Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33322d3332203d3e20323732353831.roa (raw, json)
Hash identifier:          fG6jNT96a//3hsd+hcHb9qCxD9ZL+a5Z55hS4ZDX9SA=
Subject key identifier:   19:CE:FF:AE:B6:A7:5B:EB:2C:C2:74:22:95:F6:21:C1:C9:5B:B9:EE
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       74FCA291D2A7F9C1852EC856A5A11AA063BE6602
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:25 +0000
ROA not before:           Wed 04 Sep 2024 13:07:25 +0000
ROA not after:            Wed 03 Sep 2025 13:12:25 +0000
asID:                     272581
IP address blocks:        2804:8578::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fc:a2:91:d2:a7:f9:c1:85:2e:c8:56:a5:a1:1a:a0:63:be:66:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:25 2024 GMT
            Not After : Sep  3 13:12:25 2025 GMT
        Subject: CN=19CEFFAEB6A75BEB2CC2742295F621C1C95BB9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ad:7a:86:b9:97:8a:9b:a9:0e:2f:01:06:a9:
                    ea:5d:27:da:8c:90:11:3c:8d:0f:4e:2f:42:9e:7a:
                    ab:f2:2b:92:03:bd:52:9b:dc:51:5f:7b:31:d3:1c:
                    08:1d:5c:0f:69:b9:f5:56:ef:d5:1a:08:80:a0:79:
                    a9:24:3c:d5:1d:d3:87:27:ea:ae:55:7f:2f:8a:8c:
                    43:30:5d:a0:f9:87:5d:ed:7b:b7:ae:13:c0:c1:00:
                    e0:f4:f8:a0:38:64:38:04:d5:e2:5b:b7:06:75:20:
                    58:05:55:77:74:de:cf:fe:ed:53:43:2d:c1:ad:fa:
                    71:b3:62:4e:dd:75:c2:8d:de:1c:a6:7b:7b:c6:8c:
                    59:71:20:58:60:bc:e5:13:e5:ab:b6:b5:b9:1e:91:
                    6d:3b:fb:b6:32:7d:6b:9b:27:bc:9f:57:0e:46:33:
                    2c:55:c7:12:25:19:c4:05:80:6e:d2:2a:ed:69:a5:
                    f1:94:90:ca:58:33:e5:8e:83:b7:1c:74:ff:95:7b:
                    50:21:8a:08:7e:d6:b0:1e:b9:53:60:b6:18:e8:84:
                    4d:96:65:d3:c0:71:cc:fa:c9:c8:02:f2:13:d6:45:
                    fb:d4:3d:7b:34:f8:84:38:38:8e:b1:40:1f:74:2d:
                    6d:d5:a2:5d:62:51:57:b3:da:9c:a0:5d:84:34:4b:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:FF:AE:B6:A7:5B:EB:2C:C2:74:22:95:F6:21:C1:C9:5B:B9:EE
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:36:8a:84:2a:41:fd:5b:37:f6:5d:d7:51:3d:71:f5:68:
         36:6d:6e:db:0a:1f:f0:ea:47:52:ce:99:d5:7e:74:b8:5c:fe:
         d9:06:47:5d:ae:0f:d0:21:bd:c9:b2:39:40:54:90:76:03:13:
         c6:46:3e:5e:aa:93:4f:8a:a5:53:7e:cb:6d:6a:32:3e:8d:3d:
         a1:bf:e3:d7:78:01:6c:1d:e4:65:04:fa:eb:34:5d:5c:64:55:
         9e:46:f3:6a:6a:bb:0e:06:6f:e2:97:b9:19:5a:c9:47:4a:86:
         81:6f:7b:94:29:8e:34:e7:8c:a8:fa:53:0e:f3:94:c4:13:f7:
         a7:c9:82:70:21:57:bd:34:66:de:59:ef:7f:1f:a9:5f:b8:f2:
         aa:52:73:c5:51:d0:a5:6c:14:8b:0c:25:fa:c8:8c:d6:ed:b2:
         20:ba:f0:7b:75:0d:a5:3d:ed:de:9f:2a:93:9c:e6:2d:9d:d8:
         b8:1e:31:40:af:fe:c4:09:62:79:73:20:ed:38:5a:fd:cf:57:
         68:81:82:dd:60:68:82:70:da:ff:56:fe:27:51:db:6b:82:ea:
         54:52:f8:b4:5e:6b:f8:c2:b9:13:94:ee:d0:51:cf:7a:60:86:
         01:bc:d9:e0:c6:9e:31:a3:48:27:74:16:29:63:fa:c5:37:1b:
         f0:31:35:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 18:52:43 2024 by rpki-client on console-fra.rpki-client.org