Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/323830343a63303a3a2f33322d3332203d3e203533313030.roa
File:                     323830343a63303a3a2f33322d3332203d3e203533313030.roa (raw, json)
Hash identifier:          aFK8ZAeSKXSlGCK+qXiRW/emhqmSeItuuFbVOFkc9Gc=
Subject key identifier:   1A:17:70:B0:BF:02:D6:33:D3:82:5A:9E:45:30:63:9A:38:FB:66:90
Certificate issuer:       /CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
Certificate serial:       33989AB96435F8ABC604BFC0405A487430A30165
Authority key identifier: FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/323830343a63303a3a2f33322d3332203d3e203533313030.roa
Signing time:             Tue 30 Apr 2024 18:18:27 +0000
ROA not before:           Tue 30 Apr 2024 18:13:27 +0000
ROA not after:            Tue 29 Apr 2025 18:18:27 +0000
asID:                     53100
IP address blocks:        2804:c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:98:9a:b9:64:35:f8:ab:c6:04:bf:c0:40:5a:48:74:30:a3:01:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
        Validity
            Not Before: Apr 30 18:13:27 2024 GMT
            Not After : Apr 29 18:18:27 2025 GMT
        Subject: CN=1A1770B0BF02D633D3825A9E4530639A38FB6690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:e1:a0:7e:13:c3:c2:ec:cb:61:31:c3:10:
                    19:c3:1c:4f:42:a0:9b:c8:43:20:6a:c9:ec:3a:3c:
                    76:91:36:2c:d9:50:f0:3a:5c:2f:86:ce:e6:1a:f5:
                    c7:cb:79:8f:a0:c4:b6:93:7c:98:bf:cb:a9:8c:77:
                    ab:96:23:94:76:c9:31:c5:d2:1f:83:d0:df:4f:ce:
                    7e:6a:ec:ba:4f:3c:e1:80:78:bd:08:6d:34:fc:6c:
                    2d:b9:55:1a:62:27:0f:22:41:c7:18:5d:e7:b2:c5:
                    91:f1:fd:87:e5:fe:62:09:12:71:6b:59:c7:e7:98:
                    22:5b:5c:c8:37:92:2d:1c:e1:5b:bd:2a:7a:d8:89:
                    5d:cf:bc:05:6e:31:cc:95:d7:5a:c2:ed:bf:cc:cc:
                    28:6d:cd:02:36:80:cf:85:a5:85:d8:77:f6:97:12:
                    23:3c:7e:64:d4:c3:63:4f:77:7b:ec:20:c9:91:65:
                    bd:d3:ac:40:ef:c8:4e:0a:65:3c:28:b0:fe:66:ed:
                    be:4e:16:e6:87:63:fe:99:df:f9:c5:15:f1:2e:6a:
                    bc:3c:e3:98:34:c9:cc:3a:40:06:80:e4:f0:d9:1d:
                    4d:f1:6c:f1:81:e9:4d:79:f7:cc:c5:3d:df:56:3f:
                    db:11:cc:d1:f4:bb:4b:c7:bb:c0:e9:d7:b0:41:eb:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:17:70:B0:BF:02:D6:33:D3:82:5A:9E:45:30:63:9A:38:FB:66:90
            X509v3 Authority Key Identifier:
                keyid:FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/323830343a63303a3a2f33322d3332203d3e203533313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:65:4d:7f:47:72:5d:25:b5:0b:04:ab:3e:35:32:14:f9:fc:
         2e:13:1e:05:ea:17:4f:e6:a2:b3:61:39:fd:fa:9f:9f:af:aa:
         4c:52:c0:21:04:31:f0:f2:76:b4:21:27:b0:43:f6:7e:a8:59:
         3a:a9:56:53:36:9c:27:b8:d4:9c:e1:93:29:f0:90:04:66:27:
         a6:e6:e3:a1:e2:06:a9:0f:6d:0e:26:85:9c:a0:8e:54:19:3d:
         2b:0b:0c:20:b9:28:a2:cb:6e:d7:e9:a5:e4:37:f7:4b:4d:05:
         e9:e7:48:0c:0d:fc:08:e1:a9:e3:e0:25:c2:46:d2:5c:bb:14:
         e3:80:94:17:d6:a3:52:8e:04:d8:49:eb:75:52:b1:11:85:d3:
         74:1e:73:3e:e4:79:8e:2c:4b:77:43:db:fe:05:a9:a1:30:34:
         d0:02:53:6a:1f:44:02:f2:12:d8:d3:86:89:d1:8e:e2:a7:9d:
         15:2f:bc:24:9e:2f:11:5d:61:f7:37:53:ea:8a:ac:83:70:12:
         56:e5:6a:7b:1e:bf:d0:4f:17:8c:a8:96:38:84:60:6e:d7:5d:
         70:b1:6b:1b:9d:b3:84:e7:ed:ba:f1:8f:e8:3b:db:ef:4f:9d:
         d9:df:e7:b4:91:15:b5:69:c3:d8:a3:ca:94:bd:b1:fa:09:2b:
         37:06:7b:c3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUM5iauWQ1+KvGBL/AQFpIdDCjAWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwMENBMDU5OEE3MzQ5MEVGMERCRjQ0OUMxRDc4NThC
MUI4NzVDRjAeFw0yNDA0MzAxODEzMjdaFw0yNTA0MjkxODE4MjdaMDMxMTAvBgNV
BAMTKDFBMTc3MEIwQkYwMkQ2MzNEMzgyNUE5RTQ1MzA2MzlBMzhGQjY2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9a+GgfhPDwuzLYTHDEBnDHE9C
oJvIQyBqyew6PHaRNizZUPA6XC+GzuYa9cfLeY+gxLaTfJi/y6mMd6uWI5R2yTHF
0h+D0N9Pzn5q7LpPPOGAeL0IbTT8bC25VRpiJw8iQccYXeeyxZHx/Yfl/mIJEnFr
WcfnmCJbXMg3ki0c4Vu9KnrYiV3PvAVuMcyV11rC7b/MzChtzQI2gM+FpYXYd/aX
EiM8fmTUw2NPd3vsIMmRZb3TrEDvyE4KZTwosP5m7b5OFuaHY/6Z3/nFFfEuarw8
45g0ycw6QAaA5PDZHU3xbPGB6U1598zFPd9WP9sRzNH0u0vHu8Dp17BB67k9AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUGhdwsL8C1jPTglqeRTBjmjj7ZpAwHwYDVR0j
BBgwFoAU+wDKBZinNJDvDb9EnB14WLG4dc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDhVUWsxRHBWQ25WUkFITTl6amtKRFpKa0pobWFiVVVVd1NCUTQxZm8y
ZmEvMC9GQjAwQ0EwNTk4QTczNDkwRUYwREJGNDQ5QzFENzg1OEIxQjg3NUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMDBDQTA1OThBNzM0OTBF
RjBEQkY0NDlDMUQ3ODU4QjFCODc1Q0YuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ4VVFrMURwVkNuVlJBSE05emprSkRaSmtKaG1hYlVVVXdTQlE0MWZvMmZhLzAv
MzIzODMwMzQzYTYzMzAzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzNTMzMzEzMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQAwDANBgkqhkiG9w0BAQsFAAOCAQEAdWVNf0dyXSW1CwSr
PjUyFPn8LhMeBeoXT+ais2E5/fqfn6+qTFLAIQQx8PJ2tCEnsEP2fqhZOqlWUzac
J7jUnOGTKfCQBGYnpubjoeIGqQ9tDiaFnKCOVBk9KwsMILkoostu1+ml5Df3S00F
6edIDA38COGp4+AlwkbSXLsU44CUF9ajUo4E2EnrdVKxEYXTdB5zPuR5jixLd0Pb
/gWpoTA00AJTah9EAvIS2NOGidGO4qedFS+8JJ4vEV1h9zdT6oqsg3ASVuVqex6/
0E8XjKiWOIRgbtddcLFrG52zhOftuvGP6Dvb70+d2d/ntJEVtWnD2KPKlL2x+gkr
NwZ7ww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org