Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          I+8jA36oThVzmPX1BxdenM8sym1zsCC8z9QvpmuC/Wg=
Subject key identifier:   2D:6C:19:52:4C:73:EF:CE:83:E4:AE:F0:19:4A:AD:DD:15:27:52:05
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       3F9ACF731A93A71C9497DC4FF283724FBC6C8B76
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:07 +0000
ROA not before:           Sat 02 Nov 2024 15:18:07 +0000
ROA not after:            Sat 01 Nov 2025 15:23:07 +0000
asID:                     272581
IP address blocks:        2804:8578::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9a:cf:73:1a:93:a7:1c:94:97:dc:4f:f2:83:72:4f:bc:6c:8b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:07 2024 GMT
            Not After : Nov  1 15:23:07 2025 GMT
        Subject: CN=2D6C19524C73EFCE83E4AEF0194AADDD15275205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:b9:fd:0b:74:81:9f:b8:0f:05:54:b4:df:
                    5d:9c:9f:b7:96:7d:ff:57:27:d5:63:53:83:a9:65:
                    f8:41:7f:f8:ae:84:82:f3:5f:b4:a0:1a:52:54:cf:
                    69:20:25:f9:90:e9:43:89:8a:b9:9e:0d:b3:bd:6d:
                    96:15:33:15:7c:4c:4f:d4:0b:ec:ca:d5:c6:76:d3:
                    57:e5:e6:cb:bc:34:38:b7:f8:c2:9b:52:9b:4d:98:
                    58:63:3f:67:94:14:91:16:0a:6d:52:98:6f:43:4c:
                    5e:6a:85:4a:50:e3:ac:e1:5c:ce:6f:21:a0:6f:f7:
                    60:89:46:b1:39:a1:dc:51:f7:c6:19:f3:32:a6:98:
                    64:16:76:fe:3b:df:56:d0:58:68:aa:1d:16:8f:11:
                    d4:bc:51:1b:68:80:08:dc:70:96:8f:36:14:a3:9a:
                    68:d6:63:22:eb:d3:76:0a:46:4e:45:95:0d:10:6f:
                    39:85:17:72:7b:26:88:cd:b6:af:60:b8:54:41:9f:
                    6d:1a:b0:75:62:33:48:ac:4a:bd:aa:85:b2:2f:ed:
                    9f:ce:cc:eb:63:f0:89:cf:50:c6:4e:6c:32:71:8c:
                    63:91:08:96:b5:4a:f6:57:f1:ed:ed:bf:9f:30:c4:
                    29:6c:ad:d8:ba:46:80:96:d0:73:bf:ab:3c:09:8e:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6C:19:52:4C:73:EF:CE:83:E4:AE:F0:19:4A:AD:DD:15:27:52:05
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:a6:92:03:ea:8f:74:d0:66:59:60:9c:1f:6b:07:49:4a:
         69:0c:04:52:31:b6:4e:d6:6a:f6:c6:43:83:49:fb:f6:73:ab:
         59:4c:40:ae:ac:37:ee:90:91:53:a1:a2:d9:ae:eb:92:b2:df:
         1f:6a:03:88:fc:2d:f7:4f:0f:b7:0b:23:56:3c:61:5c:40:49:
         ee:64:90:ee:38:a0:d3:5f:b9:fd:51:c2:96:89:e6:8d:c3:2a:
         84:b8:12:6c:2e:d4:36:3e:c2:12:8c:d2:8b:a8:1c:78:83:e0:
         65:31:ca:ce:da:55:3c:0c:25:b6:75:8a:04:5c:03:1b:3d:24:
         ce:1a:60:a5:62:73:18:da:c5:1b:03:ee:e0:f7:f7:67:51:16:
         bb:a7:fc:59:f3:82:4b:00:6a:28:ac:ae:2c:42:fb:95:a1:cf:
         4a:1d:1a:58:1f:dc:88:f2:19:99:fb:c9:30:ea:24:3f:64:8e:
         2d:0a:52:46:b5:0a:94:f4:c7:76:11:5a:da:35:cf:db:eb:15:
         f6:3b:59:ff:96:65:ce:d4:cb:dd:35:09:e2:e0:78:e5:ea:44:
         ec:01:14:68:e3:9c:3c:60:b7:b1:16:78:b3:83:e7:14:07:8f:
         78:b5:a5:1c:21:7e:00:5e:9d:41:ef:81:fe:66:d8:2e:a4:59:
         97:5c:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org