Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa
File:                     323830343a3863383a3a2f33322d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          1XA3/OGlVLBN4zij/2GCkAOA6H23CXXbxe5iqN9Iy1Q=
Subject key identifier:   3D:9B:87:55:64:18:2F:F0:36:88:CD:81:FC:6C:9C:11:D2:25:BB:C9
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       3D385D6629C2C2B7DF1E50401264EFF8EC3F1467
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa
Signing time:             Thu 04 Apr 2024 18:32:48 +0000
ROA not before:           Thu 04 Apr 2024 18:27:48 +0000
ROA not after:            Thu 03 Apr 2025 18:32:48 +0000
asID:                     262393
IP address blocks:        2804:8c8::/32 maxlen: 35

Validation:               Failed, certificate revoked on Thu 02 May 2024 20:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:38:5d:66:29:c2:c2:b7:df:1e:50:40:12:64:ef:f8:ec:3f:14:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Apr  4 18:27:48 2024 GMT
            Not After : Apr  3 18:32:48 2025 GMT
        Subject: CN=3D9B875564182FF03688CD81FC6C9C11D225BBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:32:01:df:19:ac:e4:2b:70:b3:79:1d:89:
                    06:f8:2e:ec:29:74:2c:3c:f2:d4:c9:99:ff:c0:82:
                    fc:a5:c6:c9:c0:cf:88:a9:aa:93:24:de:39:2b:8c:
                    18:3d:f7:91:8a:07:ce:a1:2d:c9:06:4f:9f:7e:62:
                    4b:1f:04:06:9e:f0:7a:c6:9a:dc:59:fe:73:3b:66:
                    ba:b4:98:3b:ae:bb:cd:55:1f:36:d9:e3:99:04:47:
                    0b:45:af:5a:d5:26:08:22:f8:76:ae:1c:b1:9d:ee:
                    33:24:33:d0:ab:09:ef:f4:d9:de:42:aa:e7:bf:ff:
                    97:52:61:4b:a6:54:4a:8e:82:9e:f6:0f:46:74:e9:
                    68:b8:65:1e:ec:2b:42:1f:71:25:2a:57:b5:99:70:
                    33:3e:29:3b:8d:f3:cf:41:64:b2:d8:bf:d4:d4:68:
                    71:08:47:e7:6a:dd:4a:75:88:62:39:c8:70:b7:a1:
                    94:61:1f:70:a4:5e:2e:bd:0a:6a:de:5e:30:2e:bf:
                    4f:f3:b5:dd:16:47:6a:87:88:44:d6:64:d4:1d:16:
                    a5:25:f4:c8:1c:00:8e:95:41:d3:61:85:7d:c5:19:
                    0d:7b:d2:36:6b:df:75:d9:4d:9c:b3:d9:52:97:1f:
                    ce:09:3c:28:b2:cd:ca:ab:0f:94:d9:f0:23:73:b2:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9B:87:55:64:18:2F:F0:36:88:CD:81:FC:6C:9C:11:D2:25:BB:C9
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:f3:f0:26:86:20:93:5b:0a:5c:a5:7b:c5:b2:bb:44:e6:ac:
         40:83:36:27:ba:f8:74:33:ac:42:17:33:dd:92:53:05:62:1d:
         0b:44:90:8d:96:d1:75:45:ef:ec:ad:e8:9d:fe:c4:97:0a:e1:
         90:60:f1:70:f9:9a:ea:51:87:6e:0d:ad:36:be:dd:5e:00:68:
         62:39:62:89:df:02:bc:32:f5:85:7a:24:c3:3c:37:ac:79:41:
         92:03:34:33:61:71:fe:71:29:21:d4:d6:a9:7d:5b:2b:67:4e:
         1a:f8:a9:44:b9:01:d8:75:d1:b0:77:a0:bd:ba:ad:ab:83:41:
         a0:fe:63:ea:f5:d8:ee:0e:f1:0e:73:ba:2f:31:9c:cc:15:83:
         14:d6:38:84:1e:b0:31:f0:68:7d:9e:b6:db:5a:e5:ee:78:2a:
         d2:04:9f:73:3a:47:b5:df:db:6c:77:d3:5a:2f:b2:dd:a4:32:
         5b:2f:7c:5b:5f:f6:27:53:19:d6:a3:de:e4:c2:c2:f4:39:cd:
         f1:cc:2a:34:2c:ae:67:ce:fc:74:0a:80:07:55:27:c2:63:97:
         0e:64:44:3d:ce:1f:2b:46:0a:0e:a6:97:91:a2:9d:8b:ab:23:
         46:e3:10:f4:cc:5b:cb:b2:89:32:98:07:22:0f:fa:21:00:ac:
         98:f4:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org