Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a343030303a3a2f33342d3334203d3e20323635313937.roa
File:                     323830343a326332303a343030303a3a2f33342d3334203d3e20323635313937.roa (raw, json)
Hash identifier:          QRX3W8GX5gTbJOGu8fJVPn+zArSKMdpZqAXN/UjwTxA=
Subject key identifier:   D1:54:83:DF:5F:93:EA:5D:24:2A:BF:25:B4:CF:3B:33:CB:3C:DC:80
Certificate issuer:       /CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
Certificate serial:       5F999477554D010BF1D748E53C78933E185141FB
Authority key identifier: C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a343030303a3a2f33342d3334203d3e20323635313937.roa
Signing time:             Thu 18 Apr 2024 19:57:45 +0000
ROA not before:           Thu 18 Apr 2024 19:52:45 +0000
ROA not after:            Thu 17 Apr 2025 19:57:45 +0000
asID:                     265197
IP address blocks:        2804:2c20:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:99:94:77:55:4d:01:0b:f1:d7:48:e5:3c:78:93:3e:18:51:41:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920
        Validity
            Not Before: Apr 18 19:52:45 2024 GMT
            Not After : Apr 17 19:57:45 2025 GMT
        Subject: CN=D15483DF5F93EA5D242ABF25B4CF3B33CB3CDC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:8f:ea:90:46:f3:19:c1:f6:7c:60:24:62:
                    82:cc:3d:3c:03:42:4a:bf:fa:b2:71:7f:10:fb:f5:
                    c9:ae:b2:33:6a:02:34:79:30:67:19:0c:7f:38:03:
                    b2:36:a4:81:0f:ce:83:cd:13:0b:22:d9:16:ba:7d:
                    d7:3b:fd:c7:2b:02:50:db:bb:f6:f4:46:1a:e5:c2:
                    52:32:79:23:c2:83:04:91:70:e7:af:4c:34:f2:b5:
                    f7:e6:9b:70:4c:61:f8:97:fe:33:df:36:ae:9a:fd:
                    16:38:77:36:59:40:c9:03:69:9f:6b:4b:50:6f:f5:
                    29:62:0b:31:28:39:db:66:86:7c:8b:6c:27:89:2c:
                    4d:35:0c:d5:0d:42:9f:2d:f4:bc:c3:dd:80:7c:67:
                    de:7e:c4:b1:b9:47:13:7c:05:60:e0:2d:84:c1:eb:
                    5b:ff:cd:ee:f7:9b:b1:ce:2d:0d:d3:3b:a6:96:e6:
                    bc:15:cd:66:fc:f0:d2:61:c9:ee:93:83:05:e4:13:
                    19:51:13:18:aa:11:c2:de:07:ba:f4:99:cb:78:48:
                    7a:89:07:82:8f:ea:41:1d:3e:72:c3:5b:f0:9c:13:
                    d4:2f:95:ea:ac:8b:d1:12:66:26:27:75:0f:2e:47:
                    e2:18:76:70:c0:81:72:b1:c6:ba:3e:c0:1a:ff:65:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:54:83:DF:5F:93:EA:5D:24:2A:BF:25:B4:CF:3B:33:CB:3C:DC:80
            X509v3 Authority Key Identifier:
                keyid:C7:C8:B7:2F:34:A4:E8:F0:2D:DF:94:53:4E:94:B2:B1:5A:1C:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C8B72F34A4E8F02DDF94534E94B2B15A1CD920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a343030303a3a2f33342d3334203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c20:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:7f:5a:e4:dc:58:4b:4a:8c:3c:a4:6a:8d:d1:20:dd:29:98:
         4b:1c:37:1b:a4:89:18:92:2f:14:cf:83:2b:18:9a:8d:9d:31:
         a2:2e:a5:7a:e5:b4:c6:1d:48:9e:42:17:29:50:75:b9:85:8e:
         56:46:91:75:15:57:1b:27:53:f4:79:fa:77:32:92:05:16:4c:
         29:7e:d2:24:16:43:55:20:10:d6:5f:4d:97:ba:2a:a9:25:19:
         e9:4d:f2:ee:ec:6a:f1:81:7f:1f:c6:eb:76:0b:0a:a2:d1:6e:
         f1:6b:12:3a:6a:d7:44:d1:0d:5c:23:f3:1a:d3:2a:7b:46:61:
         c2:e4:58:b4:87:a9:a3:5d:a3:ea:b1:0b:1f:b7:91:58:f9:db:
         55:76:b4:8d:75:ac:fe:50:54:d2:b7:8e:02:82:58:eb:b0:8e:
         84:6a:ef:fb:eb:5d:c6:5c:47:ce:61:80:c7:53:33:67:e4:5c:
         7f:11:61:7b:16:ef:9e:9d:56:7e:3d:bd:cd:25:82:64:93:67:
         24:57:da:2f:bb:da:aa:da:d7:01:22:9e:47:86:d3:1e:4e:f7:
         36:29:ab:c6:3a:e2:f7:86:ea:1d:bd:12:98:40:fa:2f:ac:0e:
         c8:7d:26:2c:7c:fc:cd:be:82:25:14:5f:8b:ea:08:67:dd:31:
         5e:64:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org