Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d3332203d3e20323638343439.roa
File:                     323830343a353136343a3a2f33322d3332203d3e20323638343439.roa (raw, json)
Hash identifier:          IBLek5CNjQL6ehI1BW0bXzEYCZUURU8p3HSs1I0IC4k=
Subject key identifier:   DC:AC:49:71:56:53:FC:45:67:29:B5:54:59:65:5E:83:9F:CB:00:EE
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       65EE47166C80E9DF7BB47B9CBF0DF54BAD4D04CD
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d3332203d3e20323638343439.roa
Signing time:             Wed 05 Jun 2024 15:01:49 +0000
ROA not before:           Wed 05 Jun 2024 14:56:49 +0000
ROA not after:            Wed 04 Jun 2025 15:01:49 +0000
asID:                     268449
IP address blocks:        2804:5164::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ee:47:16:6c:80:e9:df:7b:b4:7b:9c:bf:0d:f5:4b:ad:4d:04:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Jun  5 14:56:49 2024 GMT
            Not After : Jun  4 15:01:49 2025 GMT
        Subject: CN=DCAC49715653FC456729B55459655E839FCB00EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:84:cf:0e:33:80:7a:c4:c3:e6:dd:dc:4a:
                    c6:e1:1b:71:d3:90:53:b5:92:cf:af:ab:de:af:e6:
                    b0:f1:46:19:59:18:6a:ba:10:94:8a:8b:32:10:99:
                    89:db:53:3b:70:8d:1e:ce:f9:22:52:7b:1f:41:72:
                    d5:c0:79:57:f8:47:9f:ba:70:3a:05:e3:2e:3c:c8:
                    a4:b9:b3:6e:53:a8:06:71:ba:0b:f4:ac:87:5a:44:
                    1c:f5:cf:0d:1e:25:df:87:4f:bd:54:30:45:9c:94:
                    e6:56:5c:5d:b2:c2:10:87:42:44:3b:94:5d:fd:e4:
                    db:90:28:51:3d:db:97:87:be:71:eb:55:2f:14:01:
                    6c:7a:31:2b:65:59:9b:1f:51:86:5a:41:40:98:ee:
                    e6:25:ee:7b:c5:74:da:26:91:e9:c8:d7:34:5b:d0:
                    4e:11:3e:cd:b8:90:7b:be:ea:3b:4d:b0:ba:99:12:
                    a1:e0:41:42:f2:e9:40:6e:3b:09:b2:5b:81:5f:cc:
                    79:45:d3:96:57:f4:87:53:38:9b:7e:ae:1b:66:61:
                    f3:24:c4:f6:bc:1b:f2:75:06:61:54:6f:53:6e:a6:
                    d7:33:9d:43:ac:69:da:2c:e4:aa:99:51:97:15:25:
                    24:5f:bc:87:f6:2e:a1:d0:8e:94:78:d8:3a:a2:3a:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AC:49:71:56:53:FC:45:67:29:B5:54:59:65:5E:83:9F:CB:00:EE
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d3332203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5164::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:c6:0c:93:30:9d:d8:ec:5f:18:7a:e8:18:ef:f9:6a:90:62:
         a8:99:c8:7c:9d:7b:41:db:ba:5d:3b:7a:7e:af:10:81:ac:56:
         b1:97:51:3f:39:0e:ec:d6:8c:01:be:a9:a6:7e:9d:07:34:e1:
         ab:20:2b:1e:39:23:a9:5a:e8:f9:06:5d:4d:ca:98:02:68:4f:
         f6:16:ef:d7:ba:a8:ba:2d:a9:24:aa:0d:04:f1:e4:07:b8:dd:
         77:c0:b0:56:81:56:42:f7:ab:c1:4d:00:fb:b7:39:21:2d:c7:
         7f:9f:b9:00:38:73:bf:c5:df:c1:34:93:c3:91:b5:3a:ed:49:
         29:ca:a1:fe:e8:38:b1:7e:9b:ba:20:ce:21:34:e5:84:e4:00:
         e6:1a:44:a7:cc:ae:04:72:4f:be:b2:86:87:45:cd:60:3a:1a:
         99:8e:5d:3e:31:42:2e:62:7b:19:18:3b:7b:12:a5:22:d4:d7:
         c1:9d:df:09:3b:8a:6e:3e:ec:10:a9:0b:df:04:12:c7:83:c4:
         cb:92:3d:82:7e:ca:47:55:19:fc:c2:26:a8:f3:46:b7:45:19:
         d8:f4:a6:48:cb:7f:5f:42:a1:6f:c7:bc:89:ac:6f:9e:b0:ad:
         00:e5:41:2d:16:43:af:fc:2c:31:7b:f6:9e:16:74:9f:c4:b4:
         d5:97:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 20:19:21 2024 by rpki-client on console-fra.rpki-client.org