Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33332d3438203d3e20323638323937.roa
File:                     323830343a346630303a3a2f33332d3438203d3e20323638323937.roa (raw, json)
Hash identifier:          Qw1zuUVxLLSJSajRSHvpc0HGc/7XYN+L+yxPmYSYWHM=
Subject key identifier:   91:89:23:70:C8:D0:CB:3C:62:2F:0F:6F:48:27:F7:04:E7:F8:70:3F
Certificate issuer:       /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial:       7C70DE1AA003C288B5BCB000B26BF5C4F125084E
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33332d3438203d3e20323638323937.roa
Signing time:             Sat 08 Feb 2025 21:32:18 +0000
ROA not before:           Sat 08 Feb 2025 21:27:18 +0000
ROA not after:            Sat 07 Feb 2026 21:32:18 +0000
asID:                     268297
IP address blocks:        2804:4f00::/33 maxlen: 48
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 11:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:70:de:1a:a0:03:c2:88:b5:bc:b0:00:b2:6b:f5:c4:f1:25:08:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
        Validity
            Not Before: Feb  8 21:27:18 2025 GMT
            Not After : Feb  7 21:32:18 2026 GMT
        Subject: CN=91892370C8D0CB3C622F0F6F4827F704E7F8703F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:59:92:a3:bc:b2:e7:08:5b:ac:80:42:1f:
                    37:ab:2a:03:84:42:42:6e:2b:9a:99:5d:98:6f:14:
                    f8:d8:53:56:49:0e:52:82:f5:44:00:a4:d9:6b:d3:
                    3c:52:8c:40:db:48:51:02:2c:6d:3b:df:cb:8d:5a:
                    81:a5:b1:d9:50:74:be:c7:b5:db:08:74:48:38:fc:
                    38:f1:8f:2d:8d:c4:2c:9f:5f:67:c2:af:34:c1:b6:
                    75:a0:2c:ca:7e:bb:c2:84:cc:36:82:01:48:46:ea:
                    b5:00:cf:0b:2d:10:73:1e:af:c3:ca:14:c2:b6:92:
                    6d:cf:72:97:ee:b6:e2:fc:8c:b8:c5:f7:df:40:bd:
                    5a:d1:b6:19:fd:42:16:9a:23:70:ad:7e:1c:04:f6:
                    10:77:7b:46:52:f4:9f:31:dd:69:d7:ed:49:35:c6:
                    e1:f9:de:3e:4f:4b:f8:4c:dd:7d:26:7f:f7:83:9c:
                    2e:e9:7e:9d:90:cb:79:60:5e:2e:bf:3a:21:0e:04:
                    15:23:a9:cb:fd:a3:27:08:a6:6b:1d:33:f1:cf:65:
                    8d:58:9c:08:bf:bd:90:35:cd:d9:d6:54:8b:73:d6:
                    58:c9:1b:fa:e3:ad:3f:48:7e:cb:40:38:02:bf:11:
                    a7:64:d2:3a:f0:6c:1c:5e:b2:96:0c:61:cb:06:ad:
                    c4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:89:23:70:C8:D0:CB:3C:62:2F:0F:6F:48:27:F7:04:E7:F8:70:3F
            X509v3 Authority Key Identifier:
                keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33332d3438203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f00::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:38:9d:5b:fb:f2:50:b1:eb:4f:53:1d:46:44:35:8c:f1:a7:
         45:e6:03:f4:c1:23:ea:78:cb:86:de:5a:1a:ec:6d:00:85:94:
         fa:52:2b:04:e7:4a:16:f0:6b:f0:c8:08:76:61:5f:55:92:16:
         f5:e2:db:39:fc:b0:05:44:2c:77:83:bf:4c:08:e0:31:81:73:
         14:7d:ba:8b:f1:29:b2:57:1f:10:16:92:54:c6:1c:9b:e0:08:
         91:2e:95:93:d5:76:65:2b:b0:9d:31:75:07:a1:71:dd:ec:5f:
         5c:ca:6c:54:69:f7:8b:94:d4:c6:a4:65:7f:86:2d:bc:2f:2e:
         9a:e9:05:c2:51:74:9c:e1:33:3d:f4:9b:e3:b1:ea:75:07:88:
         c7:e9:ba:cb:09:bf:b1:85:b2:f9:79:00:56:f8:5c:68:2b:43:
         47:f5:44:f2:c7:ae:4e:d8:e9:f4:32:b8:8d:1b:38:9b:52:5f:
         25:ee:86:ab:ba:ac:2d:ef:2e:24:2c:ab:3e:cf:fa:f2:2f:c5:
         9f:4a:f0:a1:34:e3:8d:33:b6:33:f4:14:c3:61:2c:02:a6:b5:
         74:d0:65:3a:7e:7a:c6:ac:42:11:76:1f:53:f8:ba:6a:5a:47:
         08:b4:de:db:6e:c4:6b:70:34:cc:0b:b4:e1:86:a9:43:fb:42:
         25:86:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:08:43 2025 by rpki-client