Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/323830343a3337633a3a2f33322d3634203d3e20323634343630.roa
File:                     323830343a3337633a3a2f33322d3634203d3e20323634343630.roa (raw, json)
Hash identifier:          9u6xGHxUYQtXF3X+k6RUk+FGRhbOOkfa7NWH8pNrYM0=
Subject key identifier:   C6:39:BD:89:F9:31:EE:77:A7:89:9C:5F:AF:63:27:64:A1:0C:64:32
Certificate issuer:       /CN=0BEDBC9F25C3978554ED91AA9D925E7498F260D9
Certificate serial:       464F6D67F939C7F3D66D0EDDACE424C947F4EA3B
Authority key identifier: 0B:ED:BC:9F:25:C3:97:85:54:ED:91:AA:9D:92:5E:74:98:F2:60:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/323830343a3337633a3a2f33322d3634203d3e20323634343630.roa
Signing time:             Sat 11 May 2024 22:42:00 +0000
ROA not before:           Sat 11 May 2024 22:37:00 +0000
ROA not after:            Sat 10 May 2025 22:42:00 +0000
asID:                     264460
IP address blocks:        2804:37c::/32 maxlen: 64

Validation:               Failed, certificate revoked on Wed 15 May 2024 00:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4f:6d:67:f9:39:c7:f3:d6:6d:0e:dd:ac:e4:24:c9:47:f4:ea:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BEDBC9F25C3978554ED91AA9D925E7498F260D9
        Validity
            Not Before: May 11 22:37:00 2024 GMT
            Not After : May 10 22:42:00 2025 GMT
        Subject: CN=C639BD89F931EE77A7899C5FAF632764A10C6432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:85:57:0e:3e:b9:4c:da:85:e2:ec:b5:e0:
                    23:2a:2c:31:6f:c5:dc:61:92:09:ca:a3:fe:06:e4:
                    43:4a:69:1a:b7:1c:63:fb:be:b5:e8:b3:78:8f:bc:
                    5a:b2:25:59:f4:0f:9a:ad:c2:3f:10:87:f5:91:5c:
                    2b:59:5b:45:d6:e9:c1:e5:a1:4c:ca:36:3c:4c:78:
                    9b:2b:34:16:75:07:7f:ed:f0:1d:18:2d:d7:fa:8e:
                    d0:56:55:6b:d2:e1:eb:04:38:d2:fa:6a:5d:14:10:
                    1e:c5:cc:28:33:bb:a3:ae:87:f5:03:26:0c:38:3f:
                    86:10:67:e3:7b:78:10:2a:0e:78:df:37:8d:8e:1a:
                    d4:c1:8f:5d:e0:24:71:1f:19:b2:50:21:26:93:af:
                    d9:49:82:b7:84:0f:32:c9:7b:bf:4d:84:86:29:f8:
                    46:ea:ff:90:54:30:7a:ed:b8:77:43:30:51:fa:eb:
                    b9:32:18:06:d7:7c:b8:be:55:82:a5:22:70:26:95:
                    90:2b:51:0a:3b:6b:11:a1:9e:c7:e7:7f:2d:66:ad:
                    7c:9b:44:62:dd:46:7e:a1:00:b3:ba:a2:d5:fe:98:
                    c3:b5:69:3f:64:a4:58:b2:a1:04:10:0e:4d:48:25:
                    bc:ce:b1:e2:e4:cd:a9:f9:d4:e7:7d:af:d2:e4:f7:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:BD:89:F9:31:EE:77:A7:89:9C:5F:AF:63:27:64:A1:0C:64:32
            X509v3 Authority Key Identifier:
                keyid:0B:ED:BC:9F:25:C3:97:85:54:ED:91:AA:9D:92:5E:74:98:F2:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/323830343a3337633a3a2f33322d3634203d3e20323634343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:2a:6f:9f:bf:78:73:5d:b7:69:6e:19:8b:fe:c5:be:fa:bb:
         5f:f6:94:b4:90:78:61:16:c1:77:81:de:db:1f:2b:a9:1a:7a:
         08:69:8c:0e:24:66:b0:88:cc:f1:cb:f4:9b:c3:ed:54:ed:ae:
         27:c3:33:df:ce:cb:93:e0:4d:40:73:91:4e:ab:ea:a4:ab:9d:
         97:28:14:75:39:94:62:7b:bb:b4:84:dc:f4:fe:c1:40:61:f6:
         db:41:e9:45:bd:1f:98:c7:e5:95:cd:d7:b3:8d:69:dd:36:a2:
         0f:1a:5d:65:3b:60:a8:24:4f:13:a5:5d:e8:f6:d4:59:75:14:
         4b:9f:ed:8a:b9:88:e5:b1:49:52:22:b5:80:d6:ae:f1:94:a7:
         2b:4f:ba:50:80:a0:67:f0:c7:74:b7:45:9d:74:8e:e8:cb:f6:
         85:d3:b1:1d:5b:c2:c9:b7:93:ba:61:3a:8b:9f:6e:97:13:c9:
         77:e6:6a:c7:03:f0:66:2f:86:17:2b:3f:4f:86:43:ed:71:d8:
         bd:68:ac:b7:67:cb:20:01:b7:8d:32:0d:35:52:39:52:da:aa:
         01:94:17:a9:9e:60:e3:96:9d:c3:77:a4:c4:a6:f4:ac:b6:97:
         c4:11:20:2c:bd:3e:e9:92:d6:20:b7:9c:0a:3a:c9:13:9b:77:
         ca:7c:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org