Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa
File:                     323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa (raw, json)
Hash identifier:          uWIldbEbX4cF7diTLaAWMUdQHsRGyahO8OfChmrVFaI=
Subject key identifier:   29:4B:1D:8B:17:79:E9:E4:CE:19:9D:71:E3:43:9A:4D:80:0C:43:A4
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       3F4313ECF0A8C22311142D7EDF3D3B17A28B53AF
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:07 +0000
ROA not before:           Sat 02 Nov 2024 15:18:07 +0000
ROA not after:            Sat 01 Nov 2025 15:23:07 +0000
asID:                     272581
IP address blocks:        2804:8578:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:43:13:ec:f0:a8:c2:23:11:14:2d:7e:df:3d:3b:17:a2:8b:53:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:07 2024 GMT
            Not After : Nov  1 15:23:07 2025 GMT
        Subject: CN=294B1D8B1779E9E4CE199D71E3439A4D800C43A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7d:ad:33:41:eb:04:4b:55:b9:ef:fd:e0:e2:
                    87:bd:91:8f:a0:cd:35:91:40:2e:f6:0c:76:49:3f:
                    95:4d:c3:bd:7a:ad:3e:ef:41:cc:bb:60:89:ca:cd:
                    ad:99:34:9e:54:af:7e:7a:68:24:56:68:4e:44:2c:
                    5b:82:cd:f2:b3:87:4c:4b:d5:5c:56:c8:1e:be:05:
                    30:9e:87:a1:a6:50:42:89:b9:ef:9a:9b:69:a7:f3:
                    b3:5b:9f:b5:60:e8:5d:6f:12:2f:3a:a9:d5:71:bb:
                    04:2f:2b:eb:da:39:67:b4:7f:59:4b:80:ad:6f:c1:
                    fb:8c:dc:33:05:46:94:04:a2:60:fd:1d:7e:30:4e:
                    08:5c:81:d2:0e:ec:35:e2:3f:1a:82:ed:f5:cc:52:
                    0e:15:20:03:d4:d7:71:e9:4c:d0:74:89:5f:b8:4c:
                    2d:06:66:eb:f2:25:b9:54:0a:48:e4:c9:35:12:90:
                    d7:05:cd:0d:33:98:80:06:a2:53:9b:fe:ca:f6:54:
                    01:25:7c:a6:a0:91:c1:1c:68:1e:2c:ba:62:54:72:
                    7e:f9:e1:1f:ca:1f:63:4a:ba:cd:7a:db:4b:90:6f:
                    c4:a4:9f:0b:f3:41:5c:f4:d8:de:7f:52:09:0e:40:
                    3a:79:f0:0b:e4:45:7d:e8:52:eb:4b:ac:07:19:be:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4B:1D:8B:17:79:E9:E4:CE:19:9D:71:E3:43:9A:4D:80:0C:43:A4
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:14:8d:86:e8:86:48:46:30:f1:0c:53:d9:2f:83:e9:8d:
         fe:cc:8d:f8:9d:25:07:f2:43:89:f9:9a:da:5a:ca:95:a1:48:
         da:20:40:ef:c6:e0:82:f4:be:02:f2:2e:c0:06:ff:93:87:78:
         c3:d8:5f:f4:8d:1e:98:55:d8:25:dd:16:5b:5e:3a:a4:39:ac:
         c4:4e:6c:da:5c:22:37:44:c4:be:58:1a:8e:7d:40:27:7d:2e:
         34:ce:34:c8:09:e5:09:04:7c:79:07:55:0a:20:a2:d8:12:f2:
         e4:96:f8:41:d3:15:56:88:9e:b7:c7:6a:62:97:dc:59:a2:90:
         b0:aa:5e:49:9d:a4:56:cd:66:4e:4c:7c:c4:2d:0a:7c:42:6d:
         1d:08:30:f6:db:ea:66:8c:eb:89:ba:a2:b7:f2:6a:e5:55:82:
         e6:8b:c6:a8:e4:fb:c6:a0:7a:bd:ad:e8:2f:2a:98:fb:79:cc:
         dd:7f:86:48:27:8b:ef:a3:40:26:20:f8:bc:4b:e0:e1:30:8f:
         d6:fc:20:65:1e:aa:b3:e2:c4:be:47:6a:e0:3b:ae:16:c6:ba:
         ba:d6:51:94:d9:ac:ec:1d:ed:68:36:fd:0c:54:50:4f:af:11:
         f3:8f:0d:e5:e8:07:7e:6b:ea:15:ee:24:af:69:75:a1:7c:49:
         ea:a2:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org