Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa
File:                     323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa (raw, json)
Hash identifier:          PyJlUgGGa4mz8SGtxmmiOAUyV4TOqh6t8/n2yA3lXPY=
Subject key identifier:   BB:C7:A6:25:82:54:70:1B:9D:45:5C:F5:A6:0A:DC:10:05:54:9C:7C
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       18CF6F44F745B026DA5D8489DC34499B671587BA
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:24 +0000
ROA not before:           Wed 04 Sep 2024 13:07:24 +0000
ROA not after:            Wed 03 Sep 2025 13:12:24 +0000
asID:                     272581
IP address blocks:        2804:8578:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cf:6f:44:f7:45:b0:26:da:5d:84:89:dc:34:49:9b:67:15:87:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:24 2024 GMT
            Not After : Sep  3 13:12:24 2025 GMT
        Subject: CN=BBC7A6258254701B9D455CF5A60ADC1005549C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:b8:60:cd:24:28:a9:19:7e:fc:07:d9:20:
                    77:3d:bb:b8:bf:8b:f2:60:b4:4f:54:ed:30:92:9f:
                    04:e8:a2:1c:b7:ea:e3:0f:c9:5a:55:7a:17:1a:ab:
                    65:65:73:b4:93:2c:36:36:3c:b3:5c:cd:7e:30:d4:
                    8e:66:46:ee:d8:78:23:0b:5e:10:34:a0:fa:02:66:
                    54:a4:cd:bc:9b:5a:26:55:37:1b:71:d4:44:a3:77:
                    72:51:32:3d:14:d0:e4:a6:9a:c2:9f:cf:a0:7c:7f:
                    89:2c:47:0b:e1:8c:bc:86:ea:6b:35:30:26:97:36:
                    8e:66:ad:86:f0:c5:2f:4a:32:12:df:9e:18:bf:1d:
                    93:d9:ed:36:f2:ac:08:53:c0:e3:cc:92:44:bd:dd:
                    1f:3d:70:26:a6:e2:2c:72:f4:4f:a2:c3:1c:72:f8:
                    51:39:65:e2:c5:a5:c1:15:f3:22:5f:b9:59:35:e3:
                    75:af:47:23:88:cb:52:83:96:b8:e1:32:e2:39:10:
                    9d:76:58:94:7c:6b:81:16:57:a0:09:b6:83:d6:27:
                    e5:f6:5c:bf:46:c9:41:e9:62:12:c4:7d:66:bd:c1:
                    41:26:59:db:df:89:ff:46:8f:7c:c9:b7:6f:0c:68:
                    da:2f:0a:42:c8:72:25:e1:ac:1e:69:bc:8f:f0:6e:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C7:A6:25:82:54:70:1B:9D:45:5C:F5:A6:0A:DC:10:05:54:9C:7C
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         04:32:fc:7d:6d:ef:7f:49:21:fa:17:a1:08:a6:6e:1c:e8:e3:
         c2:63:af:f1:e3:95:21:82:a8:23:80:33:5b:a7:d9:dd:1a:06:
         ee:c2:76:60:8d:03:01:61:a6:25:10:34:60:60:06:73:da:28:
         e3:ac:0e:76:ee:b8:64:99:cd:75:4a:bd:41:29:26:e4:3f:a9:
         27:72:f6:90:79:3d:34:20:8b:2d:7d:a7:5e:04:6d:14:e4:9f:
         95:8c:fe:d1:fb:7a:62:8d:46:41:7b:f1:61:ca:21:57:c9:dd:
         8a:a6:aa:f6:fc:79:b9:47:2e:4e:b3:c8:07:25:41:10:8f:28:
         65:c4:8f:f0:96:35:40:97:b8:93:b9:6c:4e:5c:a7:44:e0:31:
         e0:72:fa:1e:2e:fb:1b:14:a6:22:ac:9c:d2:32:a0:bf:88:af:
         35:39:8f:66:a8:7c:19:2a:9e:e7:d5:5a:ae:2e:d6:24:df:9b:
         6d:6b:93:67:d6:2e:16:d4:69:5a:f7:43:58:9b:32:5a:e8:9d:
         58:ae:57:81:8d:ae:70:ef:36:32:eb:10:f2:a3:bc:1b:4a:79:
         af:02:5e:0d:bf:8b:52:f1:07:e8:e4:91:f0:12:86:09:e2:8a:
         bd:82:06:38:af:35:58:be:74:c5:e4:84:84:85:b1:6d:0e:53:
         a8:f7:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 18:52:43 2024 by rpki-client on console-fra.rpki-client.org