Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532333a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a3532333a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          cAPgsbKeVgRRdzbNu69PpcOBo4oHg9m5DJiCVN3mO2k=
Subject key identifier:   D7:43:FC:29:2B:F7:6D:42:DB:BC:10:A6:49:7C:4F:43:0C:7B:A9:56
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       5432D169D1437B5232299D398A8BC2F25EF66888
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532333a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:07 +0000
ROA not before:           Sat 02 Nov 2024 15:18:07 +0000
ROA not after:            Sat 01 Nov 2025 15:23:07 +0000
asID:                     272581
IP address blocks:        2804:8578:523::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:32:d1:69:d1:43:7b:52:32:29:9d:39:8a:8b:c2:f2:5e:f6:68:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:07 2024 GMT
            Not After : Nov  1 15:23:07 2025 GMT
        Subject: CN=D743FC292BF76D42DBBC10A6497C4F430C7BA956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:87:8e:9b:9d:65:8d:14:67:86:ff:24:64:
                    be:dc:a4:f6:f3:78:a9:2c:db:27:9f:61:0b:76:14:
                    c0:43:30:c9:e4:d8:e5:83:68:0e:de:a0:91:90:73:
                    78:cb:b5:43:33:34:a9:a5:a4:c0:46:de:44:ab:8d:
                    9c:a9:27:63:74:81:23:3c:aa:6e:7c:c1:0a:61:e3:
                    e1:c2:23:91:55:b8:b7:66:6c:9b:a2:9f:a6:c0:55:
                    d6:05:a7:be:66:c1:40:cd:34:4b:05:e4:6d:3f:22:
                    dc:91:b4:e9:c1:83:7c:2d:01:de:86:1c:b9:66:0a:
                    f2:3a:f0:23:b6:7c:00:d9:f7:43:4a:5b:6a:bf:be:
                    8f:ad:4b:f5:34:5f:9c:04:3a:ed:c6:ba:95:73:9c:
                    07:c2:e4:97:b6:b3:0c:46:84:a0:87:42:90:ee:50:
                    8c:fd:76:a5:fb:3f:ce:5c:62:41:19:8b:1e:40:0c:
                    48:58:35:47:8e:fc:51:a6:5d:b0:11:45:f6:37:61:
                    3f:c1:a5:a4:2d:e3:29:2b:4d:9c:79:d2:d4:28:53:
                    8f:48:3e:20:f7:f4:06:61:e0:c5:59:49:2e:98:df:
                    96:a0:ae:54:32:14:69:b9:d4:64:dc:4a:59:5d:e7:
                    59:4e:64:79:57:4b:20:f2:e4:0f:1e:12:03:df:ff:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:43:FC:29:2B:F7:6D:42:DB:BC:10:A6:49:7C:4F:43:0C:7B:A9:56
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532333a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:523::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:2b:e7:66:9c:45:88:f3:3f:e9:2f:fd:f9:05:b4:e2:bf:fc:
         c6:ab:67:91:10:13:56:4d:9c:99:93:d6:56:15:3f:3d:89:68:
         d8:c1:e1:64:16:ce:9b:0b:57:c8:af:05:a6:28:cd:5e:34:40:
         b1:17:30:e4:dd:42:3f:68:6c:c0:b9:ab:bd:13:dd:1c:a0:fa:
         8c:ab:e2:dd:5c:50:48:05:08:2b:b1:ad:e1:87:39:20:09:84:
         de:05:37:69:1e:8d:67:70:af:72:4a:63:5e:d5:c3:99:61:d8:
         b4:ff:d7:a6:e2:f8:0d:2c:24:0c:6c:a4:a0:14:ad:79:86:5a:
         b1:62:ab:f7:2d:8c:43:63:11:0c:6e:a6:67:58:79:6b:54:b2:
         49:35:7f:39:70:cf:98:af:1e:e6:19:ae:ef:1e:a2:45:61:94:
         27:f4:af:e0:49:30:72:ff:4d:30:56:a2:ac:2e:2f:81:fd:0f:
         ee:db:68:65:cf:36:23:26:73:27:08:19:7d:5c:3d:4f:f3:47:
         aa:60:bb:8f:90:3b:cd:e6:08:ee:d5:02:e6:2b:57:31:02:4f:
         78:0e:26:73:7f:00:41:73:b4:5f:b6:d7:ae:92:d0:99:33:33:
         f9:60:35:ef:ae:f1:ad:ca:52:77:b0:26:7c:fb:a9:d8:08:c4:
         65:18:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org