Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a373030343a3a2f33322d3332203d3e203631363032.roa
File:                     323830343a373030343a3a2f33322d3332203d3e203631363032.roa (raw, json)
Hash identifier:          xkZe8bdRtBCjyeaI7WV/KdGoG06gqapjzhJd0gvtNwU=
Subject key identifier:   6C:D2:20:7D:46:A7:8A:E3:43:78:61:BB:B5:82:25:1B:E0:4F:E9:DC
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       79FB0FB8019FD7DE3E2FF00CDE07A12710192B41
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a373030343a3a2f33322d3332203d3e203631363032.roa
Signing time:             Thu 04 Jul 2024 07:58:46 +0000
ROA not before:           Thu 04 Jul 2024 07:53:46 +0000
ROA not after:            Thu 03 Jul 2025 07:58:46 +0000
asID:                     61602
IP address blocks:        2804:7004::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 12:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fb:0f:b8:01:9f:d7:de:3e:2f:f0:0c:de:07:a1:27:10:19:2b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Jul  4 07:53:46 2024 GMT
            Not After : Jul  3 07:58:46 2025 GMT
        Subject: CN=6CD2207D46A78AE3437861BBB582251BE04FE9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:8c:1e:b2:3e:a0:f8:a2:32:01:17:c5:d3:
                    bf:46:c0:f2:b6:dc:40:90:a9:29:13:2d:a0:36:5a:
                    41:c5:5e:80:55:ce:2c:b5:55:d5:1c:87:e7:da:07:
                    fd:80:ec:4d:0c:53:ab:b6:ae:68:4b:e8:bc:69:cf:
                    b5:53:1a:67:7f:02:3d:82:ad:12:3d:6c:7d:8f:5c:
                    59:54:a7:cb:d2:5f:14:7e:d5:0e:7e:e2:fb:39:be:
                    01:8e:ba:98:af:a1:ea:6f:01:cf:56:d5:ec:c6:fc:
                    e9:11:80:77:44:7c:a4:6a:99:19:33:aa:dc:a1:cb:
                    90:8a:35:fb:f1:d9:96:7e:68:12:97:14:d7:5b:cb:
                    a8:d3:b4:a9:73:97:98:dd:53:d8:45:2b:69:fc:00:
                    b6:43:4a:ff:ab:46:22:09:e3:f3:e8:44:1b:b4:3d:
                    81:cd:49:5c:93:b1:a4:19:59:43:b2:38:86:fb:bc:
                    82:df:f1:cb:a0:54:cf:02:ac:4e:f4:b8:91:cb:5d:
                    47:fe:29:1d:92:f2:be:3f:a9:f4:65:0d:ef:b2:1c:
                    4f:b6:0e:c7:36:a9:d0:0c:7f:c2:7e:be:fc:73:d3:
                    dc:20:51:6a:c8:84:a2:91:c4:77:73:c8:d9:8d:e6:
                    bb:4d:84:ab:65:4f:9c:63:e2:07:48:5e:ab:9a:1b:
                    cc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D2:20:7D:46:A7:8A:E3:43:78:61:BB:B5:82:25:1B:E0:4F:E9:DC
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/323830343a373030343a3a2f33322d3332203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7004::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:30:d2:ac:73:b8:f3:72:80:e7:45:fa:85:2b:25:25:21:a7:
         28:56:11:84:3c:6c:a8:68:b8:e6:a6:cd:42:d6:69:b3:8c:02:
         a7:0d:26:42:aa:3b:be:b0:c3:a0:df:a0:05:66:e3:1e:18:50:
         bc:12:05:33:bc:36:2b:f1:60:e0:c4:eb:a0:88:1c:67:ab:96:
         e4:2c:08:93:b5:33:18:82:af:a9:24:d1:84:50:59:c5:ed:bd:
         dd:c7:88:af:5a:74:bc:68:31:47:92:10:94:38:6b:f2:ca:6b:
         4e:fc:97:38:1b:b3:ee:5d:3b:a6:e5:e3:7e:f3:cf:cb:8f:39:
         0f:95:0f:63:46:4d:d3:18:cd:b5:8c:8f:f3:93:2f:99:b6:fc:
         3e:7c:bb:a6:dd:5a:65:3d:a6:7b:42:e7:5e:8a:54:39:ae:36:
         5c:9d:51:ab:e1:86:c3:79:ed:a5:37:e3:5e:22:02:4e:78:05:
         1a:13:22:c5:d3:54:ea:27:3d:05:d8:e8:13:5b:de:33:3e:8f:
         f1:87:66:99:5d:d6:6d:59:95:bc:c6:26:ce:b0:6b:56:1a:b8:
         f6:c9:74:38:dc:d7:b0:32:37:f2:77:5e:a8:dd:e8:63:85:03:
         9a:42:03:d2:48:b0:98:c2:8e:1f:24:85:e4:a3:6e:15:9b:10:
         2c:24:69:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 13:19:07 2024 by rpki-client on console-ams.rpki-client.org