Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa
File:                     323830343a313164633a3a2f33322d3336203d3e20323633343434.roa (raw, json)
Hash identifier:          VmXkYRQhHvFv6GY75EvWV8iySw6pwSUC+a5moAqWJRI=
Subject key identifier:   46:CA:5A:FD:80:2B:8C:AF:AE:A2:60:C6:01:73:D8:1B:BD:3A:28:EA
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       74B1D43F72CF9598427D8F40599844C1BF3B4E85
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa
Signing time:             Thu 31 Oct 2024 19:33:52 +0000
ROA not before:           Thu 31 Oct 2024 19:28:52 +0000
ROA not after:            Thu 30 Oct 2025 19:33:52 +0000
asID:                     263444
IP address blocks:        2804:11dc::/32 maxlen: 36

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 01:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b1:d4:3f:72:cf:95:98:42:7d:8f:40:59:98:44:c1:bf:3b:4e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Oct 31 19:28:52 2024 GMT
            Not After : Oct 30 19:33:52 2025 GMT
        Subject: CN=46CA5AFD802B8CAFAEA260C60173D81BBD3A28EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:7e:4d:71:06:05:9d:b9:d4:83:75:e7:0f:
                    65:af:a3:a1:1c:ba:97:db:9f:ed:aa:2a:8b:72:d4:
                    15:c6:f5:93:58:ec:ec:72:d5:0e:94:3f:cd:08:aa:
                    2b:61:ca:a5:b0:62:d1:b5:6c:a0:2c:0e:05:e7:a4:
                    71:fc:39:b8:07:9b:51:dc:7b:7b:e9:3c:e8:37:c3:
                    28:bd:69:d8:f6:9a:58:fb:35:d5:3a:41:81:08:bf:
                    83:1b:23:9d:e8:c8:7b:c7:3c:ea:9c:dc:09:8e:eb:
                    54:ab:9a:0d:6f:dd:09:28:49:54:a8:ab:fe:ad:91:
                    18:56:ac:ff:de:5e:b8:58:c4:e0:24:92:4c:ff:35:
                    b1:be:92:16:ac:08:bc:01:4f:83:f9:bb:31:93:39:
                    bb:d2:0f:57:41:f7:a4:91:58:89:d4:85:0c:55:79:
                    35:70:a8:79:f5:db:57:cf:80:25:a0:d9:03:9b:88:
                    4c:52:7b:9d:a2:6a:5c:74:79:02:6e:9b:68:d3:2b:
                    a7:26:00:17:8d:99:5e:dc:97:4a:49:96:7c:4f:dd:
                    98:e6:d7:9c:50:81:55:ac:c5:d2:a2:a4:77:09:0b:
                    d9:f5:ee:dd:14:b8:d9:38:52:a0:2c:dd:fd:83:6d:
                    5d:0a:c2:db:73:7e:f3:97:b6:e6:44:5b:54:27:71:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CA:5A:FD:80:2B:8C:AF:AE:A2:60:C6:01:73:D8:1B:BD:3A:28:EA
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:a3:f3:d7:8c:34:d2:ab:02:ad:4c:84:8e:da:00:69:4d:
         91:12:78:f5:f9:d4:ff:72:ff:ed:3c:39:1a:17:51:d7:dd:85:
         bd:71:6f:f2:20:28:73:48:be:7f:65:61:60:11:6d:29:8a:a6:
         1c:1c:0b:27:e3:19:01:3e:84:6c:b9:fc:8d:4e:14:d3:0f:4a:
         71:f4:49:de:03:3a:46:c3:60:a4:a3:41:d4:af:b8:7b:29:49:
         a7:18:b2:84:50:13:59:d3:b2:09:88:4a:31:35:21:19:2f:0e:
         2f:c7:ed:55:c2:4e:41:89:2b:ec:52:5f:60:60:a0:72:57:76:
         f9:07:8a:37:4c:34:cf:b4:dd:82:00:64:41:b5:3d:fb:32:65:
         56:38:04:68:8a:e3:53:b5:10:54:ee:c2:e5:4b:e3:7f:c2:54:
         26:dc:98:46:6f:97:2a:ae:43:31:e4:6f:06:cb:9f:9f:a4:4a:
         a0:3a:65:18:27:95:da:5c:5a:08:a9:96:0c:79:c7:94:b5:f3:
         fc:38:78:56:3d:8c:18:29:52:4a:a0:b1:40:39:d9:e8:eb:14:
         65:75:83:a3:18:0d:44:50:81:72:26:57:a2:da:0f:0c:ef:38:
         59:57:60:4a:5d:05:37:89:29:3f:a0:5f:f2:2d:1b:a3:9c:19:
         a2:06:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 06:45:00 2024 by rpki-client on console-fra.rpki-client.org