Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/323830343a326462343a633030303a3a2f33342d3438203d3e20323635323938.roa
File:                     323830343a326462343a633030303a3a2f33342d3438203d3e20323635323938.roa (raw, json)
Hash identifier:          5HUhTPwLD2sxid/91vG3T/B/AkLDwxJm1XnG1ajF8ZM=
Subject key identifier:   E1:01:80:EB:87:B9:A3:2C:04:57:EA:04:A8:1E:0B:68:E2:03:E7:E5
Certificate issuer:       /CN=370671995A405D6D054D647D54E5D57A1BA8394A
Certificate serial:       223AF839B2A7DD9901C16F2F48F65A79D39A2109
Authority key identifier: 37:06:71:99:5A:40:5D:6D:05:4D:64:7D:54:E5:D5:7A:1B:A8:39:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370671995A405D6D054D647D54E5D57A1BA8394A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/323830343a326462343a633030303a3a2f33342d3438203d3e20323635323938.roa
Signing time:             Thu 04 Apr 2024 19:31:47 +0000
ROA not before:           Thu 04 Apr 2024 19:26:47 +0000
ROA not after:            Thu 03 Apr 2025 19:31:47 +0000
asID:                     265298
IP address blocks:        2804:2db4:c000::/34 maxlen: 48

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 01:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3a:f8:39:b2:a7:dd:99:01:c1:6f:2f:48:f6:5a:79:d3:9a:21:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370671995A405D6D054D647D54E5D57A1BA8394A
        Validity
            Not Before: Apr  4 19:26:47 2024 GMT
            Not After : Apr  3 19:31:47 2025 GMT
        Subject: CN=E10180EB87B9A32C0457EA04A81E0B68E203E7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:55:db:4d:e9:66:23:52:22:50:2a:70:d7:
                    15:16:41:2a:38:4c:5a:ad:fb:d2:02:31:27:be:da:
                    d9:42:41:e6:9a:e1:e7:7c:f0:e4:a3:e7:de:95:4c:
                    e6:46:db:f6:04:6e:8a:ea:e7:0b:a1:f3:ef:21:51:
                    4f:d4:b3:5b:8a:b2:ad:cf:42:08:5c:75:3f:e9:81:
                    16:e8:0f:57:fb:39:e4:ac:95:55:e9:57:23:90:fb:
                    72:a9:01:05:b7:c2:e4:71:c4:1e:df:ac:c1:67:f9:
                    77:fa:19:9b:97:a0:23:a1:a6:86:ac:eb:e7:f0:e0:
                    c5:01:7e:c9:6f:c5:f7:4f:5a:84:48:f6:e8:74:9d:
                    6c:fb:1b:e3:6f:9a:15:2f:2c:06:70:8a:a9:48:0b:
                    f0:17:30:36:a8:0e:08:57:6d:38:d6:31:3c:4d:07:
                    f1:19:30:95:87:4f:fd:27:41:19:07:9f:6f:ea:8e:
                    79:98:7f:bb:8f:0e:02:8c:22:a8:46:90:ff:e3:5e:
                    30:d5:a1:2f:99:a6:87:87:b0:ca:76:89:82:9d:4d:
                    6a:1d:c8:24:e0:13:1b:49:c0:fc:7c:9b:8c:36:84:
                    cb:ec:bd:56:e7:83:60:df:82:44:10:7e:04:57:66:
                    96:15:16:a3:8c:19:a9:ef:b7:a8:46:e7:41:bf:c6:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:01:80:EB:87:B9:A3:2C:04:57:EA:04:A8:1E:0B:68:E2:03:E7:E5
            X509v3 Authority Key Identifier:
                keyid:37:06:71:99:5A:40:5D:6D:05:4D:64:7D:54:E5:D5:7A:1B:A8:39:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/370671995A405D6D054D647D54E5D57A1BA8394A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370671995A405D6D054D647D54E5D57A1BA8394A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/1/323830343a326462343a633030303a3a2f33342d3438203d3e20323635323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2db4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:cd:9e:2b:2b:41:5c:ab:e2:35:32:a5:5a:b5:dc:f2:41:8f:
         5d:71:f1:7d:1e:31:f2:ed:b5:42:32:95:b4:92:26:af:f3:1f:
         86:f0:b7:52:a9:79:f8:24:1f:b4:f9:4c:a2:e7:6c:cc:6a:93:
         20:8d:a1:c4:48:6f:d6:c4:2c:27:19:e7:f7:5b:b6:6b:3b:65:
         b0:d7:68:78:13:ad:fb:6a:86:79:a5:6a:a5:6c:bc:e9:b7:fe:
         68:6c:be:d3:26:fb:96:c4:95:b6:aa:8c:07:05:8a:55:84:02:
         c6:67:65:ae:55:61:10:d7:27:31:ce:11:aa:f2:58:d7:cd:9a:
         18:6c:73:aa:65:5a:a6:a3:13:04:d9:28:8c:bc:74:34:e3:c7:
         5c:72:03:d3:cd:5b:30:b6:09:6a:2c:26:76:b5:de:fd:00:2b:
         38:2a:2c:c1:88:49:2a:2f:99:86:74:8e:54:49:9f:d9:56:8f:
         4c:bc:a0:b1:1f:f1:15:c5:42:f5:b0:66:36:03:37:73:a8:d0:
         48:e9:a5:51:d6:46:77:04:3e:41:bb:51:d8:e4:59:5c:9f:3b:
         47:e6:04:8f:7c:6c:33:5d:e7:09:2c:7d:55:3c:5c:7c:02:9b:
         8e:97:a4:c8:81:32:ba:e5:fe:24:af:14:ec:9f:f1:e2:ac:e2:
         61:8c:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 06:31:06 2024 by rpki-client on console-fra.rpki-client.org