Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          /of5H6zimf3S01SY4SyGzn8T8aZ9ocM1r3IMNXVm84k=
Subject key identifier:   61:23:3E:C8:35:16:24:F2:C8:29:F7:6D:E3:07:30:12:C7:70:94:5C
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       31696AB5209F1197AD8F13298F1DDDE8BD8445E7
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:08 +0000
ROA not before:           Sat 02 Nov 2024 15:18:08 +0000
ROA not after:            Sat 01 Nov 2025 15:23:08 +0000
asID:                     272581
IP address blocks:        2804:8578:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:69:6a:b5:20:9f:11:97:ad:8f:13:29:8f:1d:dd:e8:bd:84:45:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:08 2024 GMT
            Not After : Nov  1 15:23:08 2025 GMT
        Subject: CN=61233EC8351624F2C829F76DE3073012C770945C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:bd:4b:3f:6f:28:f0:7e:80:bb:88:2c:76:
                    a2:b8:60:d3:fd:db:9f:2a:f0:96:21:07:cf:29:bb:
                    3c:8c:50:c2:b8:28:30:71:38:57:c3:e0:23:87:d6:
                    31:28:c7:2e:17:e6:b6:09:9a:7e:95:53:c9:4d:63:
                    6f:ad:4a:dc:08:80:f3:ce:c8:b4:dd:da:8d:c6:05:
                    67:58:1f:f6:96:74:d5:cf:d4:d3:51:0d:70:fc:05:
                    bd:af:10:40:a3:19:29:88:14:69:db:da:86:b0:ba:
                    e5:a7:eb:1b:1c:c0:88:29:05:b1:72:7e:31:d7:21:
                    55:0d:aa:5c:0b:f7:bd:44:3d:ed:ec:38:f8:1a:77:
                    90:7d:8c:9c:db:2a:be:a6:3f:ce:2e:31:25:00:3a:
                    e0:18:68:4d:be:64:08:fd:f2:63:6c:40:3b:c4:04:
                    c0:9f:76:dc:a7:1b:9c:16:2e:fb:ac:9d:cc:07:3c:
                    df:65:f3:22:42:75:2a:27:08:60:b7:de:e5:df:c2:
                    c9:8f:26:b8:dc:38:e4:d5:97:a5:0f:5f:29:1c:34:
                    cf:61:f0:d2:41:94:b8:56:5f:ac:6c:4d:6e:55:7e:
                    b2:5b:e9:f0:c4:00:24:46:fd:34:58:ac:24:ed:fb:
                    2c:53:b4:8f:92:64:fd:34:de:28:11:94:25:c6:29:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:23:3E:C8:35:16:24:F2:C8:29:F7:6D:E3:07:30:12:C7:70:94:5C
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:85:31:98:8d:6f:dd:a1:de:08:90:e2:2c:08:df:c3:72:
         d5:4d:05:70:d4:f2:90:b9:80:1b:6f:7a:a0:29:68:89:15:d6:
         16:9a:37:7e:8f:e5:c0:54:31:7c:93:ab:87:7a:89:9a:f9:d1:
         bc:b9:83:75:6b:9a:b7:c5:fd:a5:77:fb:80:54:2d:b0:cb:c8:
         52:52:98:c1:ab:5a:6f:5e:55:fe:93:1d:f6:ea:16:56:b9:b2:
         f9:a3:8e:02:1b:ad:97:d7:c9:c3:48:e5:b3:4d:20:6e:88:80:
         6c:eb:28:80:62:cc:fc:14:2f:94:44:1f:0e:54:15:50:53:9e:
         b1:ec:04:7d:03:d2:8e:f8:e2:ea:bb:c7:24:72:01:dc:48:5e:
         21:38:72:e5:f4:cf:93:ab:cf:74:4b:00:1a:5e:9a:3e:08:40:
         02:a4:83:99:e8:f4:e6:6d:2a:a6:e7:ac:ad:9f:f4:34:d3:35:
         e7:4f:16:ba:70:40:46:56:98:13:1b:e7:9a:3b:fa:ad:94:6e:
         1a:a7:8f:71:a5:e9:f2:76:40:59:b0:20:2e:af:77:41:73:65:
         11:eb:19:74:3a:ab:f4:b2:98:5a:f2:1a:ed:0c:32:45:05:39:
         5e:ab:15:7e:23:a9:b4:a8:bd:d7:21:da:89:61:6c:ab:b1:23:
         c0:83:c4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:41 2024 by rpki-client on console-fra.rpki-client.org