Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/0/323830343a343663383a383030303a3a2f33342d3334203d3e20323637303131.roa
File:                     323830343a343663383a383030303a3a2f33342d3334203d3e20323637303131.roa (raw, json)
Hash identifier:          cwz+tMMKpHTiXy2jvWTU/kFuM9SHxIGROcAtkQBx48o=
Subject key identifier:   27:F8:FA:97:D9:81:2B:C9:75:B2:79:31:B0:8C:B8:B2:91:9D:D1:5E
Certificate issuer:       /CN=318F23317C44E13FC9786607497FD114EB54C6A0
Certificate serial:       02A9041FE19124BAE8D974A30BADD2BD9FE071F7
Authority key identifier: 31:8F:23:31:7C:44:E1:3F:C9:78:66:07:49:7F:D1:14:EB:54:C6:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318F23317C44E13FC9786607497FD114EB54C6A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/0/323830343a343663383a383030303a3a2f33342d3334203d3e20323637303131.roa
Signing time:             Tue 05 Mar 2024 17:56:39 +0000
ROA not before:           Tue 05 Mar 2024 17:51:39 +0000
ROA not after:            Tue 04 Mar 2025 17:56:39 +0000
asID:                     267011
IP address blocks:        2804:46c8:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 15:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a9:04:1f:e1:91:24:ba:e8:d9:74:a3:0b:ad:d2:bd:9f:e0:71:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318F23317C44E13FC9786607497FD114EB54C6A0
        Validity
            Not Before: Mar  5 17:51:39 2024 GMT
            Not After : Mar  4 17:56:39 2025 GMT
        Subject: CN=27F8FA97D9812BC975B27931B08CB8B2919DD15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:88:f0:42:d6:68:db:78:b0:65:ce:96:23:
                    5b:99:c4:f4:8f:fc:be:5c:3a:9b:50:f9:4f:7a:ae:
                    fe:01:3b:97:d2:0d:79:40:38:fe:e6:91:d0:97:8c:
                    da:8a:d9:58:e7:b9:56:48:95:ef:d8:6f:f3:fe:e7:
                    a9:11:5f:98:87:f7:79:87:61:7a:ce:2f:c8:be:fe:
                    5f:79:b1:77:8f:4c:c3:50:03:a1:3f:b8:72:a6:85:
                    61:d5:80:c9:9b:ee:ab:43:09:20:8b:84:cf:21:83:
                    16:6b:02:84:17:a9:b5:a2:54:0e:00:b1:b0:a8:7a:
                    07:3c:5b:89:78:2b:93:ac:02:fa:ba:f3:2c:40:ee:
                    95:84:78:3e:ef:5c:7f:7d:d3:20:02:1b:f3:ec:c9:
                    81:cf:38:ce:68:76:37:90:3b:4c:88:0e:21:e5:7c:
                    d5:d2:06:04:dc:22:a9:ec:bf:74:d7:99:8d:a4:21:
                    f7:a9:ad:07:a1:f6:93:0a:16:46:b9:03:07:4b:64:
                    69:4c:74:d6:8d:0b:0d:9c:13:9b:09:3d:4b:ca:5e:
                    c7:44:ba:b5:01:30:96:8c:db:33:77:65:c5:e8:a3:
                    3d:5d:cc:3a:46:25:c6:79:db:c6:7a:c9:d2:4d:c4:
                    89:ce:94:14:ce:00:b9:59:00:0a:76:33:17:0f:19:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:FA:97:D9:81:2B:C9:75:B2:79:31:B0:8C:B8:B2:91:9D:D1:5E
            X509v3 Authority Key Identifier:
                keyid:31:8F:23:31:7C:44:E1:3F:C9:78:66:07:49:7F:D1:14:EB:54:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/0/318F23317C44E13FC9786607497FD114EB54C6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318F23317C44E13FC9786607497FD114EB54C6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/0/323830343a343663383a383030303a3a2f33342d3334203d3e20323637303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46c8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:4d:fc:8e:a7:69:75:b5:a1:20:dd:b1:3e:c1:46:2e:6a:
         d3:26:bb:ae:3b:68:c2:89:22:ac:03:1d:e7:ac:3c:bf:da:f7:
         03:d5:29:d4:f1:7f:03:8b:51:1e:d4:c4:ab:b6:fd:17:28:47:
         34:1d:20:24:c4:b5:8c:fc:61:80:0e:a1:94:e6:38:c4:fd:a4:
         77:ed:bb:81:12:93:fd:97:40:d0:42:e0:fa:b9:a7:b9:01:21:
         67:d6:1c:16:31:3b:98:b6:c8:7c:d4:44:c1:57:75:44:4c:23:
         b0:cd:35:93:b7:d9:37:14:5f:38:3a:ff:a3:83:20:56:3d:a5:
         ed:cc:b5:f7:b0:a1:30:5c:84:c7:79:1a:b9:e6:09:00:87:94:
         9e:7b:b1:4e:13:c4:6b:c4:c1:40:2a:7e:45:92:4a:b7:43:dd:
         ad:be:7f:ba:db:bc:69:16:07:6b:10:1e:fd:05:b0:bb:a3:29:
         c3:e1:bc:84:1a:da:bd:6b:be:c4:05:d5:b0:31:68:c1:5a:38:
         10:64:91:62:f6:d3:ca:0f:19:c2:0e:2e:1b:4f:7d:b8:ba:16:
         4c:a1:5b:e8:69:ad:d9:d1:52:dc:82:c8:9f:dc:77:ef:9b:13:
         44:f6:a5:ec:45:be:f7:8f:ac:bd:a0:6a:cd:d8:dd:b5:04:60:
         b5:fc:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 19:25:56 2024 by rpki-client on console-fra.rpki-client.org