Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/323830343a323563343a3a2f33322d3336203d3e20323634333031.roa
File:                     323830343a323563343a3a2f33322d3336203d3e20323634333031.roa (raw, json)
Hash identifier:          sIXETPbYIaPLQFe/ZYCVsW64Tx5k/RLllueoHaKTyKI=
Subject key identifier:   1D:67:24:6A:0E:C4:4A:DA:85:36:04:1F:F5:68:83:06:81:38:94:83
Certificate issuer:       /CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B
Certificate serial:       4917CB3219244DE158B2CBE24592EDB9FC594D5B
Authority key identifier: 8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/323830343a323563343a3a2f33322d3336203d3e20323634333031.roa
Signing time:             Thu 05 Sep 2024 14:56:24 +0000
ROA not before:           Thu 05 Sep 2024 14:51:24 +0000
ROA not after:            Thu 04 Sep 2025 14:56:24 +0000
asID:                     264301
IP address blocks:        2804:25c4::/32 maxlen: 36

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 02:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:17:cb:32:19:24:4d:e1:58:b2:cb:e2:45:92:ed:b9:fc:59:4d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B
        Validity
            Not Before: Sep  5 14:51:24 2024 GMT
            Not After : Sep  4 14:56:24 2025 GMT
        Subject: CN=1D67246A0EC44ADA8536041FF568830681389483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:68:c1:7b:ec:ad:e8:cb:cc:d9:6f:3f:92:
                    eb:b0:dd:ee:3f:43:58:69:d5:a4:16:a8:7f:4d:0d:
                    ab:43:a0:3d:75:c0:df:03:96:76:98:22:45:b3:00:
                    fa:ff:c0:c0:5e:aa:73:3a:a4:12:30:9a:79:9d:95:
                    26:70:92:fa:ec:20:7f:53:c3:19:0c:ac:a3:ce:fb:
                    d9:36:6f:ef:6e:89:b8:94:5a:d6:93:1a:01:06:08:
                    12:b0:33:a0:e9:42:c6:e3:c5:04:48:a6:82:e2:f0:
                    19:03:4c:7a:82:7c:2d:b6:2b:55:60:2a:a8:e4:38:
                    81:e4:44:0a:09:fa:c5:61:18:11:10:ab:8d:25:b0:
                    0d:c0:7c:d8:c8:0b:6d:5c:0d:42:72:60:d4:58:4a:
                    88:b4:98:32:b0:6f:1d:fb:52:c5:f7:c6:a2:33:c9:
                    ab:4b:da:1e:8a:fd:93:c7:43:e9:d2:dc:4b:94:b3:
                    a1:7c:ce:58:6f:05:53:78:04:a4:81:c8:16:8c:6e:
                    cd:f2:3b:62:fd:9f:cf:22:88:73:f2:69:43:4f:45:
                    75:aa:43:59:53:29:1c:cf:97:11:91:a3:ef:e8:d8:
                    64:75:09:e8:6f:35:fa:d0:7b:8f:b6:0c:17:8b:da:
                    70:a2:43:67:53:8d:d3:ff:9b:87:9e:1d:a9:59:48:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:67:24:6A:0E:C4:4A:DA:85:36:04:1F:F5:68:83:06:81:38:94:83
            X509v3 Authority Key Identifier:
                keyid:8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/323830343a323563343a3a2f33322d3336203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:e4:20:54:5e:06:87:8d:c2:2e:bc:68:2c:dc:3b:1b:f9:
         fc:b8:47:37:97:f0:1e:f8:71:35:62:78:5f:3c:34:42:6f:29:
         96:68:f5:ff:84:cd:6d:92:f0:16:35:44:a5:5f:24:b8:6f:30:
         9f:ab:d9:ba:ac:e1:d4:d2:c2:05:dd:f5:da:96:97:eb:70:fa:
         ec:a1:08:6a:0b:ee:d5:ce:80:bc:08:9f:93:d5:07:4f:dd:31:
         c7:77:84:55:18:2e:06:d6:b9:67:41:e5:d9:bd:12:3e:c6:fe:
         46:33:ed:c0:f9:12:40:62:bd:38:c8:f2:f3:c5:93:ed:41:4c:
         4f:9a:a6:09:c1:9a:bd:2f:fc:8a:76:5a:a9:ee:88:88:4d:52:
         fb:b9:70:9f:5e:48:05:cc:c3:67:87:79:be:18:90:36:87:ff:
         0c:89:46:06:f5:bf:64:4f:55:e6:7c:70:c1:af:3f:55:b0:75:
         5f:28:89:3f:0a:e5:d0:40:15:fa:ab:d7:0b:36:64:9c:20:d3:
         8b:99:2f:16:e2:ec:d5:48:ab:e5:a6:19:9f:58:b9:d1:c2:6a:
         e7:df:68:54:00:89:ee:08:75:83:20:5c:eb:1f:4f:7f:05:42:
         fa:de:09:75:5c:9b:5b:ef:c0:46:b3:ce:7f:4a:a4:9a:e0:a7:
         17:65:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 05:17:41 2024 by rpki-client on console-fra.rpki-client.org