Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a383030303a3a2f33332d3333203d3e20323637303738.roa
File:                     323830343a343764303a383030303a3a2f33332d3333203d3e20323637303738.roa (raw, json)
Hash identifier:          A6Y9Pw5td+qZlKyjfc0BS/k+j+J+lIoZJD5k1t7dRHQ=
Subject key identifier:   9F:38:69:E3:93:AD:0A:24:F3:07:25:46:F2:AF:BE:80:27:B1:9B:A4
Certificate issuer:       /CN=289C0FA8F74E8A496A1CF040353916504C4E789F
Certificate serial:       136B73F0A4BBBEA179DD0929828321EB18ECC767
Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a383030303a3a2f33332d3333203d3e20323637303738.roa
Signing time:             Tue 30 Apr 2024 14:00:35 +0000
ROA not before:           Tue 30 Apr 2024 13:55:35 +0000
ROA not after:            Tue 29 Apr 2025 14:00:35 +0000
asID:                     267078
IP address blocks:        2804:47d0:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6b:73:f0:a4:bb:be:a1:79:dd:09:29:82:83:21:eb:18:ec:c7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F
        Validity
            Not Before: Apr 30 13:55:35 2024 GMT
            Not After : Apr 29 14:00:35 2025 GMT
        Subject: CN=9F3869E393AD0A24F3072546F2AFBE8027B19BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:1a:86:06:2f:78:b9:68:4e:44:14:8c:71:
                    eb:d4:9a:6d:9c:f5:b9:a5:55:06:65:14:77:f8:92:
                    99:0a:e6:8a:ff:f7:a8:0e:8e:23:b4:ec:5a:f6:ee:
                    76:95:cb:ed:88:5b:97:79:25:64:67:a0:82:95:d2:
                    96:69:be:83:21:2c:e2:e0:c4:f3:6b:55:da:90:00:
                    6e:76:9c:5e:1d:4c:2c:30:2c:62:87:0e:12:74:39:
                    13:bd:86:39:ed:e6:a4:c0:a2:c2:f0:b7:01:11:30:
                    d4:23:24:24:c5:d4:22:73:7d:2c:3e:ce:bd:ff:a9:
                    07:e4:a2:56:18:86:93:dc:1e:a9:09:b8:a4:9f:e4:
                    fc:cd:cf:5b:ee:29:27:eb:91:73:80:b8:ad:b6:a8:
                    87:13:f6:ac:bf:24:1e:c0:14:a0:84:99:78:48:88:
                    bb:b6:55:aa:e5:e3:a5:a0:ad:e9:e6:78:6c:5f:fe:
                    d8:84:9e:35:ec:42:fa:08:ad:53:a4:e5:8d:b4:96:
                    12:bd:bb:46:f7:85:ae:ae:55:c9:cb:19:70:ff:54:
                    93:cd:3f:71:cf:13:82:cb:89:b9:87:e8:e9:0a:0a:
                    63:2d:76:36:f7:c8:45:6e:70:da:55:65:8e:06:8e:
                    11:1c:e0:53:94:84:b7:a1:d7:99:72:32:07:39:15:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:38:69:E3:93:AD:0A:24:F3:07:25:46:F2:AF:BE:80:27:B1:9B:A4
            X509v3 Authority Key Identifier:
                keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a383030303a3a2f33332d3333203d3e20323637303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ca:0e:89:2a:82:9d:e8:b4:0e:d8:a5:32:41:4d:3c:cf:5e:cc:
         f5:6a:26:c5:a4:12:d0:b6:f2:9e:32:72:e1:ca:b4:81:65:3d:
         71:9b:10:0a:6f:9d:80:3d:55:53:b0:23:6c:7b:f9:6c:e8:a2:
         6d:f4:bf:f3:b1:bb:45:18:e8:b4:4a:fc:a1:10:40:7f:4e:77:
         0e:75:84:53:b1:55:92:fa:de:59:be:f8:ce:7c:8c:a8:d0:2d:
         15:14:99:ba:a1:8a:01:28:1c:04:a2:f5:b3:f3:92:92:8a:29:
         a5:76:4d:c8:9f:1b:20:ea:47:e4:f8:3f:d8:9f:08:62:d3:27:
         7c:ee:a0:04:58:74:02:38:2a:a6:0b:9d:1e:22:1f:90:4d:4b:
         ac:34:3d:c0:c7:f0:15:ed:d7:1b:6a:c0:7d:79:6e:73:b5:35:
         e3:bb:4a:b0:41:2e:3d:54:d0:10:0a:90:36:a8:38:8e:66:93:
         c1:6d:08:c8:14:e4:4b:16:19:16:aa:c5:0d:e3:86:e6:8a:7e:
         7c:27:2c:bd:ae:f1:18:03:0c:90:e0:e3:a9:60:46:25:ff:c2:
         ea:6a:81:57:ca:e5:28:93:cf:a4:2b:1c:97:b4:30:3e:39:49:
         7e:aa:49:c9:cd:89:ee:6f:e5:ee:39:1d:c8:d6:f3:17:c9:9f:
         70:90:53:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org