:50:f0:3d:
         4e:06:94:18:63:0f:4d:b6:d7:c7:35:6d:1e:b0:9f:96:ec:2d:
         1d:39:a8:31:d2:7e:46:46:55:0e:0f:23:94:1f:79:61:f1:a1:
         23:17:d7:d9:46:28:c1:4e:87:a2:02:65:b4:47:2b:41:e9:c8:
         11:11:5d:0d:7f:c9:5a:c6:f0:0d:f2:a7:42:2e:6b:5a:65:15:
         3f:9d:fa:8b:89:bd:ce:34:db:37:07:1d:86:28:c0:68:0b:84:
         9a:b9:9c:26:a1:cd:12:97:c6:4d:69:ca:c9:cf:da:ef:cd:89:
         19:b2:92:ed:67:ba:b6:30:6a:7e:83:57:b8:21:fa:fa:c4:bd:
         17:35:a9:8b:33:f1:07:9a:1e:80:de:51:4d:82:36:85:12:a5:
         55:e8:c5:f2:38:9f:c3:ec:32:49:30:e5:5a:68:3d:ca:0f:4e:
         0d:65:5c:45:df:d1:0c:8b:de:37:5b:72:c5:81:34:a3:81:bd:
         36:4e:c8:ac
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUU7GYzso9Bi4e5HOSTxICpHlywrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAzRUQ5QkY1MUY4OUM1RjA4NTNFMkEzQzVFQThCQjA5
MkU4RTI5OTAeFw0yNTAyMjExMzMwNDJaFw0yNjAyMjAxMzM1NDJaMDMxMTAvBgNV
BAMTKEUzM0U4MkU5QURERTdFNUJFMjA3MkRFMjlCRDM4QUQwQzNGQjA0OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVdWONyn2j/pClH44yJhJFrpY
pK5lzgWlcXE/dpF0CjchYAe9qCEWxMcIz68AMpbVUitlSmYHSbU/55SFHrWexhKv
ki1CkCKU63V5sDSl43pWLJZm+eaYAUaL3RB+Hd7hOyPiCagddDvddBH1JmniPV2J
VafCUcB7fr0XpHKskT5zc0yyW4b9l+gUh+JzRDHisHibJmVuBhpmvNRHj+3T0e4f
7Ub/rUMznALr29EqgQDg3JoXhoQvRVHS8UsJWbWhwKpCACjbPsrNOcZMa0lPizQA
zqeVtXkm/EniWfbrjxmdVFPTXDEGd6pYj0QwpfBjX3IIyzm6ujIJmCYlDIk7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4z6C6a3eflviBy3im9OK0MP7BIwwHwYDVR0j
BBgwFoAUYD7Zv1H4nF8IU+KjxeqLsJLo4pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR1ZExDMmg5a2JvVWtmUVBIaEdvMUJweHZiMkY0aDdVcHlkRThlMXZQ
VjYvMC82MDNFRDlCRjUxRjg5QzVGMDg1M0UyQTNDNUVBOEJCMDkyRThFMjk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwM0VEOUJGNTFGODlDNUYw
ODUzRTJBM0M1RUE4QkIwOTJFOEUyOTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0dWRMQzJoOWtib1VrZlFQSGhHbzFCcHh2YjJGNGg3VXB5ZEU4ZTF2UFY2LzAv
MzIzODMwMzQzYTM2NjUzOTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzYzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARunDANBgkqhkiG9w0BAQsFAAOCAQEAWEkHHQof
NYN2g17yi0dwYg+oxpVvI+r5on5uIKlzmI8F6NdefBgszNL5hfL0jXKf4Mic0qEq
1uh8LnGGkwJEVgBzcgL3UPA9TgaUGGMPTbbXxzVtHrCfluwtHTmoMdJ+RkZVDg8j
lB95YfGhIxfX2UYowU6HogJltEcrQenIERFdDX/JWsbwDfKnQi5rWmUVP536i4m9
zjTbNwcdhijAaAuEmrmcJqHNEpfGTWnKyc/a782JGbKS7We6tjBqfoNXuCH6+sS9
FzWpizPxB5oegN5RTYI2hRKlVejF8jifw+wySTDlWmg9yg9ODWVcRd/RDIveN1ty
xYE0o4G9Nk7IrA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:59:48 2025 by rpki-client