Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532373a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a3532373a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          8Yg6N3PEKo50t/d9jJtPU0cXgsGHDgVzrqGSbwdDs2M=
Subject key identifier:   1C:F8:B2:B9:B8:8E:E6:51:F3:8E:6A:CA:0B:AA:23:F4:92:B6:D8:B0
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       5024692BA1C5D7B229EF11C8281A34630AE30452
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532373a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:07 +0000
ROA not before:           Sat 02 Nov 2024 15:18:07 +0000
ROA not after:            Sat 01 Nov 2025 15:23:07 +0000
asID:                     272581
IP address blocks:        2804:8578:527::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:24:69:2b:a1:c5:d7:b2:29:ef:11:c8:28:1a:34:63:0a:e3:04:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:07 2024 GMT
            Not After : Nov  1 15:23:07 2025 GMT
        Subject: CN=1CF8B2B9B88EE651F38E6ACA0BAA23F492B6D8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:2b:f7:b3:83:8b:40:3b:fc:ea:af:31:4e:
                    bc:23:bf:82:f1:c6:00:b8:f5:48:d0:ab:5b:cc:1a:
                    dc:c0:c3:3c:00:2a:de:4c:21:8e:47:25:72:d4:4a:
                    d5:1d:9c:cc:d1:b8:a9:13:53:7b:89:5b:8c:2e:0e:
                    4e:b3:0d:fb:b7:c7:81:5e:f1:bc:e9:a5:05:70:10:
                    7a:4c:ab:b0:85:6a:e9:1d:62:06:06:be:4f:62:50:
                    ed:7a:88:23:b9:05:53:bf:25:8c:1e:37:c6:fa:9a:
                    14:0d:11:1c:dc:ab:10:33:ea:dc:0f:a2:f8:89:71:
                    9a:28:5d:4f:fe:e3:c5:9b:f2:c8:0b:4e:9a:c0:85:
                    f3:67:96:8f:70:4e:14:ec:c5:ff:10:84:de:53:71:
                    4f:d5:d1:68:c5:88:ff:8c:01:24:ee:02:10:d7:b5:
                    94:21:77:09:c2:24:99:bc:0b:9f:91:20:e0:c6:a3:
                    19:49:c0:15:94:aa:33:a2:23:b9:51:9f:13:a3:88:
                    0c:44:3c:3a:01:80:9d:9c:e8:35:e7:e0:b7:7e:b7:
                    b8:06:ba:b7:d4:31:47:c2:5d:37:42:ae:36:52:e6:
                    0f:22:14:b2:05:0d:ec:41:f5:5f:d8:64:a9:3a:12:
                    af:24:49:c4:b1:90:cb:ba:8e:ba:56:36:dd:96:88:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F8:B2:B9:B8:8E:E6:51:F3:8E:6A:CA:0B:AA:23:F4:92:B6:D8:B0
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3532373a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:527::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:3b:a5:6f:78:da:dc:63:cb:59:70:26:fd:be:06:19:72:bd:
         26:8b:59:44:86:3d:a8:57:e3:38:28:ae:94:9e:3c:67:d0:c1:
         dd:5d:e1:36:57:97:bf:74:37:40:80:34:a8:31:61:f9:bc:6b:
         7c:5a:71:2a:35:c0:2a:eb:da:ea:8c:2a:aa:84:90:04:73:d6:
         f1:8b:ed:74:c5:5f:6e:0a:9c:c7:01:ac:c8:66:9d:68:d2:1d:
         0f:37:cc:5f:ef:7e:d2:ec:8a:90:15:ea:75:69:ea:79:a2:a6:
         18:5d:3e:dd:c6:90:6c:40:73:28:50:94:ba:a5:1e:60:1b:27:
         09:e2:e6:dd:2e:06:ed:ec:bd:a7:dd:4a:ba:f9:a6:fd:30:14:
         09:0d:10:e7:7e:0d:c2:14:6e:55:50:11:b9:23:2f:89:6f:06:
         d3:55:7f:2b:43:29:7b:6e:df:db:a2:bb:b3:fd:2b:cf:5b:8e:
         cf:e3:fa:d0:4a:df:a9:0a:31:11:ed:77:80:34:dc:c0:62:27:
         f9:81:b1:e3:30:4d:bd:29:7b:63:81:4f:60:6a:fc:bc:8b:f3:
         2a:1f:7b:fe:61:5f:52:4b:61:66:b3:f6:aa:92:ac:30:f3:63:
         ea:4e:65:35:26:0a:7d:82:a2:56:79:38:c3:d5:b2:bc:b0:82:
         8f:79:40:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org