Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3332203d3e20323634343134.roa
File:                     323830343a316533343a3a2f33322d3332203d3e20323634343134.roa (raw, json)
Hash identifier:          kcKS9RVqJlv0yDGCFydGjAasmbSp3ZwpVJEgkMjD+Uc=
Subject key identifier:   8E:9C:EF:47:02:AE:E1:4C:DA:F2:5A:52:E1:3A:FC:62:F6:25:FA:77
Certificate issuer:       /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial:       40C133E9A2A1A3A40727C866963088D105D6232C
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3332203d3e20323634343134.roa
Signing time:             Thu 18 Apr 2024 19:36:27 +0000
ROA not before:           Thu 18 Apr 2024 19:31:27 +0000
ROA not after:            Thu 17 Apr 2025 19:36:27 +0000
asID:                     264414
IP address blocks:        2804:1e34::/32 maxlen: 32
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c1:33:e9:a2:a1:a3:a4:07:27:c8:66:96:30:88:d1:05:d6:23:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
        Validity
            Not Before: Apr 18 19:31:27 2024 GMT
            Not After : Apr 17 19:36:27 2025 GMT
        Subject: CN=8E9CEF4702AEE14CDAF25A52E13AFC62F625FA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:f1:2f:74:3b:af:1e:42:cb:56:e2:02:e0:
                    7c:9b:9d:1e:ae:f1:f9:e9:a4:97:75:a0:e7:d1:0c:
                    81:af:f2:8c:73:63:5d:60:e3:52:a9:ea:bb:12:63:
                    f7:97:5c:ac:ea:f6:d2:cd:57:22:6c:26:37:c5:25:
                    4b:35:7e:30:d0:5e:f6:10:6c:b2:36:87:79:91:87:
                    c8:58:5f:a6:29:37:1d:da:56:11:00:56:b6:72:33:
                    3b:da:50:58:d2:61:aa:96:45:4b:65:1f:ce:6b:d0:
                    7d:59:b7:36:51:b5:38:c4:50:e4:52:85:75:b0:25:
                    4e:07:91:fc:da:2d:0b:33:01:91:8b:12:e1:95:fc:
                    51:e1:88:7c:26:54:9e:03:71:af:02:4a:6f:dc:20:
                    c7:30:3a:90:57:20:25:97:f3:2b:e1:ad:52:53:90:
                    78:37:aa:2d:38:35:4b:72:3b:6f:5d:71:7a:48:83:
                    36:f4:aa:7a:ad:0c:41:04:67:b3:a2:61:33:aa:72:
                    ff:0f:b8:8c:47:77:dd:f6:1d:cd:e2:c5:8c:ed:5d:
                    8a:b4:f9:86:b7:4d:44:45:81:99:c5:75:2c:5e:6f:
                    2a:60:e4:99:3f:b8:97:60:2a:c5:98:d8:1e:80:be:
                    2f:4f:1d:17:7f:55:d1:ef:c4:b0:2b:d0:1f:90:db:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:EF:47:02:AE:E1:4C:DA:F2:5A:52:E1:3A:FC:62:F6:25:FA:77
            X509v3 Authority Key Identifier:
                keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3332203d3e20323634343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:f2:87:79:c7:88:0a:76:de:08:62:e3:7c:16:50:7c:34:
         ca:05:4d:ee:24:a7:8e:57:c0:ed:63:15:ea:1a:02:63:11:a2:
         43:75:49:72:00:bc:8b:3a:2e:0c:7c:43:2a:78:49:f3:ac:b0:
         ee:00:3c:d6:03:10:50:36:7c:0e:40:8e:e6:aa:20:5b:6f:6a:
         30:7a:9b:df:6c:90:23:fb:a1:d1:18:c0:d3:1a:fe:f8:87:6e:
         b4:93:18:dd:d9:6d:8c:74:58:b9:c0:06:6d:0d:3a:6e:f9:54:
         02:18:34:ea:0f:04:cb:45:1c:8c:f0:d2:1a:36:77:e5:e7:56:
         41:a4:59:21:16:67:c6:58:e7:97:d5:0a:fa:92:4f:d8:cb:69:
         dc:1c:04:42:a6:35:5e:c4:79:c0:8a:18:ba:36:c6:40:bf:2d:
         3a:25:06:a0:98:4b:42:64:3f:cd:07:d1:5c:8b:29:68:61:f3:
         f0:0d:33:ef:a9:36:0a:a7:f1:c1:a7:ef:40:3e:3b:d8:21:ac:
         b7:32:2c:d3:54:56:92:c4:35:de:70:1f:79:05:92:88:d7:a9:
         52:4e:f8:6b:62:ce:ab:ff:64:73:43:cb:c2:ca:04:b0:22:95:
         d0:5e:33:ce:f3:78:be:e9:9b:76:2b:53:4d:64:21:2b:b2:a6:
         9c:75:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:16 2025 by rpki-client