Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a3a2f33322d3332203d3e20323635343139.roa
File:                     323830343a333364343a3a2f33322d3332203d3e20323635343139.roa (raw, json)
Hash identifier:          mp+zz+dlpRRCmmyX+WylUgtco1h9iIvvQAH9wWzpR44=
Subject key identifier:   80:F9:AD:59:30:40:2E:28:30:55:FC:F8:1B:87:01:E3:03:CA:AD:AB
Certificate issuer:       /CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Certificate serial:       21F82758A8F10065AD5D2A1DF8126D8A4F76BFB7
Authority key identifier: C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a3a2f33322d3332203d3e20323635343139.roa
Signing time:             Tue 02 Jul 2024 18:08:56 +0000
ROA not before:           Tue 02 Jul 2024 18:03:56 +0000
ROA not after:            Tue 01 Jul 2025 18:08:56 +0000
asID:                     265419
IP address blocks:        2804:33d4::/32 maxlen: 32
Validation:               Failed, certificate revoked on Wed 23 Oct 2024 17:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f8:27:58:a8:f1:00:65:ad:5d:2a:1d:f8:12:6d:8a:4f:76:bf:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
        Validity
            Not Before: Jul  2 18:03:56 2024 GMT
            Not After : Jul  1 18:08:56 2025 GMT
        Subject: CN=80F9AD5930402E283055FCF81B8701E303CAADAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:3f:c0:d5:77:22:8b:b3:f9:13:4a:82:e2:
                    96:7c:cd:bd:70:e2:09:9a:9a:5e:59:c0:cc:09:37:
                    ff:b3:bd:51:08:ec:e2:25:f8:b8:ec:53:34:eb:29:
                    55:fd:03:8f:3c:be:bf:61:da:48:3c:b2:88:3f:c5:
                    d4:3a:bd:69:18:c3:6d:b6:c6:24:56:49:f2:f9:0e:
                    a9:bd:64:f8:c6:76:7d:b8:09:a3:c4:0b:90:2a:3d:
                    ce:17:a7:0a:73:07:11:d0:73:90:4d:83:93:ba:ab:
                    25:c0:89:9c:29:42:4e:73:c4:6e:e4:44:f4:b3:13:
                    de:47:0f:f0:b6:fd:c8:f4:ff:b6:fa:79:db:fb:04:
                    09:de:34:c9:97:e2:ac:16:ff:2d:0e:80:5e:51:fa:
                    2e:05:f7:c4:83:45:bc:ee:38:e2:26:ca:1e:66:a6:
                    02:3e:63:1e:ab:ac:fe:56:be:52:87:9c:bb:9e:2c:
                    78:28:7c:f6:09:a1:2f:4d:9c:3b:2f:31:82:d0:09:
                    6c:3a:cc:2b:2f:bd:d2:36:ff:e8:54:85:5d:19:36:
                    36:27:aa:6e:09:77:29:9f:3e:c6:5c:3a:98:69:79:
                    86:86:1f:82:5f:57:1e:c1:b9:13:10:f1:f7:8b:cc:
                    48:fd:cf:9a:43:01:02:06:fd:15:fd:7d:56:36:80:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F9:AD:59:30:40:2E:28:30:55:FC:F8:1B:87:01:E3:03:CA:AD:AB
            X509v3 Authority Key Identifier:
                keyid:C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a3a2f33322d3332203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:cb:66:03:e7:8e:d5:c3:02:64:9d:30:c9:dd:d1:fa:84:
         34:e1:61:c0:90:98:54:bb:15:31:7a:84:2c:58:fd:1e:cf:55:
         38:92:f0:1e:63:4b:24:36:7a:8d:85:24:0e:1f:cc:6e:70:ec:
         f4:ef:07:13:02:a0:e3:7d:b7:36:73:f2:db:96:0b:28:fb:46:
         25:7c:7b:0e:21:41:fc:ab:6c:22:80:3b:8e:79:35:72:0e:01:
         4d:27:38:32:9a:cf:f3:02:c3:53:58:2f:bb:59:5c:eb:74:40:
         88:d5:cc:fe:dc:64:bb:25:b1:e9:30:24:15:99:bb:f3:8a:aa:
         8f:f7:64:33:2c:de:03:3e:11:0b:55:65:8c:0e:6a:58:3f:a3:
         32:77:ae:77:0f:a9:b7:6a:f1:e9:05:95:14:eb:b4:0f:d5:78:
         d0:58:61:cd:c6:a5:8b:9d:a5:5d:fe:27:92:ac:d0:04:8f:31:
         d8:27:09:1e:1d:82:f0:92:b9:fa:58:3c:ff:7d:42:2d:bd:c0:
         4b:eb:ee:ea:42:b9:2a:9b:09:77:f6:d6:0c:64:e8:3f:9d:a3:
         cd:48:59:25:ac:d4:01:c6:1d:82:a9:30:b2:a2:91:40:a0:9d:
         b0:56:df:2e:85:fd:d4:00:30:49:ab:28:c0:e1:22:8c:13:f4:
         c8:ae:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:54 2025 by rpki-client