Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a323231343a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a323231343a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          hGMDcR3/OdMSg6jZN3cJnCITgBRb8WJOo3CVw8mtH08=
Subject key identifier:   AB:7C:AA:8B:12:41:1A:0D:C9:2C:55:B0:7F:03:A7:51:B2:5C:29:6C
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       2E486174C067320E79CF82C819FC4D841BFE711D
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a323231343a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:08 +0000
ROA not before:           Sat 02 Nov 2024 15:18:08 +0000
ROA not after:            Sat 01 Nov 2025 15:23:08 +0000
asID:                     272581
IP address blocks:        2804:8578:2214::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:48:61:74:c0:67:32:0e:79:cf:82:c8:19:fc:4d:84:1b:fe:71:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:08 2024 GMT
            Not After : Nov  1 15:23:08 2025 GMT
        Subject: CN=AB7CAA8B12411A0DC92C55B07F03A751B25C296C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:f9:8d:b2:22:53:c2:7d:f0:5d:08:fb:93:
                    09:35:fa:cc:ce:32:fc:54:62:97:6a:23:29:2e:6d:
                    db:90:1b:9b:07:e2:65:16:99:45:58:a3:d1:4b:34:
                    81:5e:c0:8c:1e:67:db:3a:41:57:c1:3e:b3:ed:6e:
                    70:dc:2f:b7:dd:1c:6c:ca:34:e5:ad:dc:83:b7:36:
                    f1:76:c0:a4:42:9d:a9:24:0d:80:80:ec:a7:d4:1a:
                    b7:83:1e:6d:97:ec:29:1f:0b:57:dc:91:54:4f:18:
                    44:6e:1d:f0:19:6a:a7:1f:70:00:b3:2a:6a:b7:8f:
                    e9:41:9f:4a:8d:ff:fc:a0:5f:c9:2e:83:31:62:e6:
                    8d:3f:86:b4:de:9b:cc:66:f8:b5:5c:96:4c:d1:fd:
                    ac:99:39:cf:e3:2e:64:9b:83:5c:83:46:3b:e8:44:
                    4b:1f:97:e7:87:9e:25:ea:a7:8b:37:6e:d9:e8:f0:
                    36:8b:78:e2:ef:45:bf:8a:fa:98:68:0c:f5:b7:b4:
                    ec:da:7b:8f:9d:ab:e4:d5:d4:76:6b:f2:7f:2b:83:
                    22:d6:e3:4f:e0:16:fb:f6:a3:db:ff:31:ee:46:aa:
                    eb:a7:01:51:bd:05:ca:ad:78:45:2e:d7:06:61:ed:
                    9d:95:40:49:57:cc:ec:44:04:1c:92:44:5b:70:18:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7C:AA:8B:12:41:1A:0D:C9:2C:55:B0:7F:03:A7:51:B2:5C:29:6C
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a323231343a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:2214::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:cb:af:b8:a1:2b:c8:6e:a4:27:f7:65:69:ba:1a:1c:e8:d2:
         e8:cd:c2:48:e8:03:6c:75:80:bb:c9:13:0e:03:1d:8a:76:f5:
         66:be:c2:80:0c:51:74:ad:2e:a6:84:28:cf:3a:b8:f8:ba:0b:
         fb:e2:df:20:c8:27:1d:29:87:51:f6:73:92:70:98:2c:3c:eb:
         79:56:ce:a4:60:c5:21:60:12:05:76:b8:79:66:92:7c:29:95:
         5e:d2:e8:3b:2c:6d:ce:87:5f:7c:04:08:73:cd:d6:11:c0:79:
         52:03:ed:e4:a3:70:88:79:4e:de:5b:9a:7c:1b:8a:45:36:d3:
         c7:05:24:74:9b:f2:64:d7:78:49:5e:5e:65:ba:08:cc:a3:3c:
         c1:9c:22:cd:d6:67:55:c7:59:72:b4:6d:f3:bd:39:4d:00:67:
         d8:8b:77:c1:8d:dc:61:7c:2f:44:af:df:b6:bb:d2:f5:ea:1d:
         18:ad:3e:96:7a:72:de:a5:d1:f3:c1:ce:76:8f:5a:2d:6c:2f:
         67:db:d9:1a:22:b6:f1:76:25:dc:ff:50:9c:a9:9d:11:7d:ec:
         26:54:97:79:2e:af:04:f3:4b:98:aa:b9:5a:57:9e:2d:c9:ca:
         4b:02:41:39:65:dc:37:62:d2:9c:4a:2c:bd:e0:01:d2:a8:6c:
         39:0d:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org