Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a313230313a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a313230313a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          gSI3KklUxfFniJ0QibF1rAEcFfeXWORzw0dOUB9ZzFE=
Subject key identifier:   1E:C5:A4:67:20:44:D2:20:66:C9:01:88:AE:1B:DE:F3:3A:A6:F9:B7
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       40FC2BBD06CD6DF791CC7239635524867CC70729
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a313230313a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:24 +0000
ROA not before:           Wed 04 Sep 2024 13:07:24 +0000
ROA not after:            Wed 03 Sep 2025 13:12:24 +0000
asID:                     272581
IP address blocks:        2804:8578:1201::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fc:2b:bd:06:cd:6d:f7:91:cc:72:39:63:55:24:86:7c:c7:07:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:24 2024 GMT
            Not After : Sep  3 13:12:24 2025 GMT
        Subject: CN=1EC5A4672044D22066C90188AE1BDEF33AA6F9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:1f:4f:23:f2:8d:93:c6:c0:48:74:60:0d:
                    2b:4d:bb:9d:22:16:07:6b:2e:3d:96:50:0e:d5:5c:
                    14:e1:9a:d3:bc:11:8f:7a:55:a3:f5:7a:70:57:b1:
                    ee:81:c4:a6:5e:8f:2d:06:b4:fa:31:27:da:b5:63:
                    21:13:06:b2:95:34:35:08:66:0f:15:8c:7a:dd:e3:
                    ef:62:5d:72:5a:4a:30:2d:d5:5c:8f:4c:7b:f4:fd:
                    dc:2e:87:7b:aa:fe:e8:b0:c9:9c:7e:2d:41:0d:4b:
                    fb:60:e4:21:56:fb:54:6d:3f:a5:33:43:69:57:2a:
                    84:4a:76:b6:a9:db:55:58:44:04:82:2d:d4:bc:83:
                    10:34:a7:ca:3f:ee:4e:bb:52:19:8d:93:9f:23:11:
                    66:29:66:55:fc:78:12:96:6a:bd:27:e9:4b:dc:a0:
                    48:7a:18:14:6b:c0:1b:1c:e4:f7:3a:94:8d:f4:d9:
                    c9:e9:33:5b:5d:04:d7:2f:01:0b:e6:b3:a5:57:a7:
                    52:52:98:43:e4:1d:76:ab:5a:01:4d:2e:07:97:bc:
                    fe:46:ab:6a:11:cb:8a:5e:87:4e:b3:3d:1a:94:db:
                    a3:fd:24:09:46:d5:d3:f5:39:57:00:f9:01:3c:e4:
                    d7:ce:e7:8f:80:bc:e0:f8:51:d2:71:60:18:51:84:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C5:A4:67:20:44:D2:20:66:C9:01:88:AE:1B:DE:F3:3A:A6:F9:B7
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a313230313a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:1201::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:ac:04:79:67:eb:fb:a4:5f:d6:d9:19:bf:7c:b6:f5:54:
         d8:ba:de:8c:9c:69:d7:ee:f6:dc:f8:fd:bd:dc:e6:a0:e7:e0:
         33:8b:6f:19:fd:38:21:0b:0c:0a:aa:bf:5a:51:d4:f4:97:e8:
         ab:c7:64:eb:ec:55:12:39:89:a3:5e:6d:fc:9d:6e:52:f1:a1:
         a5:0c:0d:3b:ed:cc:51:f1:1f:d5:de:1d:bb:bd:49:46:a5:ce:
         3a:89:86:1b:e4:83:67:07:4e:3e:e2:da:e0:33:38:80:d6:8b:
         4a:2f:bd:87:c5:31:16:7e:86:39:9e:f5:59:57:0d:a6:0a:3c:
         f9:90:33:09:51:09:3f:df:5f:50:ff:db:5c:fb:02:35:5c:05:
         a8:88:42:e2:22:b5:54:7e:68:0f:e8:54:ef:fa:8b:a7:d7:17:
         6e:5c:7b:6c:d6:9a:5b:b5:f1:dc:b3:c9:b5:41:1b:82:fa:81:
         8e:c3:56:77:dc:b0:df:be:51:9b:cb:3b:64:ef:d1:ec:28:db:
         3e:cb:0f:49:43:33:5e:16:64:6a:42:7f:93:b5:cf:fa:a0:6c:
         48:d5:1a:88:b7:db:15:90:85:96:d9:9a:fe:6f:6b:79:a9:68:
         37:24:46:bb:e3:88:7a:4d:47:2f:ef:47:23:24:e5:43:cb:59:
         f8:a2:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:47 2024 by rpki-client on console-ams.rpki-client.org