Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a323231343a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a323231343a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          OgBjvQ5SOxXjyTF+kUk9G0md4MeYlERi89m4ffmCd8Q=
Subject key identifier:   D8:06:04:27:03:1B:02:D1:95:E9:1F:C5:CD:20:66:45:E1:61:14:B2
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       6B4607F93347B48AFAE2AD7C764F251D05A6BF5C
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a323231343a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:25 +0000
ROA not before:           Wed 04 Sep 2024 13:07:25 +0000
ROA not after:            Wed 03 Sep 2025 13:12:25 +0000
asID:                     272581
IP address blocks:        2804:8578:2214::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:46:07:f9:33:47:b4:8a:fa:e2:ad:7c:76:4f:25:1d:05:a6:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:25 2024 GMT
            Not After : Sep  3 13:12:25 2025 GMT
        Subject: CN=D8060427031B02D195E91FC5CD206645E16114B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:62:d8:f6:ac:cc:e5:dd:b6:8f:80:fb:05:
                    bb:6a:f1:f5:43:99:1e:d5:44:57:de:64:09:e5:38:
                    31:c1:4d:8a:a9:57:5b:f9:8b:b3:86:64:ea:91:d9:
                    f7:f2:d1:29:e1:42:07:c9:58:a9:b2:f9:76:ce:58:
                    92:f4:3f:59:b0:39:c4:c8:d1:b4:a3:14:c6:47:70:
                    da:8e:70:e0:62:cf:5c:16:59:29:31:b5:5e:47:1c:
                    a1:d1:26:f6:0a:f4:cf:d8:1f:65:e0:5c:87:2a:4a:
                    b1:e7:14:ee:c3:b1:a8:cb:7e:da:96:3c:29:ce:e0:
                    16:06:52:09:dc:3e:25:04:b3:c7:21:90:d8:3f:58:
                    8b:ec:87:6b:32:d3:54:5d:37:21:a4:b6:c0:6b:99:
                    c6:15:ff:00:13:de:b7:17:2a:63:3f:ac:73:aa:ad:
                    69:e1:7f:5f:81:0e:d9:a1:56:e3:6b:28:20:2e:4e:
                    32:39:c2:d5:86:2c:ae:0f:10:13:a7:3a:db:9f:2d:
                    5f:1d:31:eb:7d:b1:20:d1:63:63:58:7d:db:19:25:
                    99:29:6d:ac:81:a0:00:38:46:ae:0c:e8:72:69:dd:
                    a8:87:b7:c9:36:86:92:cd:3f:d3:8c:56:90:80:b4:
                    b0:ee:a6:40:f6:b1:c8:d5:62:51:ef:5c:0e:82:db:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:04:27:03:1B:02:D1:95:E9:1F:C5:CD:20:66:45:E1:61:14:B2
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a323231343a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:2214::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:12:d5:aa:5a:8b:28:dd:2b:00:1d:eb:c7:d2:04:1d:77:ee:
         39:14:28:01:1e:32:35:5d:a4:29:5e:51:4b:03:2c:8a:29:19:
         1b:76:85:40:43:99:51:b8:8d:27:00:6f:9d:f0:a3:d7:6b:82:
         78:3e:fc:68:87:1a:6b:e9:2a:63:03:b4:bd:8e:7a:da:28:fa:
         f5:bb:84:d2:98:8d:e9:b9:6f:f8:3d:08:a0:62:2a:2c:c7:75:
         52:7a:49:bf:0b:5a:b8:e8:0e:84:84:12:dc:67:fe:83:e9:1f:
         cf:b4:fb:04:f0:40:03:08:fa:32:9f:52:8b:c2:9a:87:6e:51:
         41:b6:67:37:aa:26:ae:16:3f:0d:9e:e0:8e:28:43:4a:a3:c4:
         80:a9:a0:ac:65:24:f4:bc:5f:4a:1c:dc:92:b6:d2:0e:cf:ce:
         28:0d:c4:7b:a5:7c:b1:b7:eb:cd:ab:84:e6:62:0b:f6:f3:4f:
         8e:4f:89:49:cd:73:1d:63:01:50:fc:59:7e:82:72:62:96:bb:
         f3:6c:50:39:2a:2a:2f:28:77:97:15:0e:09:52:5f:c2:4c:7d:
         2f:21:05:18:ce:37:31:27:8b:c1:6f:21:3b:5c:a2:9d:19:f6:
         c9:c0:28:eb:56:7c:fe:97:33:d1:13:85:82:83:d2:a3:4e:03:
         68:bd:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 18:52:43 2024 by rpki-client on console-fra.rpki-client.org