Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3231353a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a3231353a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          PXZYq1ZFcN1KU/wMa2444qGD+zjfYzqpfys6rLkcIvs=
Subject key identifier:   6D:1F:76:0D:41:3E:72:81:4F:22:3E:6B:88:5D:9C:A2:7E:43:E5:73
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       6E1DBF0508A58D7418315BD45205B80D6685CE14
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3231353a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:23 +0000
ROA not before:           Wed 04 Sep 2024 13:07:23 +0000
ROA not after:            Wed 03 Sep 2025 13:12:23 +0000
asID:                     272581
IP address blocks:        2804:8578:215::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1d:bf:05:08:a5:8d:74:18:31:5b:d4:52:05:b8:0d:66:85:ce:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:23 2024 GMT
            Not After : Sep  3 13:12:23 2025 GMT
        Subject: CN=6D1F760D413E72814F223E6B885D9CA27E43E573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:85:e3:4d:b6:c4:1f:ba:6a:31:fe:b4:82:
                    30:f3:7b:df:be:54:04:18:a1:df:c4:bd:33:3b:cd:
                    6c:b3:c9:0e:d1:06:53:21:58:09:90:d1:dd:67:2f:
                    35:1f:98:ce:0f:4c:1d:c5:fa:0c:1d:4b:4d:2d:71:
                    f4:f0:d6:75:4d:d6:6d:06:48:83:52:c6:e6:fa:78:
                    0f:41:c7:fb:17:f8:f3:c7:64:49:23:2b:58:c6:f0:
                    2e:5d:12:6c:cd:3d:58:3c:c3:1f:b0:00:61:82:e3:
                    0e:4f:79:da:e3:77:96:f2:13:d3:8a:eb:0f:c4:d2:
                    70:ac:df:30:68:a7:18:13:26:fd:92:5e:fb:4b:e0:
                    13:1f:81:2f:fa:4e:94:0a:ab:e1:a7:36:c1:8c:c9:
                    6a:20:f2:44:89:c8:49:68:4b:f3:7e:cc:7f:da:e1:
                    0e:d1:34:c2:c8:b8:85:b8:af:15:4c:8b:cb:2a:6a:
                    f2:7a:1a:39:3c:1a:8b:9b:31:25:ab:fa:04:da:7f:
                    cc:54:92:3e:54:88:be:bd:72:fc:8c:13:13:dd:c0:
                    33:92:fa:46:47:95:eb:b6:a9:f9:4b:6f:27:7f:4e:
                    bf:7f:cc:c1:6a:98:b0:4d:0f:33:b1:19:16:13:c6:
                    cf:59:84:d2:18:92:f1:ee:f9:ca:ee:f7:30:9b:f5:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1F:76:0D:41:3E:72:81:4F:22:3E:6B:88:5D:9C:A2:7E:43:E5:73
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3231353a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:215::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:95:05:4e:a9:18:b3:ba:cb:d5:1e:dc:93:0d:c6:a2:82:3a:
         25:96:1a:f2:9c:4a:f5:d8:c2:ed:3a:d8:9d:2e:fb:01:0b:bd:
         b2:69:43:61:2b:78:01:3a:76:90:5e:b2:0b:44:73:f2:73:8f:
         11:f0:e8:54:df:b2:d4:3a:61:e0:b8:e8:27:e5:e2:8a:58:03:
         56:18:3c:7c:af:e2:20:13:89:d3:bb:2d:f9:b6:3b:5e:1e:1c:
         09:aa:c5:a6:ab:0e:d7:21:31:2c:d5:b3:c9:3f:7b:ac:9c:e8:
         92:f3:16:32:cf:ba:cd:8a:20:81:cc:09:55:48:39:cd:3a:c4:
         34:f3:62:22:58:bd:1c:c8:e3:66:1c:30:ef:2d:d1:12:71:29:
         d8:00:6e:37:2e:46:8c:f8:79:80:03:25:13:69:dd:88:75:c2:
         f2:74:64:51:af:3d:40:0b:84:54:c3:67:2d:14:70:4f:12:5f:
         a7:dd:5a:66:80:bc:30:de:2f:4c:22:82:d8:2d:4b:ec:5f:0a:
         3a:43:70:9e:4c:dc:6f:97:9c:fa:49:bb:8a:53:34:67:6e:4d:
         57:06:01:b0:2f:85:96:6a:34:7c:95:60:64:3b:48:8e:be:e7:
         de:47:f5:b4:8e:36:8f:a0:68:7f:5e:02:6f:c7:33:ca:de:7a:
         60:12:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 18:52:43 2024 by rpki-client on console-fra.rpki-client.org