Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313430303a3a2f34302d3430203d3e20323634303235.roa
File:                     323830343a323939633a313430303a3a2f34302d3430203d3e20323634303235.roa (raw, json)
Hash identifier:          +o5c6+kd//Nwgm8L2TKbITC/ukCQVBGI1CAyrC4M8JQ=
Subject key identifier:   32:FB:B1:AE:81:EB:C3:A5:23:4E:FB:13:77:5B:47:63:AC:4C:F9:52
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       69B5149A75EB0E574A3FDBE5007CD91EE40C2D98
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313430303a3a2f34302d3430203d3e20323634303235.roa
Signing time:             Mon 11 Mar 2024 12:33:02 +0000
ROA not before:           Mon 11 Mar 2024 12:28:02 +0000
ROA not after:            Mon 10 Mar 2025 12:33:02 +0000
asID:                     264025
IP address blocks:        2804:299c:1400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 16:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b5:14:9a:75:eb:0e:57:4a:3f:db:e5:00:7c:d9:1e:e4:0c:2d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar 11 12:28:02 2024 GMT
            Not After : Mar 10 12:33:02 2025 GMT
        Subject: CN=32FBB1AE81EBC3A5234EFB13775B4763AC4CF952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:1c:43:85:36:76:b6:20:2c:f0:af:58:bd:
                    24:e4:05:3f:61:f6:33:d5:30:8f:de:b6:16:8c:09:
                    eb:84:b4:af:71:12:10:09:79:6f:c2:8d:47:fe:de:
                    49:12:38:f9:46:73:47:64:ab:4c:22:be:2d:a1:d6:
                    df:9d:0e:d8:c9:c6:bc:01:ae:63:9b:ff:14:ef:12:
                    83:57:43:be:09:bd:7e:78:72:c4:97:b8:73:f8:c1:
                    0f:e6:1d:81:06:02:91:87:42:36:44:02:03:09:06:
                    c2:00:84:c0:63:72:11:27:2d:7f:94:6f:45:08:bc:
                    0a:8a:fb:93:2b:57:82:83:bf:bb:88:b0:c6:68:0d:
                    ea:70:00:89:b2:57:95:05:2f:d3:60:1f:52:a4:6c:
                    65:63:04:2d:99:ee:74:08:3a:ea:46:11:2e:e5:6f:
                    6d:6b:ea:21:a9:1a:8e:7a:03:e2:7d:52:0f:ae:b5:
                    21:ac:58:24:51:df:98:a6:0d:5f:54:4f:e8:87:72:
                    e0:91:d8:da:6b:24:0b:58:25:57:ab:69:cd:bb:81:
                    ac:4d:2c:e0:f2:76:c2:35:eb:bb:26:69:0d:ce:d0:
                    bb:aa:33:3d:b7:a6:0a:6b:00:e3:21:8f:be:99:a1:
                    ae:d4:d2:aa:ce:d0:91:5c:a3:72:7c:a4:c0:92:af:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FB:B1:AE:81:EB:C3:A5:23:4E:FB:13:77:5B:47:63:AC:4C:F9:52
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313430303a3a2f34302d3430203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:94:5c:4a:e0:cf:d3:34:2d:3f:e8:da:92:78:46:0e:80:00:
         2f:ee:a3:6b:6f:ec:40:b3:bd:61:c3:a1:27:bc:78:02:f8:24:
         c8:e8:b4:95:c4:05:1a:86:8a:7e:2d:90:9a:0c:56:d9:6c:0e:
         00:41:29:f6:1f:c1:ea:5c:41:b3:59:72:1d:56:cc:f7:61:f3:
         6b:4c:89:4e:30:36:38:22:03:04:99:35:6e:25:b0:3c:94:1f:
         a9:0b:ea:6c:fa:9a:b6:da:02:63:39:f7:10:62:13:94:96:d9:
         9c:a7:9c:46:91:e8:da:f8:f0:d3:42:5b:15:34:38:e1:f9:40:
         8e:45:41:3c:0b:db:7b:5b:3e:22:3f:3b:ea:8c:a7:ae:ff:28:
         a3:7a:32:ca:34:d4:00:ed:59:2d:f5:9e:44:8e:cc:26:64:17:
         73:3b:bd:f2:6d:0a:40:31:18:ff:09:04:74:ea:fa:33:65:c4:
         0e:6b:a4:18:dd:ee:24:4d:7e:ae:91:67:d2:69:69:12:42:10:
         f9:e0:f1:e9:51:ce:09:bb:07:d6:39:2c:c6:fe:63:ea:26:1a:
         75:7a:b0:ab:a4:38:5a:ef:9b:4d:40:b2:6e:c1:b8:e7:0c:0a:
         4d:e4:9e:07:d3:c0:e0:87:30:20:42:c1:9c:6e:64:72:de:97:
         22:81:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 19:56:29 2024 by rpki-client on console-fra.rpki-client.org