Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a3a2f33322d3333203d3e20323633303439.roa
File:                     323830343a6665303a3a2f33322d3333203d3e20323633303439.roa (raw, json)
Hash identifier:          4n/Xg3EPusrDumtz/nV0ned+k4lHt9eYFKQFEVNOfAs=
Subject key identifier:   F6:56:84:63:96:7A:30:CA:77:98:E4:05:EA:37:D8:00:CF:4E:BA:62
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       35FE1A1B74B5A8A64924425BCADA4802D72E3B92
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a3a2f33322d3333203d3e20323633303439.roa
Signing time:             Thu 06 Mar 2025 05:04:34 +0000
ROA not before:           Thu 06 Mar 2025 04:59:34 +0000
ROA not after:            Thu 05 Mar 2026 05:04:34 +0000
asID:                     263049
IP address blocks:        2804:fe0::/32 maxlen: 33
Validation:               Failed, certificate revoked on Wed 16 Apr 2025 19:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fe:1a:1b:74:b5:a8:a6:49:24:42:5b:ca:da:48:02:d7:2e:3b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Mar  6 04:59:34 2025 GMT
            Not After : Mar  5 05:04:34 2026 GMT
        Subject: CN=F6568463967A30CA7798E405EA37D800CF4EBA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:08:eb:2d:02:8d:ff:25:7c:9b:5c:d3:37:
                    ae:3e:08:75:b1:0b:42:c5:13:ae:05:c7:89:4f:af:
                    82:a8:af:3c:e8:f8:b8:73:25:ee:13:ca:bc:b4:bb:
                    a5:71:25:88:ef:a9:11:3e:27:7a:e6:1f:6f:0c:3e:
                    dc:94:9c:a4:6e:61:0c:d6:f4:33:1a:9f:b0:82:89:
                    be:b0:c1:f3:e3:58:f5:5e:bf:7c:64:b9:24:62:26:
                    9d:61:89:f5:90:1b:02:ff:53:07:00:e0:dd:11:60:
                    d8:5d:6e:f5:f9:13:25:53:df:56:08:45:a7:6d:63:
                    a5:0b:42:1d:39:8e:24:a5:dc:f2:a5:c4:bf:40:2f:
                    7d:30:81:b9:a8:87:5b:45:93:a4:e9:de:15:6d:01:
                    8c:34:d0:87:91:6c:3e:c5:3f:be:aa:93:c7:1a:a5:
                    be:bb:8e:b9:b5:22:3e:51:b4:02:f4:d5:70:35:8e:
                    df:6c:cf:6e:4f:59:8b:b2:98:77:26:ed:bf:20:3b:
                    2a:dc:70:61:7f:55:56:dc:94:17:6e:c4:9e:a0:bc:
                    17:46:2e:32:90:97:f8:45:e7:eb:17:fc:32:b3:b4:
                    9f:76:c3:4a:e5:fb:ed:76:c0:40:e0:76:5c:3a:ce:
                    35:43:6e:da:71:46:7a:8d:94:33:ff:f0:d7:56:c9:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:84:63:96:7A:30:CA:77:98:E4:05:EA:37:D8:00:CF:4E:BA:62
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a3a2f33322d3333203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:9e:56:2c:5a:e6:5a:9c:75:64:cc:28:9d:37:45:86:5e:82:
         e9:dd:1d:c1:8e:92:ec:93:7d:68:b0:d3:2e:3e:a1:84:fb:c2:
         72:f1:5f:10:7c:ac:96:22:34:6f:3a:d5:d2:69:f6:c3:83:85:
         1c:49:fd:d0:f5:5c:e9:22:92:b8:88:23:81:72:fc:7f:ec:4f:
         17:9d:7f:ab:05:81:3d:70:c1:7b:ec:5a:15:f7:4f:6e:71:b7:
         c1:41:b7:9c:55:17:28:5f:a1:c6:c9:36:c2:ea:73:35:ba:ee:
         ba:e6:03:3b:84:0f:b5:1b:36:ff:c9:93:46:3b:42:e9:aa:1c:
         07:82:d3:ad:d3:e7:66:8a:23:10:53:0c:64:7b:8d:b4:a7:49:
         09:e4:7a:f0:6e:13:fe:0e:4a:8c:da:4a:06:4b:8e:de:85:60:
         96:ca:e8:a7:68:3c:34:0f:e3:be:e3:11:8a:7f:c6:1e:bb:29:
         4d:43:bb:8d:38:3d:1a:e0:b4:10:19:f8:4d:2c:96:70:b9:c9:
         e9:5a:ca:18:68:6e:49:19:63:05:0c:f3:38:99:0e:31:ca:b0:
         47:5f:f6:1e:99:69:1f:cc:a2:17:d4:1d:55:85:0e:b7:19:1f:
         a0:aa:fc:46:a3:2c:2a:3f:de:58:06:75:d6:a0:c0:e1:3a:6a:
         9d:b0:bb:7e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNf4aG3S1qKZJJEJbytpIAtcuO5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzNTJENzREMzc3OEYyNDIyQ0UwRTk2RkM1MzA3MUUx
ODkzNTQwNTAeFw0yNTAzMDYwNDU5MzRaFw0yNjAzMDUwNTA0MzRaMDMxMTAvBgNV
BAMTKEY2NTY4NDYzOTY3QTMwQ0E3Nzk4RTQwNUVBMzdEODAwQ0Y0RUJBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5QjrLQKN/yV8m1zTN64+CHWx
C0LFE64Fx4lPr4Korzzo+LhzJe4Tyry0u6VxJYjvqRE+J3rmH28MPtyUnKRuYQzW
9DMan7CCib6wwfPjWPVev3xkuSRiJp1hifWQGwL/UwcA4N0RYNhdbvX5EyVT31YI
RadtY6ULQh05jiSl3PKlxL9AL30wgbmoh1tFk6Tp3hVtAYw00IeRbD7FP76qk8ca
pb67jrm1Ij5RtAL01XA1jt9sz25PWYuymHcm7b8gOyrccGF/VVbclBduxJ6gvBdG
LjKQl/hF5+sX/DKztJ92w0rl++12wEDgdlw6zjVDbtpxRnqNlDP/8NdWycDXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9laEY5Z6MMp3mOQF6jfYAM9OumIwHwYDVR0j
BBgwFoAUUTUtdNN3jyQizg6W/FMHHhiTVAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRGTHBzbnZGTjhuSk0yTjU4TXNTM0g3UWh6V3dKY0c2NEZMS1VoWGp0
dFEvMS81MTM1MkQ3NEQzNzc4RjI0MjJDRTBFOTZGQzUzMDcxRTE4OTM1NDA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxMzUyRDc0RDM3NzhGMjQy
MkNFMEU5NkZDNTMwNzFFMTg5MzU0MDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkRkxwc252Rk44bkpNMk41OE1zUzNIN1Foeld3SmNHNjRGTEtVaFhqdHRRLzEv
MzIzODMwMzQzYTY2NjUzMDNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzYzMzMw
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED+AwDQYJKoZIhvcNAQELBQADggEBAFKeVixa5lqc
dWTMKJ03RYZegundHcGOkuyTfWiw0y4+oYT7wnLxXxB8rJYiNG861dJp9sODhRxJ
/dD1XOkikriII4Fy/H/sTxedf6sFgT1wwXvsWhX3T25xt8FBt5xVFyhfocbJNsLq
czW67rrmAzuED7UbNv/Jk0Y7QumqHAeC063T52aKIxBTDGR7jbSnSQnkevBuE/4O
SozaSgZLjt6FYJbK6KdoPDQP477jEYp/xh67KU1Du404PRrgtBAZ+E0slnC5yela
yhhobkkZYwUM8ziZDjHKsEdf9h6ZaR/MohfUHVWFDrcZH6Cq/EajLCo/3lgGddag
wOE6ap2wu34=
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:40:16 2025 by rpki-client