Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f34352d3435203d3e20323732353831.roa
File:                     323830343a383537383a3a2f34352d3435203d3e20323732353831.roa (raw, json)
Hash identifier:          GKkabgzANI2d1cZFupOyGVPjmW+e5RgTvfTIPMyHPe8=
Subject key identifier:   6E:61:7B:91:36:8A:67:D6:64:BA:AE:05:31:93:7A:5A:2F:23:A9:D0
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       72D37939D90003F42175D2BA6AE4B4DCE055850A
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f34352d3435203d3e20323732353831.roa
Signing time:             Wed 04 Sep 2024 13:12:24 +0000
ROA not before:           Wed 04 Sep 2024 13:07:24 +0000
ROA not after:            Wed 03 Sep 2025 13:12:24 +0000
asID:                     272581
IP address blocks:        2804:8578::/45 maxlen: 45

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d3:79:39:d9:00:03:f4:21:75:d2:ba:6a:e4:b4:dc:e0:55:85:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Sep  4 13:07:24 2024 GMT
            Not After : Sep  3 13:12:24 2025 GMT
        Subject: CN=6E617B91368A67D664BAAE0531937A5A2F23A9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:e0:7e:3e:ea:66:bd:e5:56:0e:dd:4e:38:
                    fa:e9:f3:b8:23:ba:0f:57:66:0c:7a:29:da:ae:39:
                    d8:55:e6:b6:fd:c4:4e:2b:b6:df:88:7b:f0:f9:31:
                    25:d8:1c:ae:f4:1b:11:1d:44:3d:0c:e5:e8:bb:cc:
                    ba:c9:5d:f5:65:6e:15:e1:03:b9:97:80:79:22:cf:
                    70:7d:19:c6:94:4a:84:2c:39:1b:5a:8d:55:87:78:
                    46:9f:61:13:84:69:03:e5:c3:d4:04:f4:e2:ff:93:
                    6d:ad:1b:9c:b3:d0:17:91:23:95:38:24:38:2f:b3:
                    9e:7b:84:fc:ac:e7:75:17:09:dd:10:f3:16:47:94:
                    3f:49:53:6c:ec:3f:3d:7f:bd:11:96:da:ed:f9:d9:
                    42:63:e3:01:62:a6:da:59:3b:ea:10:90:74:42:74:
                    c7:34:3a:eb:dc:e7:7d:58:34:f1:79:f3:24:0c:70:
                    40:b6:82:4a:6d:35:29:ea:36:15:6d:01:92:7b:ec:
                    73:54:75:53:e6:6d:59:18:38:e3:fb:7a:d5:47:a2:
                    0d:e5:2a:58:94:da:79:d0:d5:18:e0:9e:10:7c:71:
                    db:b1:55:c3:c3:52:e1:da:0f:d7:4d:39:e4:45:91:
                    56:ef:7e:63:b3:b5:52:65:a6:5a:cc:de:c5:87:19:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:61:7B:91:36:8A:67:D6:64:BA:AE:05:31:93:7A:5A:2F:23:A9:D0
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/323830343a383537383a3a2f34352d3435203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/45

    Signature Algorithm: sha256WithRSAEncryption
         4f:4c:fe:97:61:36:95:0d:ce:b6:60:30:48:44:81:ec:7c:59:
         a0:af:b0:a9:de:b3:e3:b2:5d:a1:50:fb:d2:99:f4:51:ff:f8:
         41:db:3a:f4:eb:f1:6b:ab:3e:90:e3:4b:9c:23:de:f3:57:53:
         ec:ae:e1:6a:a9:74:c7:9f:08:06:3a:5b:66:ce:f2:c5:08:d3:
         f5:d8:80:f0:f7:29:82:9f:db:34:74:e5:d6:98:6f:01:09:e6:
         d1:c3:8a:0d:23:b5:4c:1b:dc:29:0c:54:62:92:d1:cd:ff:3d:
         c4:79:ad:e0:f7:f6:34:38:3e:b1:8d:ed:9e:fe:5e:b4:6c:c2:
         fc:a3:11:4b:bc:ed:01:94:17:fc:9e:2a:f9:7a:9c:cb:d1:73:
         5c:fd:d0:fd:ff:5e:12:58:83:ef:db:8a:52:d0:06:2c:39:56:
         b1:14:57:96:94:06:0b:cb:a7:20:36:3d:cc:09:60:2a:f4:ef:
         ba:41:10:28:a5:8f:62:91:cd:c4:70:73:2a:f0:05:b5:87:58:
         fe:e4:96:93:8e:2e:0d:34:7b:48:c8:68:22:73:41:9c:55:30:
         2f:65:07:39:35:05:4d:d1:90:38:6b:b0:df:9c:04:d9:b3:af:
         0e:3a:b9:3d:7c:37:93:1f:d2:29:21:fe:4a:53:69:6e:f7:1b:
         eb:1c:68:70
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUctN5OdkAA/QhddK6auS03OBVhQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFMjA4QjYwQTMzNUFDODE3QkQ4MzQ1Qjg2Njg3Nzk1
M0ZBMThCQTAeFw0yNDA5MDQxMzA3MjRaFw0yNTA5MDMxMzEyMjRaMDMxMTAvBgNV
BAMTKDZFNjE3QjkxMzY4QTY3RDY2NEJBQUUwNTMxOTM3QTVBMkYyM0E5RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAuB+PupmveVWDt1OOPrp87gj
ug9XZgx6KdquOdhV5rb9xE4rtt+Ie/D5MSXYHK70GxEdRD0M5ei7zLrJXfVlbhXh
A7mXgHkiz3B9GcaUSoQsORtajVWHeEafYROEaQPlw9QE9OL/k22tG5yz0BeRI5U4
JDgvs557hPys53UXCd0Q8xZHlD9JU2zsPz1/vRGW2u352UJj4wFiptpZO+oQkHRC
dMc0Ouvc531YNPF58yQMcEC2gkptNSnqNhVtAZJ77HNUdVPmbVkYOOP7etVHog3l
KliU2nnQ1RjgnhB8cduxVcPDUuHaD9dNOeRFkVbvfmOztVJlplrM3sWHGbLBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUbmF7kTaKZ9Zkuq4FMZN6Wi8jqdAwHwYDVR0j
BBgwFoAUTOIItgozWsgXvYNFuGaHeVP6GLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMi80Q0UyMDhCNjBBMzM1QUM4MTdCRDgzNDVCODY2ODc3OTUzRkExOEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTIwOEI2MEEzMzVBQzgx
N0JEODM0NUI4NjY4Nzc5NTNGQTE4QkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzIv
MzIzODMwMzQzYTM4MzUzNzM4M2EzYTJmMzQzNTJkMzQzNTIwM2QzZTIwMzIzNzMy
MzUzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcDKASFeAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBPTP6X
YTaVDc62YDBIRIHsfFmgr7Cp3rPjsl2hUPvSmfRR//hB2zr06/Frqz6Q40ucI97z
V1PsruFqqXTHnwgGOltmzvLFCNP12IDw9ymCn9s0dOXWmG8BCebRw4oNI7VMG9wp
DFRiktHN/z3Eea3g9/Y0OD6xje2e/l60bML8oxFLvO0BlBf8nir5epzL0XNc/dD9
/14SWIPv24pS0AYsOVaxFFeWlAYLy6cgNj3MCWAq9O+6QRAopY9ikc3EcHMq8AW1
h1j+5JaTji4NNHtIyGgic0GcVTAvZQc5NQVN0ZA4a7DfnATZs68OOrk9fDeTH9Ip
If5KU2lu9xvrHGhw
-----END CERTIFICATE-----
Generated at Tue Oct 15 18:52:43 2024 by rpki-client on console-fra.rpki-client.org