Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a3a2f33322d3332203d3e20323637333636.roa
File:                     323830343a346335633a3a2f33322d3332203d3e20323637333636.roa (raw, json)
Hash identifier:          6hRchBcL0M4v2fmDBuxM1VB+qtoE04wUGvjT/rhw5T0=
Subject key identifier:   69:51:C0:14:79:A9:94:22:7C:08:D3:2E:E2:3E:E4:88:47:0A:6C:D0
Certificate issuer:       /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial:       1CEC43711AD7C87C9B562901A55F34C0FA4BBD3B
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a3a2f33322d3332203d3e20323637333636.roa
Signing time:             Tue 23 Apr 2024 13:50:59 +0000
ROA not before:           Tue 23 Apr 2024 13:45:59 +0000
ROA not after:            Tue 22 Apr 2025 13:50:59 +0000
asID:                     267366
IP address blocks:        2804:4c5c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ec:43:71:1a:d7:c8:7c:9b:56:29:01:a5:5f:34:c0:fa:4b:bd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
        Validity
            Not Before: Apr 23 13:45:59 2024 GMT
            Not After : Apr 22 13:50:59 2025 GMT
        Subject: CN=6951C01479A994227C08D32EE23EE488470A6CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:a7:9e:bf:8d:7d:2b:2e:cf:5d:25:77:08:
                    c7:99:22:28:17:3b:91:10:13:89:0e:b6:cc:74:17:
                    16:c9:fb:61:f2:1d:65:70:e2:23:c4:c6:25:dd:cd:
                    bc:87:93:b0:70:a1:a4:a9:cc:dd:c9:72:c6:b4:0e:
                    9f:40:d6:eb:d9:f3:32:97:a1:1c:84:16:eb:1e:9c:
                    f7:37:00:e3:a5:18:26:50:e2:02:72:6c:64:d1:4f:
                    f1:3d:ab:3b:5f:12:96:00:72:71:58:9f:5e:c6:31:
                    72:37:b0:90:3e:01:92:7e:6c:15:6b:a7:fc:ed:39:
                    d8:dc:09:6b:20:05:aa:1e:57:0c:cf:74:73:e3:79:
                    e9:e0:90:39:7c:70:b9:8e:b6:5a:49:8b:ce:f0:9a:
                    d2:8f:53:46:d7:22:17:20:87:aa:8b:62:c0:61:b2:
                    61:70:26:75:16:7f:cd:d2:ee:dd:44:95:75:99:81:
                    6f:4b:d5:94:c6:19:57:1f:ef:f9:57:b4:65:a9:b7:
                    16:43:6b:b3:5f:a7:5b:53:46:91:41:8e:66:09:76:
                    ed:28:44:f0:d7:19:50:3c:f4:2b:1f:52:e4:75:96:
                    1f:9e:1c:05:57:dc:cd:b6:b8:f0:85:36:53:46:30:
                    b8:8b:45:ea:62:48:ad:5a:93:a6:e6:a0:57:55:c1:
                    19:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:51:C0:14:79:A9:94:22:7C:08:D3:2E:E2:3E:E4:88:47:0A:6C:D0
            X509v3 Authority Key Identifier:
                keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/323830343a346335633a3a2f33322d3332203d3e20323637333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:bd:4d:b2:0f:7f:e6:bc:88:80:6e:da:3a:b6:ec:08:91:be:
         b3:d9:c0:44:82:4b:59:f9:5b:dd:45:23:3d:f9:e7:27:53:9b:
         87:49:5f:c9:7b:4e:9d:ec:c6:56:75:9c:f5:40:0f:eb:b8:1d:
         71:74:c3:3b:d8:3c:81:b7:07:52:1f:7d:95:66:8a:2c:f7:02:
         1b:84:d0:53:47:15:d0:85:a7:26:43:98:c2:66:ba:14:11:21:
         06:2b:46:bb:f1:e4:06:f3:00:ee:b7:c6:e9:2e:46:b7:ce:80:
         3a:9d:93:0d:34:a5:95:d7:8f:03:b2:59:3f:7e:ee:e4:7f:b1:
         6a:5f:7f:b7:82:8e:17:ca:70:1e:69:08:68:06:76:7f:54:08:
         68:af:7e:b6:6e:3c:27:0d:2a:dd:ef:9a:b8:9a:32:df:36:9a:
         55:cd:d0:46:1d:2d:cc:b6:a9:ba:bb:35:15:ce:e2:8d:35:43:
         f7:c2:cd:f8:82:fe:8e:bd:77:fa:9c:66:ef:24:61:fc:a5:e8:
         5f:eb:93:62:b4:63:11:14:66:47:83:0b:41:a4:50:ba:13:c0:
         f2:b4:0d:31:a9:da:e5:9d:81:a2:e2:95:f1:7a:0c:34:20:5c:
         29:5c:97:3e:e9:ac:d1:52:fd:a9:94:1d:60:4d:b8:d7:35:26:
         67:0a:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org