Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/323830343a336436343a3a2f33322d3332203d3e20323636353238.roa
File:                     323830343a336436343a3a2f33322d3332203d3e20323636353238.roa (raw, json)
Hash identifier:          yEfO1IN2xGuqkrgl8GccNYEvb/m3dWil7P62p3oWkts=
Subject key identifier:   7E:08:9D:A1:B9:79:5F:12:1B:C5:2A:7D:87:B1:65:46:1F:6A:6C:65
Certificate issuer:       /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial:       1B675167E40E949E6214D21B54B20886680CB6D9
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/323830343a336436343a3a2f33322d3332203d3e20323636353238.roa
Signing time:             Thu 04 Apr 2024 09:29:33 +0000
ROA not before:           Thu 04 Apr 2024 09:24:33 +0000
ROA not after:            Thu 03 Apr 2025 09:29:33 +0000
asID:                     266528
IP address blocks:        2804:3d64::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 21 May 2024 01:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:67:51:67:e4:0e:94:9e:62:14:d2:1b:54:b2:08:86:68:0c:b6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
        Validity
            Not Before: Apr  4 09:24:33 2024 GMT
            Not After : Apr  3 09:29:33 2025 GMT
        Subject: CN=7E089DA1B9795F121BC52A7D87B165461F6A6C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:3c:7a:25:32:ce:d9:8d:9c:62:d6:f1:2a:
                    2b:ea:20:02:d1:38:76:16:ae:c9:4a:71:3e:89:08:
                    72:f4:2b:d5:1d:45:6d:2c:d4:3a:29:cf:e6:c2:2d:
                    23:d0:0e:43:5b:b9:f9:83:3f:20:a4:0e:a1:07:ef:
                    92:a5:0d:16:2b:6d:ea:41:43:98:67:4c:f7:a9:3f:
                    e5:8f:6d:36:cd:51:ca:52:6e:85:c7:84:8b:68:28:
                    9f:66:f7:26:aa:e3:d3:d9:73:43:26:f2:6f:92:f2:
                    fa:38:88:7e:1a:98:5b:1f:24:02:ce:34:c8:1f:87:
                    53:9a:3d:cd:6e:dd:25:d2:6f:b6:f9:a7:cd:1b:88:
                    1e:fa:ec:31:1c:94:ed:f5:89:c5:1d:04:39:d3:07:
                    87:3f:bb:47:9c:89:b3:37:0a:fe:f6:a7:d9:0a:f3:
                    8e:46:c4:af:cd:7c:3f:bd:9d:3b:7d:e6:29:16:2d:
                    06:bf:6d:99:03:8f:ee:45:b9:5e:c1:1b:68:f5:94:
                    31:2b:9d:d6:c0:47:3d:2c:87:95:10:63:c8:a3:8b:
                    d5:57:b2:cf:ea:53:16:96:5e:d3:57:73:4d:11:9d:
                    da:e8:60:3b:69:84:0d:6d:b0:c9:e5:c4:08:f7:57:
                    05:49:42:6a:89:a1:3c:2f:ae:2e:f2:53:29:29:3d:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:08:9D:A1:B9:79:5F:12:1B:C5:2A:7D:87:B1:65:46:1F:6A:6C:65
            X509v3 Authority Key Identifier:
                keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/323830343a336436343a3a2f33322d3332203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:96:5e:ef:f0:aa:4c:36:a8:bc:a0:f7:09:55:4c:d7:5c:1b:
         c4:bc:2e:35:4b:f8:f7:06:cf:18:24:88:09:be:5d:1e:af:e4:
         1d:ee:33:c0:8f:7f:40:70:55:08:92:5e:cd:9a:9e:76:89:1c:
         ec:f6:1f:d9:c4:8d:96:a8:83:de:81:40:34:7f:22:d1:87:f8:
         a3:89:ec:13:6c:a3:08:0b:e7:e6:ff:5f:6b:fb:d1:e3:1d:9c:
         41:a1:57:b2:7f:4b:47:cd:d8:c6:26:07:fd:e0:f9:04:dd:39:
         47:cc:d8:a3:be:84:1c:05:1c:02:ce:8d:1c:ce:77:16:e1:85:
         4c:62:a7:29:50:26:c0:40:bc:69:57:58:71:42:b5:b6:a9:53:
         14:28:0e:11:4c:11:8e:b1:86:94:5a:8d:7d:7d:91:43:de:3d:
         8f:86:10:1a:3b:a2:bc:6e:98:39:c6:43:fb:5b:c1:91:2c:56:
         e0:b9:59:23:f0:38:93:f7:10:96:1d:a4:62:77:7b:d7:ce:69:
         ab:b6:9e:82:5a:ef:8e:37:f2:33:0f:83:fe:64:00:f8:46:10:
         de:1e:e3:6b:06:e5:72:7b:b3:e7:52:b2:2c:a6:2a:e2:09:55:
         12:c5:a9:5f:cc:02:1b:7d:ab:43:28:f0:67:84:75:2d:0c:5c:
         a1:58:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org