Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          /TN06R4QQqxjnR+TrzXjSJHCUpF5NOOubHM+gzaVH+g=
Subject key identifier:   AE:FA:F8:33:57:CB:F2:86:68:52:4B:0D:46:C1:2C:17:EA:4B:50:F3
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       675B224A7B16D591850A8938894DDA99FEBDC340
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:06 +0000
ROA not before:           Sat 02 Nov 2024 15:18:06 +0000
ROA not after:            Sat 01 Nov 2025 15:23:06 +0000
asID:                     272581
IP address blocks:        2804:8578:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5b:22:4a:7b:16:d5:91:85:0a:89:38:89:4d:da:99:fe:bd:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:06 2024 GMT
            Not After : Nov  1 15:23:06 2025 GMT
        Subject: CN=AEFAF83357CBF28668524B0D46C12C17EA4B50F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3e:c9:f4:ea:2c:05:09:a6:22:78:95:5f:86:
                    cd:e7:c1:03:f5:17:91:49:5d:e9:dd:dd:9a:b1:52:
                    30:8e:d4:7f:8e:74:e0:de:08:c6:1d:54:86:c1:3e:
                    9a:58:f6:f5:96:a3:76:87:68:1b:af:bd:3c:ce:d4:
                    82:b0:c7:18:74:b2:26:17:c5:8f:a8:e6:50:54:a5:
                    aa:90:d9:36:e7:c6:2e:7e:c2:cd:36:18:78:7b:0d:
                    01:1f:9c:75:d2:2f:bb:71:8b:ba:c8:17:15:bf:8c:
                    97:45:bc:ea:7d:f0:09:04:9d:83:f5:b5:6b:09:bd:
                    c7:98:fe:fd:94:f5:6e:d0:d9:e8:01:9c:6d:7d:78:
                    b5:91:f1:b8:94:cd:53:d2:2f:ad:50:2e:e2:43:59:
                    fc:8d:f4:a2:73:46:55:49:97:d0:5a:3b:9e:a4:2b:
                    f7:03:59:c9:69:63:a7:19:ee:46:30:f7:da:5d:6d:
                    a8:e7:8c:9f:3f:e4:af:d3:70:f3:f7:ce:fc:46:0a:
                    59:c4:b4:91:bd:9f:53:f9:c4:e0:9f:bb:0d:49:d2:
                    60:66:25:3a:e0:e4:ae:a9:16:9e:9d:cb:21:50:88:
                    49:a4:b1:59:0e:16:e4:82:d0:6f:3f:98:48:ed:73:
                    9e:39:92:2c:c8:55:4a:79:49:0b:9b:96:42:a0:1b:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FA:F8:33:57:CB:F2:86:68:52:4B:0D:46:C1:2C:17:EA:4B:50:F3
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:ea:a2:81:2b:e0:cb:fd:12:3a:d6:77:40:0b:a0:02:13:28:
         ec:dc:d5:2f:48:3e:59:23:8b:49:6a:46:25:c1:e7:fd:c1:77:
         67:02:55:46:6d:ae:e0:53:7b:89:24:30:70:71:a0:e8:8f:29:
         b0:fc:a8:b3:e7:70:f5:ed:9f:04:4d:1b:29:3f:d0:16:75:b5:
         75:23:24:7a:f1:ed:27:13:73:2f:11:1b:f3:c6:54:2a:95:b7:
         27:67:ec:a6:6e:43:4f:f6:8e:ac:da:e3:c6:5a:f5:a2:c6:82:
         4c:28:e0:1c:37:a1:72:a3:d6:94:0f:bc:68:bc:75:8b:c7:e9:
         52:01:1f:c6:b3:f9:56:51:be:10:04:7a:c5:74:5e:9e:16:cc:
         97:46:03:f7:76:ce:e5:b0:36:38:d2:d1:c8:01:8a:16:77:fd:
         6c:06:aa:88:a1:69:fb:a7:89:56:30:eb:f1:58:59:f9:d4:68:
         ea:f3:7b:ae:7b:d2:c1:d3:29:29:71:e4:16:35:28:31:98:a2:
         07:24:f6:66:12:b9:89:e1:5d:e1:27:49:2e:ee:d4:ac:0a:f6:
         e0:13:1c:db:0b:80:c4:a1:5b:96:91:23:fd:3f:9a:7b:2c:9a:
         a6:ed:0d:e6:31:bd:0c:f9:39:94:93:d8:a6:95:94:77:d2:9a:
         54:23:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org