Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33322d3336203d3e203533303532.roa
File:                     323830343a326634383a3a2f33322d3336203d3e203533303532.roa (raw, json)
Hash identifier:          CTZnoiEG+beOd/Gu2/guEYGSn/PYTfkXmbRjfP7IOUs=
Subject key identifier:   40:05:89:82:EA:1B:AD:0B:BA:E3:00:E5:93:5D:CB:DF:EC:CF:82:49
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       1E45EC9700E43B18093A1EF58138E83216CAC589
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33322d3336203d3e203533303532.roa
Signing time:             Tue 06 Aug 2024 17:28:20 +0000
ROA not before:           Tue 06 Aug 2024 17:23:20 +0000
ROA not after:            Tue 05 Aug 2025 17:28:20 +0000
asID:                     53052
IP address blocks:        2804:2f48::/32 maxlen: 36

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 18:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:45:ec:97:00:e4:3b:18:09:3a:1e:f5:81:38:e8:32:16:ca:c5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Aug  6 17:23:20 2024 GMT
            Not After : Aug  5 17:28:20 2025 GMT
        Subject: CN=40058982EA1BAD0BBAE300E5935DCBDFECCF8249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:76:24:fe:6d:99:76:f0:f5:99:6f:02:72:fc:
                    08:f5:02:29:b4:74:fd:0e:3a:ea:42:9a:fa:96:93:
                    ac:d3:87:05:d6:5c:c9:a7:c9:e3:74:63:6c:88:36:
                    cb:ba:f5:df:c5:37:bb:e2:b8:d7:da:3d:c5:55:e0:
                    81:41:b6:17:b9:38:eb:91:af:3c:f4:7b:f1:88:05:
                    25:c4:72:7f:f7:32:16:b3:06:69:f8:03:32:1f:5f:
                    79:41:aa:cb:4a:23:a1:c2:78:39:64:35:4a:8b:c0:
                    6f:76:42:81:92:9d:a0:33:d8:b3:36:6f:f2:3f:8f:
                    f6:40:d2:c0:70:e6:3e:12:c5:a3:08:e1:a7:6a:55:
                    e3:91:42:21:b3:44:f1:4c:58:5b:af:8d:22:11:30:
                    09:68:a5:34:8b:d7:72:bb:d3:93:cb:0d:03:41:39:
                    8b:f7:b8:fd:4f:89:6e:30:b4:47:6a:4e:78:ec:f6:
                    de:d6:c1:60:1a:40:b9:97:94:69:ef:bb:35:54:c2:
                    92:5a:6c:1e:06:4c:12:dd:02:cf:af:71:14:c9:5f:
                    a3:80:93:90:f3:3f:63:a2:c7:06:1b:57:af:9b:cc:
                    42:4b:1b:49:0d:eb:5c:42:b9:8e:2b:bd:15:e3:ea:
                    55:5e:e1:fb:a7:bc:b8:f7:bf:32:51:96:78:55:4f:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:05:89:82:EA:1B:AD:0B:BA:E3:00:E5:93:5D:CB:DF:EC:CF:82:49
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33322d3336203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:50:9d:3f:8a:f5:78:b1:ec:81:ac:ab:9b:5f:77:50:48:
         32:39:a0:9e:23:df:77:d0:11:99:3e:20:ec:fa:4e:f7:d9:f3:
         0c:f4:af:b9:90:53:cd:ad:f1:60:ed:0c:a9:ae:8e:40:52:86:
         70:93:12:b9:8d:23:4c:5c:80:e7:dc:62:d9:4b:7b:9e:b0:5d:
         b2:09:d3:d7:af:cb:7f:be:3c:23:e9:99:9d:bc:2c:71:7c:72:
         4d:17:0c:8e:b8:4c:a7:17:f5:1d:0d:ef:98:41:c6:ba:af:5e:
         65:f1:a7:d9:61:8f:47:11:c8:de:24:4e:88:33:fa:b1:07:f6:
         e0:24:e3:2a:e8:c3:c4:bb:22:56:c4:a4:57:dc:8a:7d:86:a8:
         21:19:59:4e:2e:59:a3:3d:5b:2e:3a:f0:d4:cf:56:1f:80:68:
         21:19:a7:11:7d:1f:5d:70:72:17:52:23:fe:8a:de:e3:fa:3c:
         45:f3:0b:fc:5c:a9:b2:5c:34:2c:2f:e2:f8:6a:8f:e3:d5:ff:
         0c:d7:98:fc:c5:dd:76:31:7f:ca:23:c6:73:21:e4:59:8c:25:
         00:99:3b:36:3e:72:72:18:07:eb:c5:ba:8b:86:77:19:3c:27:
         6f:2a:f2:6a:f3:71:c6:a6:1a:c1:56:14:b5:c5:58:3e:bd:c7:
         6a:31:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 20:13:07 2024 by rpki-client on console-ams.rpki-client.org