Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532303a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a3532303a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          DpDVEZthfsHVpHw0lmBdLTYbwmb+ymVjQPsGAd10D1s=
Subject key identifier:   64:66:6B:B5:D2:7C:D1:D9:27:9B:F7:34:A4:9A:22:D7:26:26:D0:73
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       05469CFD930F3A4C4301BA06E66A9F29B247E024
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532303a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:06 +0000
ROA not before:           Sat 02 Nov 2024 15:18:06 +0000
ROA not after:            Sat 01 Nov 2025 15:23:06 +0000
asID:                     272581
IP address blocks:        2804:8578:520::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:46:9c:fd:93:0f:3a:4c:43:01:ba:06:e6:6a:9f:29:b2:47:e0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:06 2024 GMT
            Not After : Nov  1 15:23:06 2025 GMT
        Subject: CN=64666BB5D27CD1D9279BF734A49A22D72626D073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:a7:54:10:87:d0:60:d7:7c:46:28:7c:6e:
                    97:ac:87:f1:80:48:45:43:07:3c:b8:9c:6e:b9:2a:
                    15:ac:5f:99:a7:8a:df:86:9e:01:55:18:6d:49:3a:
                    4e:28:1f:cd:dd:07:c4:84:86:53:61:98:04:3c:3b:
                    7e:2d:42:2e:71:f2:b4:3d:40:7e:c0:59:0e:31:41:
                    a8:cb:f3:62:ed:a9:cc:93:9e:dc:2a:76:79:3e:67:
                    e8:3f:cc:47:24:9a:92:97:13:09:b5:09:83:37:96:
                    b3:64:2c:4a:ba:9d:5a:eb:4c:88:3e:de:03:29:47:
                    d4:d3:bf:90:95:d4:f0:3e:d4:b0:8b:ea:16:30:85:
                    7c:b3:1a:27:bf:87:1c:08:2a:5f:5d:c0:4f:47:fb:
                    9c:fa:5f:b7:57:ce:85:56:2d:36:4b:d3:26:0c:13:
                    83:52:ba:75:54:70:6d:f0:67:b9:8c:9b:f9:16:65:
                    98:3a:24:40:6f:e8:67:c2:41:ec:93:52:70:45:18:
                    38:ec:30:ef:d2:17:44:8e:bc:3c:8e:7b:41:74:22:
                    48:6c:12:d3:ab:3f:90:24:a9:99:98:a5:19:01:de:
                    a2:a1:4d:66:ac:13:9b:d0:bc:8a:ce:a0:c9:69:bb:
                    d1:04:43:68:16:06:c1:fb:54:93:b8:64:a4:f5:90:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:6B:B5:D2:7C:D1:D9:27:9B:F7:34:A4:9A:22:D7:26:26:D0:73
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532303a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:520::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:b2:46:d9:15:87:73:38:4f:28:70:2c:75:dd:ca:bc:b4:9c:
         68:1f:29:66:3b:90:3c:01:87:e1:43:f6:02:7f:b1:b3:6c:54:
         ba:e6:ed:38:a3:83:ee:05:14:b3:31:08:84:5e:d7:3b:7a:c8:
         5d:90:54:5e:a0:f3:60:56:4f:56:36:5a:94:90:58:2a:89:ef:
         08:e1:04:d3:9a:a2:85:e4:3d:1f:3a:1a:a2:09:63:11:57:b4:
         aa:20:65:bc:0a:ae:08:83:04:9d:51:99:ee:8e:58:87:3f:d8:
         97:8a:08:f1:22:e0:d2:20:e4:ec:8d:28:da:d5:ed:2f:06:83:
         3f:aa:2b:79:ca:aa:2c:6d:7e:57:46:0c:2c:0b:ce:b1:55:e9:
         16:1c:22:f5:9e:2b:42:80:e2:6a:0f:8c:8d:11:e6:a0:5a:15:
         4a:d8:ac:ff:2e:83:85:eb:2d:8a:2b:69:9c:b3:82:69:f2:83:
         99:b2:0f:62:5c:66:ca:02:b7:f5:2d:4f:68:f0:e7:27:ee:7a:
         bd:3d:d3:87:af:11:1b:ad:dc:98:75:5b:c5:7c:7a:08:7b:ff:
         64:42:85:81:41:de:8e:78:ad:49:53:f6:a4:b8:0f:45:e6:14:
         a5:04:a3:fe:9e:77:43:6e:3d:71:54:3c:a2:e0:f3:86:c6:e8:
         72:bf:70:37
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUBUac/ZMPOkxDAboG5mqfKbJH4CQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY1Rjc1OEQyMEQyMTcwN0JFNjBDMjVGMzAwNEQwRUZB
OEE5RkY1NDAeFw0yNDExMDIxNTE4MDZaFw0yNTExMDExNTIzMDZaMDMxMTAvBgNV
BAMTKDY0NjY2QkI1RDI3Q0QxRDkyNzlCRjczNEE0OUEyMkQ3MjYyNkQwNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNadUEIfQYNd8Rih8bpesh/GA
SEVDBzy4nG65KhWsX5mnit+GngFVGG1JOk4oH83dB8SEhlNhmAQ8O34tQi5x8rQ9
QH7AWQ4xQajL82LtqcyTntwqdnk+Z+g/zEckmpKXEwm1CYM3lrNkLEq6nVrrTIg+
3gMpR9TTv5CV1PA+1LCL6hYwhXyzGie/hxwIKl9dwE9H+5z6X7dXzoVWLTZL0yYM
E4NSunVUcG3wZ7mMm/kWZZg6JEBv6GfCQeyTUnBFGDjsMO/SF0SOvDyOe0F0Ikhs
EtOrP5AkqZmYpRkB3qKhTWasE5vQvIrOoMlpu9EEQ2gWBsH7VJO4ZKT1kCFJAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUZGZrtdJ80dknm/c0pJoi1yYm0HMwHwYDVR0j
BBgwFoAUb191jSDSFwe+YMJfMATQ76ip/1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMC82RjVGNzU4RDIwRDIxNzA3QkU2MEMyNUYzMDA0RDBFRkE4QTlGRjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNUY3NThEMjBEMjE3MDdC
RTYwQzI1RjMwMDREMEVGQThBOUZGNTQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAv
MzIzODMwMzQzYTM4MzUzNzM4M2EzNTMyMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM3MzIzNTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBIV4BSAwDQYJKoZIhvcNAQELBQAD
ggEBADCyRtkVh3M4TyhwLHXdyry0nGgfKWY7kDwBh+FD9gJ/sbNsVLrm7Tijg+4F
FLMxCIRe1zt6yF2QVF6g82BWT1Y2WpSQWCqJ7wjhBNOaooXkPR86GqIJYxFXtKog
ZbwKrgiDBJ1Rme6OWIc/2JeKCPEi4NIg5OyNKNrV7S8Ggz+qK3nKqixtfldGDCwL
zrFV6RYcIvWeK0KA4moPjI0R5qBaFUrYrP8ug4XrLYoraZyzgmnyg5myD2JcZsoC
t/UtT2jw5yfuer0904evERut3Jh1W8V8egh7/2RChYFB3o54rUlT9qS4D0XmFKUE
o/6ed0NuPXFUPKLg84bG6HK/cDc=
-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org