Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3332203d3e20323731363536.roa
File:                     323830343a376566303a3a2f33322d3332203d3e20323731363536.roa (raw, json)
Hash identifier:          GzKNlWFLryv6FAV2Xyr4y3vtz9jwKOeUBJLdUF9sS0k=
Subject key identifier:   F8:32:29:39:94:42:86:90:42:A4:21:D4:C6:54:4F:FC:2A:2E:66:CB
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       2F14C620EFA12472371DE17931DFFEF2A8F3FEC6
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3332203d3e20323731363536.roa
Signing time:             Wed 24 Apr 2024 19:15:16 +0000
ROA not before:           Wed 24 Apr 2024 19:10:16 +0000
ROA not after:            Wed 23 Apr 2025 19:15:16 +0000
asID:                     271656
IP address blocks:        2804:7ef0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:14:c6:20:ef:a1:24:72:37:1d:e1:79:31:df:fe:f2:a8:f3:fe:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Apr 24 19:10:16 2024 GMT
            Not After : Apr 23 19:15:16 2025 GMT
        Subject: CN=F83229399442869042A421D4C6544FFC2A2E66CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:94:3e:bb:ac:5c:40:2a:9a:4c:86:ad:2a:
                    6e:c5:8e:76:ca:c1:ec:03:37:a6:d0:31:9d:17:73:
                    dd:93:75:d6:0f:e1:83:00:92:89:b8:ab:de:62:5a:
                    1a:f6:25:38:37:21:75:d2:be:48:cb:82:94:d3:d9:
                    4a:cf:94:64:7c:2a:2b:d6:52:46:eb:23:1c:89:0f:
                    d7:d8:14:45:f5:3f:73:34:99:66:dd:8f:6f:dd:17:
                    51:78:67:62:42:b5:ed:d0:a6:ce:fc:0a:02:7c:a7:
                    4d:1c:51:35:d8:97:05:a0:a8:f1:0b:76:b0:2a:e7:
                    16:89:6d:8f:33:1f:10:a1:61:1b:13:05:09:41:9b:
                    08:e4:47:75:cd:38:12:80:cc:d0:16:ee:d4:b3:cc:
                    a4:85:83:47:39:96:e5:26:27:23:85:2f:39:ef:d7:
                    d8:17:75:6e:2f:1c:d8:81:a1:ed:5c:58:e0:e7:64:
                    27:ff:43:a5:33:c0:e1:0c:3c:5c:50:f1:9a:22:8d:
                    e0:ce:51:03:af:bd:a7:3b:06:a8:f5:1b:ce:85:0a:
                    ba:02:b4:b4:5c:30:fa:f2:ff:59:6f:03:01:ea:01:
                    0c:d5:e4:07:ac:ad:7a:9c:9e:77:0a:5c:a4:e1:5e:
                    9c:17:af:be:45:33:dc:3e:37:b2:33:39:bf:24:58:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:32:29:39:94:42:86:90:42:A4:21:D4:C6:54:4F:FC:2A:2E:66:CB
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3332203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:22:01:25:19:1a:98:d5:43:ee:63:ea:a0:7e:91:ee:6c:6d:
         bf:36:ed:07:d7:f0:22:6f:25:63:7e:b2:a1:cd:4a:9e:75:a9:
         51:ac:8c:91:b1:28:a9:d5:9c:a5:8b:5d:ab:77:c7:e9:cb:f2:
         6f:7e:43:c2:14:ae:bc:a3:7b:3e:cc:9f:0c:52:1f:ab:79:06:
         a6:f3:eb:97:71:a8:ef:de:e3:c4:0e:26:0f:a3:85:6a:9f:01:
         d5:4f:fa:e2:58:5c:1e:6c:ec:51:80:fd:a5:32:84:dd:e3:c1:
         e6:af:4b:34:cf:0c:4e:6a:42:dd:0c:53:32:2e:d7:db:74:4c:
         99:e1:5a:37:7a:47:6f:08:77:0b:11:8e:bb:3c:aa:d5:ca:b1:
         3c:6a:ec:93:04:c8:fd:27:65:6b:c2:bd:9f:86:df:31:3e:a0:
         77:4b:ed:2a:0e:ef:61:bd:77:30:e1:cb:23:09:6b:44:9b:f3:
         8f:b2:84:35:da:7e:06:45:c1:d3:95:c2:70:61:79:fe:c6:72:
         3c:91:58:9f:7d:d9:13:b5:88:2c:66:d3:52:3c:7d:37:cc:e7:
         f8:49:32:0e:3a:3b:46:bf:14:bd:bd:93:36:77:b3:d9:77:89:
         a5:4e:db:06:48:50:2a:05:2c:02:f0:cf:1c:e3:22:de:06:bc:
         91:88:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org