Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3532303a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a3532303a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          EDT0vIhM2ZyAB3l48UFCKVXvqQ5wNaaf/5YuimVN7rk=
Subject key identifier:   71:11:D4:F7:C4:FD:BA:7B:39:2A:D5:F9:57:FC:E8:21:A9:C2:6F:44
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       633B259DABA2EA1BBEF8023BC531564FD31506D4
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3532303a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:24 +0000
ROA not before:           Wed 04 Sep 2024 13:07:24 +0000
ROA not after:            Wed 03 Sep 2025 13:12:24 +0000
asID:                     272581
IP address blocks:        2804:8578:520::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3b:25:9d:ab:a2:ea:1b:be:f8:02:3b:c5:31:56:4f:d3:15:06:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:24 2024 GMT
            Not After : Sep  3 13:12:24 2025 GMT
        Subject: CN=7111D4F7C4FDBA7B392AD5F957FCE821A9C26F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:ab:ef:80:c4:00:1c:28:8b:af:e5:3e:b9:
                    c1:f9:bb:80:b2:52:5c:a9:16:90:d7:71:db:f2:c7:
                    0e:9e:7d:e2:da:6c:4c:5d:95:22:56:7e:96:88:e3:
                    8e:a4:20:e9:74:8f:ed:cf:b8:8a:8f:14:9e:f3:30:
                    93:c1:00:07:9b:66:a5:d5:2c:b7:a6:ec:6c:1a:13:
                    f9:cd:94:eb:29:09:35:4c:b1:ab:9d:39:16:71:2e:
                    73:85:54:d1:5c:d4:46:51:42:37:78:c6:41:0f:36:
                    40:68:14:54:c6:2d:14:37:c2:4a:1a:d1:3a:37:46:
                    7a:e7:49:48:40:3a:b3:f2:9d:1c:f3:9f:4a:bb:54:
                    34:3a:15:dd:d2:ea:18:0b:fb:af:16:27:b7:92:cf:
                    08:1d:f8:2b:56:5b:13:d8:77:b2:d8:f8:ac:8c:58:
                    0a:70:8f:7f:1f:ea:09:72:03:9b:d3:8c:c0:61:a4:
                    38:ad:78:a1:5a:a6:58:d6:e1:c4:f5:21:8c:64:2b:
                    b5:81:6e:db:de:2d:3f:c5:91:02:49:69:a1:85:76:
                    78:21:67:21:80:8d:fb:75:be:6e:2d:a6:41:58:52:
                    0b:58:1e:c5:43:18:b2:49:61:e7:62:c2:e8:27:d3:
                    10:63:a1:c5:1b:b4:89:f2:79:d9:b1:9c:c4:04:d5:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:11:D4:F7:C4:FD:BA:7B:39:2A:D5:F9:57:FC:E8:21:A9:C2:6F:44
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3532303a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:520::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:3b:c4:c0:6d:3c:de:8d:df:f5:f4:0d:28:34:4a:d0:dc:
         42:a0:73:b9:fe:e1:0d:43:e9:02:2c:f1:66:06:67:83:d4:3c:
         68:e0:d2:e7:68:1a:16:cf:37:c8:36:5e:a4:f7:d2:6f:7a:f3:
         6c:9c:eb:fe:af:2f:6c:8f:fb:8f:e0:d0:2d:c9:07:6a:1c:e1:
         b8:d9:63:f6:ac:c2:8a:c7:29:ab:b2:3b:33:e7:34:7c:b2:f4:
         3d:1f:90:80:53:b5:9c:6b:e0:cc:a1:b0:bd:cc:e2:2a:4d:68:
         cc:42:0e:3f:01:c3:b6:53:6e:20:26:00:b8:f0:b4:a8:ac:f3:
         1b:37:4f:bc:04:64:c7:e0:3d:2d:0e:5a:4a:00:92:35:06:46:
         94:95:ff:58:54:e4:27:d9:44:92:a8:a9:39:ba:c1:23:cd:d4:
         0a:a8:1c:46:d1:82:84:c0:28:e3:0f:1e:9f:26:b4:17:65:53:
         2f:c4:74:ca:af:a9:f7:57:98:12:9a:b1:f1:97:2d:c4:f1:42:
         2b:ae:e8:e0:70:82:72:ae:c3:12:77:63:1d:1e:d5:5b:16:b1:
         fc:71:15:6d:cd:72:8f:7a:c6:37:51:2d:99:1a:b7:ca:58:89:
         b6:dd:1c:02:ad:f2:a0:5d:f4:c8:4a:cb:3c:7a:e9:69:bb:64:
         c3:2e:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 18:52:43 2024 by rpki-client on console-fra.rpki-client.org