Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33332d3333203d3e20323637303738.roa
File:                     323830343a343764303a3a2f33332d3333203d3e20323637303738.roa (raw, json)
Hash identifier:          ufVQq0gkBfcfTdvkGVk3UamqA8/3pR/XHje6naReRDc=
Subject key identifier:   A0:C8:7C:E9:16:B8:38:1E:62:E0:2A:4D:60:F6:37:D4:08:4A:A0:17
Certificate issuer:       /CN=289C0FA8F74E8A496A1CF040353916504C4E789F
Certificate serial:       40721531E03EDEFBBBCC84B5CF1CBDC4DF27BD06
Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33332d3333203d3e20323637303738.roa
Signing time:             Tue 30 Apr 2024 14:00:32 +0000
ROA not before:           Tue 30 Apr 2024 13:55:32 +0000
ROA not after:            Tue 29 Apr 2025 14:00:32 +0000
asID:                     267078
IP address blocks:        2804:47d0::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:72:15:31:e0:3e:de:fb:bb:cc:84:b5:cf:1c:bd:c4:df:27:bd:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F
        Validity
            Not Before: Apr 30 13:55:32 2024 GMT
            Not After : Apr 29 14:00:32 2025 GMT
        Subject: CN=A0C87CE916B8381E62E02A4D60F637D4084AA017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:b2:09:df:bf:8b:ac:91:ec:06:cc:d5:2d:
                    22:64:26:85:d1:1a:43:14:8c:d2:61:df:13:22:1a:
                    3a:d5:c8:48:62:81:b7:e6:33:b8:25:a8:61:0c:ff:
                    ab:ff:b7:fd:d5:3f:62:60:38:f0:5b:81:bf:87:d1:
                    e5:49:ba:be:16:34:92:75:ab:d3:19:ad:ac:d2:3c:
                    9e:98:66:80:72:ae:8d:17:bf:9c:16:7f:bc:eb:79:
                    0e:89:eb:32:2c:c1:aa:0d:29:8b:ff:f1:d0:b4:45:
                    73:e2:0c:bc:24:86:f4:73:f2:4d:3b:8c:00:b5:bf:
                    fe:bb:10:64:b7:11:d3:c5:d2:e4:ab:19:9e:30:37:
                    96:f9:80:6f:d4:c9:06:ab:3c:d3:72:aa:b9:d4:cc:
                    16:46:d6:a0:e5:99:06:2c:0f:fe:0b:f7:d9:66:d8:
                    0c:5a:8a:09:b6:4a:af:f0:90:0e:87:23:f6:38:27:
                    17:cb:85:f7:4d:a1:d0:f4:43:f7:13:97:a8:aa:21:
                    14:9d:22:c8:ec:fc:20:f3:d4:18:9e:0c:09:d7:70:
                    dd:ab:12:27:62:fb:3b:fa:b2:44:79:9e:a5:fb:57:
                    31:fd:41:90:13:65:98:49:8e:e4:22:06:04:a6:d1:
                    34:e8:b5:31:1e:a5:39:66:f0:89:52:df:bd:cd:06:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:7C:E9:16:B8:38:1E:62:E0:2A:4D:60:F6:37:D4:08:4A:A0:17
            X509v3 Authority Key Identifier:
                keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33332d3333203d3e20323637303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:e6:57:43:8f:ad:b6:34:70:d7:38:39:7e:ea:ee:59:c1:
         d1:94:9a:f2:7d:86:86:01:50:65:28:a9:fe:f8:3c:eb:be:3b:
         88:71:3b:e9:d4:a2:fa:7e:bd:b5:f4:2c:90:42:b7:de:53:a6:
         4a:cd:eb:35:2b:e5:32:ed:15:96:3d:ee:ee:57:ec:12:79:0b:
         6b:e8:87:ae:d8:32:c5:14:73:05:58:de:73:db:58:50:a9:65:
         e1:33:51:c9:44:13:96:a5:78:a8:cd:34:d7:05:72:d5:ea:0d:
         85:7c:f1:d1:9c:c8:41:8f:21:1b:ee:c1:32:d7:bd:a3:95:55:
         e5:3c:51:af:27:50:ce:79:89:1c:87:e2:85:7e:35:f1:52:70:
         87:14:25:cc:66:02:82:5a:03:a5:3a:81:81:35:91:e1:17:d5:
         c8:41:58:45:7b:11:49:e2:04:64:97:81:80:ed:60:3f:88:8b:
         bf:e0:56:f9:bc:c6:5f:91:e3:f4:1f:b2:a0:91:d5:ff:f4:d4:
         d0:98:f0:17:d9:40:03:91:bc:26:61:97:43:f2:9c:03:b7:56:
         8b:56:e8:bb:52:c3:7f:51:18:ba:98:ef:1b:aa:dd:4c:fb:dd:
         33:eb:11:74:12:2b:ef:b5:b4:95:62:20:94:b3:62:5c:ce:f5:
         48:4b:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org