Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3231353a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a3231353a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          AbJH7Eb6IkDPVKMT6V8HqhIAclT0fH76FYF9FEhU14E=
Subject key identifier:   3A:13:D8:12:D4:C2:5F:5F:4B:0E:95:A5:79:B1:1F:29:6A:13:2D:F7
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       57250BF0D940E6583978471EF1730F971FD6947A
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3231353a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:08 +0000
ROA not before:           Sat 02 Nov 2024 15:18:08 +0000
ROA not after:            Sat 01 Nov 2025 15:23:08 +0000
asID:                     272581
IP address blocks:        2804:8578:215::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:25:0b:f0:d9:40:e6:58:39:78:47:1e:f1:73:0f:97:1f:d6:94:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:08 2024 GMT
            Not After : Nov  1 15:23:08 2025 GMT
        Subject: CN=3A13D812D4C25F5F4B0E95A579B11F296A132DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:e3:5f:20:05:02:80:a1:c4:ae:59:fb:7a:
                    6e:41:7e:43:02:c6:e9:a1:c7:7d:cc:be:04:31:84:
                    f8:1f:19:01:a3:5b:eb:75:79:2a:b0:f5:0b:aa:4e:
                    08:19:ad:13:f4:25:79:9b:d1:33:6b:b5:65:7f:1c:
                    f3:9b:0f:3a:8f:9f:8a:87:ab:3e:10:37:e3:21:56:
                    98:5c:e5:bb:0d:ef:a7:76:0a:47:47:1e:15:3c:59:
                    2b:45:00:2f:4f:01:93:35:63:d1:92:34:41:fa:9a:
                    01:96:76:8b:52:43:b8:fa:0d:67:d2:4c:5b:8a:7e:
                    f1:54:b7:e1:89:38:fd:5c:40:f8:f2:a1:22:f9:3c:
                    11:bf:88:72:92:dc:e0:e7:e0:20:d9:81:eb:b7:d0:
                    b4:78:8c:0e:6f:85:5f:70:52:6a:5e:53:f6:ed:4e:
                    9d:e4:0f:04:d4:eb:66:8d:cd:f3:f5:e7:7e:d7:f8:
                    15:1c:7e:c7:81:66:40:9c:0f:dd:2d:5b:94:cf:9b:
                    74:4f:2b:14:47:b3:f5:71:c8:36:06:5e:ef:16:e9:
                    15:56:ae:1c:6c:e7:28:07:d6:9e:3f:0b:54:3b:7d:
                    1d:b9:cb:9f:a6:ec:ce:ab:0b:8d:e1:87:37:9e:25:
                    c4:9d:24:45:19:b3:a2:7b:ab:f3:0b:d3:d7:54:cd:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:D8:12:D4:C2:5F:5F:4B:0E:95:A5:79:B1:1F:29:6A:13:2D:F7
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3231353a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:215::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:7a:fa:d3:29:6f:4d:70:a3:74:2e:73:3e:96:69:64:8e:
         a3:e2:6f:f8:a3:a4:01:d6:8c:7c:da:d2:dd:93:72:17:b4:06:
         e8:9f:51:b5:89:d1:e7:1b:c6:62:76:c3:65:b2:a1:22:4b:e7:
         6b:a8:ab:85:e6:d6:49:11:8d:b5:d2:05:d6:31:d0:b4:d5:f1:
         da:69:c6:e7:e1:44:7b:fa:32:84:be:4f:6e:0f:63:6e:ed:08:
         3d:97:61:b6:e0:bb:e1:5f:df:39:b1:ad:74:a4:a4:bc:45:e6:
         58:5b:0f:2d:e7:6c:19:e3:95:28:d8:3d:75:cd:36:00:90:7e:
         75:49:2a:89:29:e9:dc:23:b7:2e:66:ce:9d:1e:f0:eb:5a:ac:
         cb:80:61:74:b5:3c:54:55:6b:71:fc:89:3f:31:d8:9d:75:27:
         41:0f:7e:53:92:f7:18:8d:8c:01:88:9c:d6:41:fe:c0:50:63:
         c9:26:9d:35:84:17:2a:64:ab:ed:5e:20:0d:a0:4d:70:10:11:
         f5:5c:c1:a9:9a:07:b4:5c:17:ef:a7:bd:50:18:b3:2d:6f:81:
         3e:5b:1e:34:f4:d5:58:53:4d:93:9e:a3:75:85:77:97:51:14:
         a3:fe:9d:47:6e:0c:21:65:73:e7:3d:0d:ef:7c:c1:78:6d:07:
         7d:ff:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:40 2024 by rpki-client on console-fra.rpki-client.org