Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33332d3333203d3e20323732353831.roa (raw, json)
Hash identifier:          9NvrmRNXI42lkX1VeYYk1ZaQgfEy/sfeKbJ6jPkVsjc=
Subject key identifier:   4C:06:2B:CE:B4:6E:E9:89:CE:18:1F:7E:A7:B3:E0:EA:4E:C6:F1:4A
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       0C171EF40726050902A71000AF2109D253ED5577
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:24 +0000
ROA not before:           Wed 04 Sep 2024 13:07:24 +0000
ROA not after:            Wed 03 Sep 2025 13:12:24 +0000
asID:                     272581
IP address blocks:        2804:8578::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:17:1e:f4:07:26:05:09:02:a7:10:00:af:21:09:d2:53:ed:55:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:24 2024 GMT
            Not After : Sep  3 13:12:24 2025 GMT
        Subject: CN=4C062BCEB46EE989CE181F7EA7B3E0EA4EC6F14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:af:f9:72:a8:be:d8:83:57:6e:69:0c:5c:48:
                    c5:d4:71:f6:8f:d6:10:a6:c9:4e:9e:02:be:92:71:
                    e1:ca:c6:0b:4e:e9:f3:33:82:26:c2:c1:9c:86:62:
                    95:8f:83:1c:a1:9b:e7:4c:07:fa:d9:ce:d5:23:28:
                    e8:91:29:c2:9e:23:ff:5a:ed:01:cd:2e:d3:bb:3f:
                    51:14:4c:65:d2:cd:e9:34:ed:10:60:a6:5b:da:8f:
                    59:d2:83:38:74:a6:a8:5e:6c:91:52:52:07:ea:13:
                    7d:e7:14:0a:2b:fc:05:aa:f7:ef:58:51:1c:83:82:
                    60:0c:be:54:07:3a:3c:44:3b:2f:2c:73:62:c9:eb:
                    dd:4d:d7:f7:a4:4c:98:c4:3a:a6:ef:c5:3d:ba:01:
                    b3:c5:cc:45:99:6d:6e:7e:b3:b8:98:18:28:47:d4:
                    6c:3d:40:57:62:89:c3:2d:20:e3:b2:66:5e:75:75:
                    ed:e6:ad:a4:c7:4e:1a:7d:89:98:29:f4:b8:d2:25:
                    30:ad:a3:96:c4:66:16:f7:08:a6:f4:88:1d:86:04:
                    5c:de:d2:85:84:ae:c3:94:7a:5c:fc:e7:ac:50:ec:
                    16:f4:85:50:b8:73:f4:63:01:00:ab:08:a7:a6:6b:
                    94:af:de:2f:43:49:ee:a3:cc:cf:18:96:1d:09:ef:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:06:2B:CE:B4:6E:E9:89:CE:18:1F:7E:A7:B3:E0:EA:4E:C6:F1:4A
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/33

    Signature Algorithm: sha256WithRSAEncryption
         7b:66:4f:5d:d7:e2:c9:87:54:ac:86:cf:ef:42:23:46:03:a3:
         d8:28:7b:29:da:02:fd:f1:f9:8b:96:a1:ef:81:c2:6e:e4:a8:
         68:8f:58:95:85:1b:2e:80:06:bb:e2:cd:4d:d0:d5:58:45:0e:
         7a:0d:04:a1:1f:fb:b3:d5:4c:71:e4:b7:11:d9:c4:16:36:af:
         0c:40:42:fd:e0:4b:5d:2e:01:f2:10:50:ea:c1:b8:9a:5b:3d:
         37:48:55:54:a5:6a:7e:85:9e:de:44:be:02:47:6b:2f:6d:bc:
         f4:ad:ef:78:2b:40:6c:6d:bc:7a:c5:7a:37:9d:c0:6b:ed:67:
         8e:66:2d:2b:ad:99:b0:52:d9:ae:71:24:37:98:28:ec:9e:a6:
         4a:ac:db:24:fc:19:f4:23:b2:3a:00:90:32:6c:15:6c:36:46:
         24:41:58:29:c4:a8:1e:f7:b7:0b:04:93:43:e7:d0:7d:bd:7f:
         34:a1:68:37:86:a2:11:dc:2a:98:5d:cd:4c:58:d8:28:4f:22:
         02:f3:75:3e:a0:de:b0:56:cb:2e:98:eb:3f:d3:a8:7b:37:e1:
         43:ca:51:f9:ac:12:05:49:e7:77:5d:b0:8a:0e:d0:1f:79:6b:
         ba:77:78:05:fc:46:8b:af:f6:a7:cc:d2:47:6e:68:91:f4:73:
         ae:8d:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:47 2024 by rpki-client on console-ams.rpki-client.org