Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3532333a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a3532333a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          YtfZ7l/e97wW8LBAom4peQdYj3Rhmu50ehrT4nY417A=
Subject key identifier:   D0:B6:B1:4D:3C:9C:71:EF:FC:B6:FA:FA:0A:55:46:48:0E:0B:28:B1
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       14ADB45EF11A6E534BF6AF79BC3DD48374F48607
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3532333a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:23 +0000
ROA not before:           Wed 04 Sep 2024 13:07:23 +0000
ROA not after:            Wed 03 Sep 2025 13:12:23 +0000
asID:                     272581
IP address blocks:        2804:8578:523::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ad:b4:5e:f1:1a:6e:53:4b:f6:af:79:bc:3d:d4:83:74:f4:86:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:23 2024 GMT
            Not After : Sep  3 13:12:23 2025 GMT
        Subject: CN=D0B6B14D3C9C71EFFCB6FAFA0A5546480E0B28B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:c9:5f:68:e3:ff:25:b3:29:ff:fb:1f:ac:
                    e1:75:5d:76:4f:75:d7:f2:53:d1:00:f3:b1:d3:16:
                    db:11:7a:3b:fd:be:fa:c8:d6:42:13:5c:a4:96:b1:
                    56:c9:a4:53:d9:2a:67:e7:3a:7c:96:74:1a:66:57:
                    4d:a3:d5:1d:c5:d6:66:f6:79:29:12:c5:bc:07:a1:
                    1a:59:66:0a:fb:7d:c5:17:82:49:cc:d8:4c:f4:5d:
                    e7:f9:8e:b5:a8:cd:cc:6b:c8:10:c2:4d:a0:11:93:
                    bd:1c:90:e1:f8:c4:c3:7f:1b:ee:99:dd:54:3c:17:
                    4e:8e:c7:49:c2:8b:ce:1a:14:03:50:a7:e8:c8:22:
                    37:55:29:cd:55:2b:34:fb:9c:28:ae:6f:ad:f6:f4:
                    e7:38:92:41:19:75:37:ea:e1:89:90:ef:56:b2:66:
                    04:05:bf:e4:2f:9e:80:e8:23:77:b8:e2:b7:c1:43:
                    19:bd:73:b1:a1:9d:44:bd:ee:22:b9:dd:8a:6b:e0:
                    32:e5:6c:63:2a:37:2f:ba:42:38:a7:0f:d1:26:f3:
                    13:1c:49:24:6a:c8:92:f5:25:08:fc:e9:45:70:ab:
                    16:53:82:70:e3:26:85:8f:11:3c:5f:23:ad:a4:1f:
                    f7:ce:d4:f2:c4:de:34:9f:c6:20:99:86:a0:ab:1a:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:B1:4D:3C:9C:71:EF:FC:B6:FA:FA:0A:55:46:48:0E:0B:28:B1
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3532333a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:523::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:4b:27:63:7f:94:15:93:11:c6:12:a7:2c:64:d2:e5:a6:11:
         5b:ac:ed:15:08:59:9e:50:cc:77:35:d0:d0:1a:0e:77:50:fc:
         d8:99:45:82:34:31:37:9c:49:bd:34:b5:6b:bf:cd:1f:55:39:
         16:c9:64:5d:41:7d:5f:9b:cf:fc:0d:f4:56:a6:9f:d2:8e:4d:
         90:e3:40:37:b6:4a:ed:12:46:9c:20:c8:5a:bf:e7:4e:9b:d5:
         ca:10:5d:02:c6:00:31:ee:a9:eb:1f:ae:17:af:7c:89:b2:7c:
         79:bc:be:5b:25:15:eb:8b:20:d8:3f:28:ca:35:ff:f1:40:67:
         3a:99:96:5c:41:d0:e9:25:d3:d3:5d:c9:3c:59:b5:d2:69:f6:
         15:60:bb:ab:39:f7:11:01:08:14:8e:a6:0f:46:8b:98:ee:64:
         87:58:56:df:fb:92:d1:31:ff:c4:b7:a4:1f:05:18:ab:a4:3e:
         50:36:78:85:73:e6:0b:6f:9b:15:36:26:22:47:be:fb:88:cf:
         fd:9b:03:71:2a:00:2e:78:85:86:81:c6:7a:4f:19:1a:0f:e3:
         4d:b0:df:0e:06:e4:6a:a0:af:b3:25:84:cb:d4:d9:47:0b:f5:
         2a:0f:b2:43:b0:e9:8b:a3:d1:a2:a3:6d:0a:83:dc:e5:c5:65:
         da:86:0c:e4
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUFK20XvEablNL9q95vD3Ug3T0hgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFMjA4QjYwQTMzNUFDODE3QkQ4MzQ1Qjg2Njg3Nzk1
M0ZBMThCQTAeFw0yNDA5MDQxMzA3MjNaFw0yNTA5MDMxMzEyMjNaMDMxMTAvBgNV
BAMTKEQwQjZCMTREM0M5QzcxRUZGQ0I2RkFGQTBBNTU0NjQ4MEUwQjI4QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3l8lfaOP/JbMp//sfrOF1XXZP
ddfyU9EA87HTFtsRejv9vvrI1kITXKSWsVbJpFPZKmfnOnyWdBpmV02j1R3F1mb2
eSkSxbwHoRpZZgr7fcUXgknM2Ez0Xef5jrWozcxryBDCTaARk70ckOH4xMN/G+6Z
3VQ8F06Ox0nCi84aFANQp+jIIjdVKc1VKzT7nCiub6329Oc4kkEZdTfq4YmQ71ay
ZgQFv+QvnoDoI3e44rfBQxm9c7GhnUS97iK53Ypr4DLlbGMqNy+6QjinD9Em8xMc
SSRqyJL1JQj86UVwqxZTgnDjJoWPETxfI62kH/fO1PLE3jSfxiCZhqCrGl9tAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU0LaxTTycce/8tvr6ClVGSA4LKLEwHwYDVR0j
BBgwFoAUTOIItgozWsgXvYNFuGaHeVP6GLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMi80Q0UyMDhCNjBBMzM1QUM4MTdCRDgzNDVCODY2ODc3OTUzRkExOEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTIwOEI2MEEzMzVBQzgx
N0JEODM0NUI4NjY4Nzc5NTNGQTE4QkEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzIv
MzIzODMwMzQzYTM4MzUzNzM4M2EzNTMyMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM3MzIzNTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBIV4BSMwDQYJKoZIhvcNAQELBQAD
ggEBACRLJ2N/lBWTEcYSpyxk0uWmEVus7RUIWZ5QzHc10NAaDndQ/NiZRYI0MTec
Sb00tWu/zR9VORbJZF1BfV+bz/wN9Famn9KOTZDjQDe2Su0SRpwgyFq/506b1coQ
XQLGADHuqesfrhevfImyfHm8vlslFeuLINg/KMo1//FAZzqZllxB0Okl09NdyTxZ
tdJp9hVgu6s59xEBCBSOpg9Gi5juZIdYVt/7ktEx/8S3pB8FGKukPlA2eIVz5gtv
mxU2JiJHvvuIz/2bA3EqAC54hYaBxnpPGRoP402w3w4G5Gqgr7MlhMvU2UcL9SoP
skOw6Yuj0aKjbQqD3OXFZdqGDOQ=
-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:47 2024 by rpki-client on console-ams.rpki-client.org