Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a3a2f33322d3332203d3e20323632343434.roa
File:                     323830343a6437383a3a2f33322d3332203d3e20323632343434.roa (raw, json)
Hash identifier:          rBVUx8UAjPgVrOAmhROO/bjNiCbrOjEcZH1B0d+TzW4=
Subject key identifier:   D7:F5:A1:E2:C0:73:1C:00:B5:17:72:EC:DB:BC:3D:C7:39:1D:76:5E
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       28476155FE872098D69FC79798B77D838E85B7E9
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a3a2f33322d3332203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:43 +0000
ROA not before:           Wed 07 Aug 2024 13:09:43 +0000
ROA not after:            Wed 06 Aug 2025 13:14:43 +0000
asID:                     262444
IP address blocks:        2804:d78::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:47:61:55:fe:87:20:98:d6:9f:c7:97:98:b7:7d:83:8e:85:b7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:43 2024 GMT
            Not After : Aug  6 13:14:43 2025 GMT
        Subject: CN=D7F5A1E2C0731C00B51772ECDBBC3DC7391D765E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:ef:86:82:fd:08:63:12:97:ab:7d:96:cf:
                    07:7d:54:8b:6a:0f:1d:b6:39:46:cf:6a:1e:e3:10:
                    6b:a8:24:f0:05:ca:16:b7:92:bb:49:ce:58:11:56:
                    6b:f4:7f:0f:cd:c1:cd:f5:68:94:21:8a:47:eb:9d:
                    49:fa:af:83:2a:28:f4:7f:3f:11:65:be:00:d2:2f:
                    26:4e:17:e1:fd:ed:4c:05:25:b5:e3:27:7d:8d:29:
                    d0:ab:cc:ee:fc:da:3b:cc:f4:a4:f9:9c:79:d0:42:
                    5d:5c:0f:e3:73:45:e6:09:79:6c:2b:b5:30:52:a0:
                    d7:85:ff:6d:0a:80:f0:84:75:c4:bf:a3:89:bf:4a:
                    d8:ce:f0:2c:09:9b:e5:d6:ce:7b:ab:b1:5c:74:d2:
                    8d:18:0f:0c:56:27:e5:ae:3b:8e:c8:51:2d:27:12:
                    cc:e9:17:8d:21:9b:2a:5f:d2:73:94:5c:e6:43:6e:
                    12:40:1f:06:bd:6a:30:37:ef:cd:01:fd:57:dd:e4:
                    05:aa:6d:f8:aa:08:22:27:f8:17:db:7f:3c:a6:d5:
                    2c:ff:9e:87:3b:c0:89:08:e7:ea:b7:5f:6d:9e:f9:
                    19:7b:d0:e6:21:9c:79:91:c8:8a:ad:c1:8b:8b:f2:
                    64:e6:57:f6:5a:34:37:85:ca:41:7d:e0:0e:bc:8b:
                    cc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:A1:E2:C0:73:1C:00:B5:17:72:EC:DB:BC:3D:C7:39:1D:76:5E
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a3a2f33322d3332203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d78::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:50:ca:18:b7:b1:71:cd:29:0e:dc:40:0c:2e:82:a9:e3:20:
         8a:7b:cd:bd:cb:bc:38:78:fa:f5:b6:ac:8a:1c:89:7d:fb:4d:
         b6:30:14:4d:fb:c4:60:d6:42:97:1e:39:1a:61:89:27:4c:b9:
         40:ca:d6:4f:48:cf:62:79:fb:ce:59:ce:15:af:f7:2c:17:d2:
         68:84:37:e5:ce:70:a0:27:21:5d:90:ad:4b:f6:09:fb:fd:8e:
         eb:16:8f:7f:c9:af:35:0a:0c:6d:9d:24:3a:85:1b:0b:b4:d7:
         82:35:d2:bf:92:61:05:99:cf:a0:6a:5f:90:3f:73:d8:42:dd:
         ee:d1:15:4f:6f:83:0e:2c:55:c8:d1:2d:d0:7f:65:32:b0:5b:
         58:ad:dc:ce:57:fe:70:fa:c4:76:82:55:ad:b2:5d:62:d9:71:
         35:c0:5d:dc:71:5e:6b:4e:f2:ba:47:ad:38:bf:e0:b0:7a:f7:
         85:8f:6f:bc:6b:38:1e:01:41:1c:a3:9a:e6:86:01:b2:98:44:
         a4:fe:bb:84:41:0d:38:db:dc:45:0a:f5:9d:8e:28:c6:c3:80:
         45:28:0b:ff:b6:75:89:07:7d:79:52:2f:99:0f:f0:d2:69:9d:
         b7:c7:70:c8:3d:c2:8a:3e:93:8b:24:aa:6d:95:60:07:bf:f2:
         99:36:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 20:49:34 2024 by rpki-client on console-fra.rpki-client.org