Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa
File:                     323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa (raw, json)
Hash identifier:          Fw+S2d796lgQAn1g2lbUspLiLV2bo8Wzf4ESd1amB70=
Subject key identifier:   74:69:3C:E7:A4:02:57:51:8D:D3:B3:C6:28:F0:BA:B4:AB:B2:43:9B
Certificate issuer:       /CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
Certificate serial:       15A082F422942ED1D07C862AC4D18918EE447E63
Authority key identifier: E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa
Signing time:             Wed 03 Apr 2024 18:43:10 +0000
ROA not before:           Wed 03 Apr 2024 18:38:10 +0000
ROA not after:            Wed 02 Apr 2025 18:43:10 +0000
asID:                     271326
IP address blocks:        2804:79c4:8000::/44 maxlen: 44

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 15:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a0:82:f4:22:94:2e:d1:d0:7c:86:2a:c4:d1:89:18:ee:44:7e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
        Validity
            Not Before: Apr  3 18:38:10 2024 GMT
            Not After : Apr  2 18:43:10 2025 GMT
        Subject: CN=74693CE7A40257518DD3B3C628F0BAB4ABB2439B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:e0:fb:6d:64:73:db:6c:87:29:72:f3:b4:
                    e0:59:bd:cc:fd:7e:b7:af:d7:ef:f1:fa:25:dd:a0:
                    b3:96:5a:27:96:01:e2:84:a5:4a:da:cd:de:fa:bf:
                    42:ec:cb:20:5b:36:17:be:0a:05:b9:2f:c1:d0:b7:
                    6d:3b:a0:aa:1c:00:b0:19:b9:60:64:36:1e:ff:70:
                    84:f5:c7:9d:1c:3d:8f:7d:b5:93:29:c1:4b:5d:89:
                    db:fc:99:aa:01:13:d1:35:27:55:14:cb:90:9f:7b:
                    9b:17:ee:07:65:51:c3:f9:0c:fe:51:cf:62:72:2e:
                    aa:10:24:26:1d:7b:b1:cb:c9:9c:67:7b:d0:2c:27:
                    56:7b:f2:46:8a:c2:5e:21:bb:7a:4f:6b:a8:2e:60:
                    70:78:82:52:d0:bb:08:4d:2c:50:bd:39:5a:a2:51:
                    3c:f9:ec:c7:78:ee:12:23:6a:97:34:e4:74:ba:aa:
                    0a:9f:90:e8:9c:29:8e:83:ca:5f:45:e2:36:f8:6b:
                    c3:1f:06:be:fa:68:fc:35:80:87:99:83:8f:1a:5a:
                    f0:82:68:3c:50:51:fa:18:89:c3:1f:cb:c7:4d:e8:
                    d6:a9:c3:b7:61:ec:bc:7c:d7:e3:49:38:a1:e2:2b:
                    a8:43:2c:9f:3a:79:43:d0:df:91:ee:8a:91:7a:2a:
                    39:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:69:3C:E7:A4:02:57:51:8D:D3:B3:C6:28:F0:BA:B4:AB:B2:43:9B
            X509v3 Authority Key Identifier:
                keyid:E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c4:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:e0:f5:50:21:63:eb:79:b4:8f:cb:71:78:25:df:ef:b5:
         8f:d9:d6:9c:e2:99:df:b8:a9:34:96:ff:44:f7:78:25:0b:03:
         91:0c:f7:71:b9:96:72:12:0a:be:04:46:fc:7a:70:18:16:8a:
         3f:f1:e2:b9:4f:04:a4:1b:fb:91:5c:0b:a1:2e:0b:da:44:29:
         1e:23:7e:a0:2b:5b:16:8b:d3:d9:67:9a:77:36:7f:6d:55:ed:
         fe:84:93:05:26:a0:0f:51:e4:28:70:ca:a0:f8:29:6c:f3:81:
         27:5d:96:c6:f5:1d:e6:0a:14:1e:59:30:fc:1c:5d:de:51:2f:
         62:00:ba:45:55:1c:cb:22:f8:47:40:70:f9:f9:74:91:ab:ae:
         f6:e3:8e:aa:1e:37:ce:c9:1f:e3:23:ff:d7:f6:20:c4:91:b8:
         b9:44:e8:90:16:bf:62:1f:f9:07:25:ec:a4:8f:09:6e:97:01:
         b7:f6:bb:fb:25:31:5d:f7:77:91:74:46:3a:b1:47:84:c4:16:
         8f:5a:2e:0d:1f:a4:1c:fd:0f:f7:8e:28:8d:50:4f:0d:33:22:
         09:bb:88:57:f7:70:14:c0:4c:de:39:50:3a:63:18:0c:c6:6d:
         97:2d:a1:01:82:bd:2e:fa:e7:c8:a1:63:d0:d2:d5:92:d3:90:
         04:2a:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 17:28:47 2024 by rpki-client on console-fra.rpki-client.org