Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3332203d3e20323632333135.roa
File:                     323830343a3762383a3a2f33322d3332203d3e20323632333135.roa (raw, json)
Hash identifier:          SY91KOAE203FlPvDEUcj1IvNx9xttcWSpmwxieaFX2w=
Subject key identifier:   87:2F:D2:46:DD:00:DC:A8:24:65:32:E8:FB:5A:63:5E:EB:A3:12:B8
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       340FDE7485B371ABCC2AB3001C0E52B4FC664605
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3332203d3e20323632333135.roa
Signing time:             Wed 03 Apr 2024 21:41:43 +0000
ROA not before:           Wed 03 Apr 2024 21:36:43 +0000
ROA not after:            Wed 02 Apr 2025 21:41:43 +0000
asID:                     262315
IP address blocks:        2804:7b8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 14:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0f:de:74:85:b3:71:ab:cc:2a:b3:00:1c:0e:52:b4:fc:66:46:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Apr  3 21:36:43 2024 GMT
            Not After : Apr  2 21:41:43 2025 GMT
        Subject: CN=872FD246DD00DCA8246532E8FB5A635EEBA312B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:80:c4:27:ab:dd:1f:89:8b:97:d6:52:50:
                    6f:cf:3d:a1:42:d5:4f:4d:bf:6e:9d:3c:4e:21:69:
                    dd:2e:9f:ad:c1:af:b3:19:2c:90:f1:51:28:af:6b:
                    95:de:59:5c:13:c0:45:89:46:c1:3e:b7:38:4f:fc:
                    d7:70:1f:4c:d0:24:27:73:92:ff:21:e9:d5:d2:51:
                    83:d9:85:27:2d:b5:09:ef:70:e3:c5:48:71:ca:d3:
                    f1:41:38:67:21:64:e6:95:5e:4f:12:3b:00:d4:ee:
                    6e:28:9f:76:37:d5:bf:c2:87:8c:41:f5:5e:b4:6a:
                    50:d2:01:3f:0b:bd:07:75:48:a0:89:38:ea:06:fc:
                    42:7b:79:48:01:6d:8b:a1:51:a3:e3:a0:dd:c4:87:
                    ee:f4:60:63:f8:a1:6f:7a:3f:81:5c:72:aa:31:8a:
                    85:84:88:2d:6c:75:37:2d:1a:05:c1:4e:3e:11:84:
                    fc:f3:fe:80:11:3a:3c:6b:c1:4e:32:cc:0f:c9:78:
                    ce:c1:ac:ff:c0:31:2b:67:7c:dd:3a:37:fd:51:6c:
                    d6:33:20:41:19:86:35:f5:c8:05:43:e0:a0:83:c8:
                    51:9f:fc:19:37:ca:3d:0a:6b:ac:3c:36:0d:12:16:
                    f2:b0:2f:87:38:56:59:20:ea:00:1b:79:f9:92:1a:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2F:D2:46:DD:00:DC:A8:24:65:32:E8:FB:5A:63:5E:EB:A3:12:B8
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3332203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:1c:f6:69:e6:07:f3:28:04:04:34:52:f1:64:47:29:66:ad:
         6c:01:fb:8f:cf:36:9c:e4:5c:07:8c:f8:26:f7:46:85:d9:47:
         27:61:46:ee:68:24:89:de:f4:95:a1:03:dc:42:1a:0f:66:bb:
         b3:e1:73:0e:70:bc:72:f1:a0:a9:27:5d:29:5c:4b:bf:1c:18:
         09:90:8a:f9:c4:8b:57:14:0a:7e:8e:c0:b2:d3:d7:32:f7:54:
         a3:50:0f:5e:29:12:ce:54:94:2a:9f:8d:4b:d0:b8:ac:0d:03:
         88:6f:1f:89:a1:1d:41:1d:11:a5:49:e2:d8:06:44:1c:4e:3b:
         a2:00:fd:73:e6:db:3c:39:fa:3a:b7:93:d6:76:12:7c:f9:7c:
         b0:fc:16:9d:45:c0:c5:68:71:95:94:49:24:89:26:88:bd:21:
         0c:6c:9e:43:70:4b:2e:71:3d:72:1d:1f:3f:8d:e3:0d:06:f3:
         db:6f:ad:07:3d:98:30:1c:e1:70:74:36:ad:38:84:81:ce:84:
         58:68:c2:cd:d4:96:93:61:05:f1:5a:93:1c:8e:84:52:32:27:
         74:88:3f:d4:12:80:8f:80:59:50:90:47:ca:8f:6d:ec:0c:d1:
         cb:1f:a7:56:77:48:33:b8:a2:56:b4:8c:12:da:62:d5:fd:3a:
         0e:c6:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org