Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323062383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323062383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          p77cTtnm3dIRjwwZYJdLTRn53EuewSNUSwIaDCRT03o=
Subject key identifier:   90:E0:CB:C5:90:EF:27:A1:1C:66:03:1E:83:17:D8:2E:DD:36:51:9C
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       773662FDA714E9E823DD3E064E87BBDAE267C286
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323062383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:18 +0000
ROA not before:           Thu 16 May 2024 11:33:18 +0000
ROA not after:            Thu 15 May 2025 11:38:18 +0000
asID:                     263338
IP address blocks:        2804:1494:20b8::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:36:62:fd:a7:14:e9:e8:23:dd:3e:06:4e:87:bb:da:e2:67:c2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:18 2024 GMT
            Not After : May 15 11:38:18 2025 GMT
        Subject: CN=90E0CBC590EF27A11C66031E8317D82EDD36519C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:93:f7:6b:ab:99:45:33:7d:6d:4e:1b:a4:
                    14:e0:29:e3:b1:c8:9b:39:33:10:33:1b:e6:e5:0c:
                    9e:a5:ce:60:5b:d2:69:a7:fb:31:b8:0f:85:0f:a5:
                    7b:c3:28:50:1c:4c:6c:72:27:d2:bc:8d:11:aa:4a:
                    47:af:ad:f9:f1:c6:cc:d6:c7:d7:09:07:57:25:92:
                    32:55:3c:83:6d:40:b6:b6:63:eb:dd:5c:6a:5e:13:
                    9a:02:05:8f:cd:c0:fa:ad:f1:b3:02:e5:46:88:52:
                    c6:52:47:88:f0:3f:25:12:5f:03:d8:f2:83:dc:f5:
                    6f:d3:ef:77:fa:01:c2:3c:5a:36:47:9f:60:e7:ec:
                    24:fa:d7:85:8b:b8:7e:d3:d5:da:14:93:39:08:81:
                    ec:11:6b:1f:01:ba:08:9b:1d:e1:82:c8:7c:b6:6b:
                    fc:30:c8:d7:2c:de:fd:d3:fc:d1:d8:72:ec:8d:52:
                    63:10:1e:19:e3:b8:7f:c5:e7:15:9d:84:a1:96:e8:
                    99:b9:1e:af:85:43:c6:67:49:49:ef:21:08:1f:78:
                    62:8d:ed:58:90:05:db:be:62:5f:0c:f8:22:1f:26:
                    ee:6b:d0:f8:92:cb:fb:de:e8:68:d7:b0:e1:5b:92:
                    55:0d:6c:e2:d4:5c:59:11:e1:cb:9c:f5:8d:f4:a1:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E0:CB:C5:90:EF:27:A1:1C:66:03:1E:83:17:D8:2E:DD:36:51:9C
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323062383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:20b8::/45

    Signature Algorithm: sha256WithRSAEncryption
         56:01:ab:b3:e1:4e:eb:f8:88:55:9b:b3:b6:a7:ba:28:7b:a1:
         f4:6c:39:26:2b:f1:df:d7:ca:53:d5:cc:52:01:95:3e:33:61:
         ec:a1:ef:5c:aa:cc:ab:a8:71:5b:2f:6f:12:9c:5d:90:58:a2:
         b8:43:fd:04:b1:b3:34:81:49:02:77:a8:00:85:78:43:27:80:
         6d:12:68:b6:5a:11:d0:bf:77:b4:6e:69:46:59:7e:96:26:9e:
         95:da:05:2b:f9:68:b3:eb:9d:13:8a:47:63:05:b5:ef:59:ae:
         ab:6c:65:be:b2:02:50:fd:e7:a0:0b:e3:bc:17:e1:ed:dd:e9:
         39:52:8d:8e:28:ec:00:e0:11:9a:51:d2:5d:91:35:6f:2f:0f:
         0f:f0:05:8c:45:21:8f:57:7c:40:48:30:e4:4d:1e:67:34:42:
         77:29:a5:fb:c5:75:c4:ef:19:f6:a9:b0:bb:70:72:1d:66:9b:
         34:78:a7:54:a0:50:ed:3e:70:a6:81:32:15:c8:a7:03:a1:42:
         31:11:af:9c:37:71:ee:0a:c4:a7:f7:ea:ed:1b:92:55:c2:e8:
         c4:05:7d:bb:e6:ec:44:2d:56:99:54:fc:97:e2:02:df:73:b5:
         94:95:36:6a:0b:34:b0:8b:6b:2d:8b:f1:9b:75:cb:d4:35:00:
         2e:36:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 22:34:21 2024 by rpki-client on console-ams.rpki-client.org