Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a313038633a3a2f33322d3332203d3e203238313436.roa
File:                     323830343a313038633a3a2f33322d3332203d3e203238313436.roa (raw, json)
Hash identifier:          BGNQnwkZDGTxBG1mcRLBSLrsEqxurmBaEHTKsg4pJS4=
Subject key identifier:   62:8A:4E:67:1A:7C:EE:D3:FD:E8:E1:0E:D4:5E:41:8C:3F:39:F5:CF
Certificate issuer:       /CN=3E505BB16E0D43DCE61B34AB7BDBB574C916641B
Certificate serial:       0270F0DF28A85165ECBE08F7B643A9D55D7BDDA7
Authority key identifier: 3E:50:5B:B1:6E:0D:43:DC:E6:1B:34:AB:7B:DB:B5:74:C9:16:64:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E505BB16E0D43DCE61B34AB7BDBB574C916641B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a313038633a3a2f33322d3332203d3e203238313436.roa
Signing time:             Fri 10 May 2024 18:43:33 +0000
ROA not before:           Fri 10 May 2024 18:38:33 +0000
ROA not after:            Fri 09 May 2025 18:43:33 +0000
asID:                     28146
IP address blocks:        2804:108c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 10 May 2024 18:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:70:f0:df:28:a8:51:65:ec:be:08:f7:b6:43:a9:d5:5d:7b:dd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E505BB16E0D43DCE61B34AB7BDBB574C916641B
        Validity
            Not Before: May 10 18:38:33 2024 GMT
            Not After : May  9 18:43:33 2025 GMT
        Subject: CN=628A4E671A7CEED3FDE8E10ED45E418C3F39F5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:b0:86:e6:5d:df:fd:14:e1:d0:60:c8:f3:
                    58:a3:5c:02:0f:cc:45:d2:1d:18:a8:ef:f9:3d:d3:
                    f2:d1:f7:c3:88:27:da:d9:ab:8c:f4:5c:0c:ff:de:
                    e9:68:89:aa:05:a0:00:89:ed:d1:66:eb:d5:ff:b7:
                    9a:54:8d:57:05:e4:37:31:d2:ee:10:3e:7d:28:12:
                    60:50:44:f3:71:c3:56:0d:6d:68:4e:3d:25:43:97:
                    ee:4d:ff:14:4b:f5:ee:e4:9e:7d:42:ad:fc:cf:5f:
                    05:cd:26:c7:b8:eb:bc:23:c7:50:98:c7:6a:6d:a5:
                    76:eb:d9:1b:f5:bc:fa:16:7f:df:63:eb:ec:a3:42:
                    08:8c:43:08:ad:30:ce:1f:f7:be:b9:16:47:1e:af:
                    d4:f0:c1:68:a2:98:1d:a1:fc:9a:b4:ad:8d:59:bc:
                    84:18:3f:cb:ff:25:7d:61:ee:f4:5c:eb:12:bd:1a:
                    9c:49:b0:6b:e5:ff:bb:f6:4e:db:62:4f:3e:c6:76:
                    9d:d2:07:04:79:98:95:fb:55:48:48:33:4b:6a:de:
                    fc:2c:58:94:24:0f:37:8a:2b:73:57:92:d3:76:4c:
                    dd:b8:96:a1:5b:c3:8e:53:fe:ae:65:75:02:16:94:
                    22:c1:81:3f:f0:7a:90:e9:26:07:a8:25:8c:7e:09:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8A:4E:67:1A:7C:EE:D3:FD:E8:E1:0E:D4:5E:41:8C:3F:39:F5:CF
            X509v3 Authority Key Identifier:
                keyid:3E:50:5B:B1:6E:0D:43:DC:E6:1B:34:AB:7B:DB:B5:74:C9:16:64:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3E505BB16E0D43DCE61B34AB7BDBB574C916641B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E505BB16E0D43DCE61B34AB7BDBB574C916641B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a313038633a3a2f33322d3332203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:108c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:c6:11:9b:b2:fe:01:a1:60:b6:57:af:c8:04:94:89:89:b1:
         16:ac:dd:07:a2:b3:7e:ad:0c:b4:80:1e:47:8c:df:b6:a4:69:
         d3:53:bf:c4:e5:bf:82:fa:a4:1a:5a:81:01:15:33:87:e4:80:
         ec:8a:63:67:6f:90:12:9b:5f:04:27:f4:6e:ad:41:ae:9a:c2:
         87:0b:18:40:d4:e2:52:3a:0c:bd:99:4e:34:8a:67:ec:8f:87:
         4e:72:fa:b2:44:7d:4a:fb:39:ac:48:4b:e9:02:5f:63:1b:66:
         4d:21:96:7f:5b:a2:06:0e:c6:66:5a:d2:62:1a:5b:f8:86:ec:
         01:bb:8f:56:5e:50:7b:42:15:66:93:24:e7:b6:3a:9a:c2:e5:
         69:f6:9a:50:2d:28:19:7c:0a:8f:3e:2d:7d:37:5e:c7:cb:b6:
         b6:64:34:22:03:2e:ea:76:7c:ac:cf:7a:e7:54:bf:be:92:c9:
         76:4e:f9:9c:bd:96:50:d6:02:38:a7:44:60:96:1f:3f:7a:b3:
         b7:d5:6b:cc:3f:bc:83:c4:08:e5:fc:18:9b:69:83:df:2e:b1:
         53:0e:32:03:3c:60:b3:19:6e:61:55:85:8e:27:1b:bb:e6:9f:
         41:98:da:47:ef:e2:ca:0c:b1:c1:a2:84:fd:a5:5b:a8:94:dd:
         d5:ba:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org