Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33322d3332203d3e20323732353831.roa (raw, json)
Hash identifier:          sXWmjmbnrKhrVVaG7QRVMpK7zx6SH5UeHAHhvxiFJR4=
Subject key identifier:   C7:30:EE:E7:64:95:B8:DD:33:A8:A0:86:71:0E:36:C6:44:0E:63:94
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       24C42EE16B395EB35CCA5FC6A4F24CF72D1D0101
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:07 +0000
ROA not before:           Sat 02 Nov 2024 15:18:07 +0000
ROA not after:            Sat 01 Nov 2025 15:23:07 +0000
asID:                     272581
IP address blocks:        2804:8578::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:2e:e1:6b:39:5e:b3:5c:ca:5f:c6:a4:f2:4c:f7:2d:1d:01:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:07 2024 GMT
            Not After : Nov  1 15:23:07 2025 GMT
        Subject: CN=C730EEE76495B8DD33A8A086710E36C6440E6394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:ac:2a:b2:ed:31:e3:1d:dc:df:48:6b:e2:
                    e7:d4:ca:03:48:49:7b:82:b2:54:e9:63:d2:04:04:
                    d6:d7:63:30:c2:ad:c1:60:fb:9b:0d:bf:32:08:61:
                    d2:63:db:23:78:20:7e:8f:91:f8:56:d1:02:14:eb:
                    dd:ec:51:d0:98:a6:f8:33:d8:26:71:77:ec:88:c8:
                    ad:77:3c:92:59:bd:a7:bc:aa:13:54:57:3b:62:8d:
                    ad:64:a9:d3:50:e9:f0:b6:6f:ba:2a:1d:0b:43:9a:
                    c1:e7:cd:41:8d:76:b3:94:19:44:66:34:d1:aa:e0:
                    0b:b9:65:ee:7c:95:f2:7b:de:58:1b:4f:ef:18:51:
                    ff:d9:4b:50:0b:9e:c9:b3:1b:82:f9:6d:dc:49:61:
                    31:af:8f:27:0c:ee:db:61:dc:65:8f:0d:f7:75:59:
                    62:2f:d9:a8:09:f2:01:64:8b:74:f3:41:db:87:a2:
                    5a:8e:07:30:99:a9:36:1a:fd:c6:dd:fe:a7:84:04:
                    46:5e:83:60:6b:9a:c3:1e:8d:51:6f:4a:ae:e1:67:
                    5e:37:71:1e:a6:af:0e:be:f5:ab:ea:4b:90:ce:4d:
                    36:41:ee:42:43:3a:bc:29:3e:42:68:77:11:21:45:
                    ff:54:f3:30:6f:a9:71:0c:38:12:58:e1:37:99:f2:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:30:EE:E7:64:95:B8:DD:33:A8:A0:86:71:0E:36:C6:44:0E:63:94
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:16:47:00:f6:e7:da:89:f2:8b:80:da:c3:e1:dc:0b:c0:
         45:13:69:36:3b:f9:cd:21:38:ff:e0:b5:6f:3e:da:b9:a2:bc:
         ef:c4:ce:81:f7:cc:5d:e1:89:37:cb:be:62:a8:c5:e4:ad:7a:
         65:cf:44:f8:0d:a7:39:31:7c:b0:ac:77:b8:25:fa:10:b1:e7:
         64:ef:90:d7:84:03:4b:a2:82:fa:fc:f7:e5:e6:b9:bf:da:5b:
         2c:cc:5f:04:41:e6:d1:94:54:04:f9:1c:f4:09:50:04:ae:2c:
         3b:1f:00:ba:86:26:f5:22:d2:ca:6b:0c:64:fa:62:47:d0:08:
         4d:64:22:2d:00:ba:ea:7c:eb:11:6e:64:d3:66:79:a6:2b:82:
         b7:2f:06:a8:2f:aa:3d:77:92:12:a4:d6:14:df:fe:f5:a3:f3:
         28:1a:17:5f:0e:4d:cb:ce:7a:17:b8:85:ba:67:d8:c4:45:14:
         d2:49:8f:9e:eb:a0:5a:22:f6:bb:6b:48:4b:67:54:dd:7a:70:
         34:ca:e3:cf:f6:f4:cc:a7:e2:5a:f6:a3:89:8c:21:3f:93:7b:
         eb:db:2d:6f:42:32:1c:f1:a4:59:9c:69:4c:b8:cc:08:b8:bd:
         60:4b:00:59:9f:0c:5d:0c:fd:a3:c7:b7:62:99:e8:04:cb:99:
         03:0b:a4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:41 2024 by rpki-client on console-fra.rpki-client.org