Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/323830343a326462343a343030303a3a2f33342d3438203d3e20323635323938.roa
File:                     323830343a326462343a343030303a3a2f33342d3438203d3e20323635323938.roa (raw, json)
Hash identifier:          pFKRk49bmWCiAZVh1bshi6HHlNfc8pgphTLJY8+KhDE=
Subject key identifier:   BF:06:86:2B:0B:0C:08:53:D3:23:2F:1D:D3:4F:1F:55:49:7E:14:8F
Certificate issuer:       /CN=370671995A405D6D054D647D54E5D57A1BA8394A
Certificate serial:       1038FCB62956A51328993CD12AE9E75C3773FCB1
Authority key identifier: 37:06:71:99:5A:40:5D:6D:05:4D:64:7D:54:E5:D5:7A:1B:A8:39:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370671995A405D6D054D647D54E5D57A1BA8394A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/323830343a326462343a343030303a3a2f33342d3438203d3e20323635323938.roa
Signing time:             Thu 04 Apr 2024 19:31:47 +0000
ROA not before:           Thu 04 Apr 2024 19:26:47 +0000
ROA not after:            Thu 03 Apr 2025 19:31:47 +0000
asID:                     265298
IP address blocks:        2804:2db4:4000::/34 maxlen: 48

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 01:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:38:fc:b6:29:56:a5:13:28:99:3c:d1:2a:e9:e7:5c:37:73:fc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370671995A405D6D054D647D54E5D57A1BA8394A
        Validity
            Not Before: Apr  4 19:26:47 2024 GMT
            Not After : Apr  3 19:31:47 2025 GMT
        Subject: CN=BF06862B0B0C0853D3232F1DD34F1F55497E148F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:81:a6:66:cd:87:41:46:0f:13:71:60:70:
                    c7:6b:ac:42:de:a4:0b:89:c8:a3:7f:74:37:59:fd:
                    af:52:13:47:3c:14:35:cf:6a:d4:98:de:17:04:e7:
                    ee:0a:1b:55:f8:ef:75:73:47:ee:f5:e9:5c:70:2b:
                    ce:42:27:c9:f0:04:e6:ea:d6:6c:09:c5:07:1c:79:
                    11:2f:f0:b2:30:12:80:99:6c:dc:04:d8:78:56:08:
                    73:8d:63:3d:69:ed:bd:c1:bc:42:af:58:0f:92:69:
                    b6:4a:44:d5:1e:dd:1d:db:eb:bc:5c:a8:fb:d8:3a:
                    8a:b2:48:38:45:a6:74:23:92:d8:a5:d5:1d:8a:ea:
                    6a:29:0a:f4:50:03:56:b2:38:ae:2d:9b:4b:24:67:
                    1e:3a:9d:8b:3a:99:87:3a:56:cf:c4:19:f0:05:8b:
                    16:4f:ff:30:b4:9e:e2:77:7c:67:bd:00:ea:cc:34:
                    8f:08:26:9b:6e:b8:d9:49:3c:e4:d1:31:01:f5:7b:
                    5e:58:56:dd:ed:61:d9:37:61:b9:f6:5d:a2:ed:23:
                    88:12:eb:5f:19:ce:11:57:19:7d:52:0a:2f:f4:ae:
                    d5:0a:65:d1:6c:4f:4f:2f:e7:b6:60:ad:8b:90:7c:
                    f2:4e:f7:ec:12:b2:e2:a9:67:69:ef:98:ab:f6:de:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:06:86:2B:0B:0C:08:53:D3:23:2F:1D:D3:4F:1F:55:49:7E:14:8F
            X509v3 Authority Key Identifier:
                keyid:37:06:71:99:5A:40:5D:6D:05:4D:64:7D:54:E5:D5:7A:1B:A8:39:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/370671995A405D6D054D647D54E5D57A1BA8394A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370671995A405D6D054D647D54E5D57A1BA8394A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/323830343a326462343a343030303a3a2f33342d3438203d3e20323635323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2db4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:3a:1c:e8:ef:a8:20:a5:3e:27:bb:ee:f2:09:f2:db:40:d4:
         f5:8f:6d:57:df:51:a4:d1:18:dc:ca:bf:af:ac:33:43:63:68:
         4d:22:02:71:b9:42:9d:5e:9c:11:6a:2e:4d:e9:34:c4:11:53:
         e0:03:93:41:41:d7:29:eb:ae:e6:ab:55:24:6d:52:bb:b2:61:
         e2:3e:49:e3:8a:63:e3:c9:d7:fc:24:3e:48:6b:a6:87:d7:6e:
         55:aa:13:fa:ce:bf:89:7b:ff:e1:51:fe:83:9e:5d:24:4b:a7:
         d5:13:4f:69:73:2f:50:08:b9:ef:01:22:ea:94:75:ac:4b:08:
         af:b5:05:7c:e5:8a:8b:74:17:98:90:c9:98:8a:71:9a:99:8c:
         c6:0d:3b:d8:34:17:77:b9:2a:49:6f:46:81:1d:dc:3f:94:c3:
         06:62:a8:73:1f:7d:f9:8c:8d:22:ab:9a:0e:0c:ae:0a:2b:24:
         cc:9b:d6:74:c2:9a:0d:1c:46:03:74:b0:5f:ec:be:ba:1f:bf:
         b1:fc:48:30:34:27:7b:62:3e:61:81:c8:f7:ee:75:64:4f:ce:
         07:91:51:80:95:6b:a1:c1:78:24:cc:d0:8f:3c:aa:a2:29:34:
         80:6c:b0:dc:89:eb:c6:e5:2f:bd:e1:69:52:04:65:aa:90:71:
         ed:ad:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 06:31:06 2024 by rpki-client on console-fra.rpki-client.org