Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/323830343a376638383a3a2f33322d3332203d3e20323731363934.roa
File:                     323830343a376638383a3a2f33322d3332203d3e20323731363934.roa (raw, json)
Hash identifier:          m+T42CWPxnRfBU6W8KaASbiCwHAhcuHw0dZ4ULeBe1I=
Subject key identifier:   C1:D0:AC:06:2A:F6:87:CD:A8:7A:F4:23:10:02:44:B1:F5:46:11:0C
Certificate issuer:       /CN=9B0FDA073951168EEB28943672D529AFE023A2B0
Certificate serial:       6FA062A51689A96B5DE85BFB2FD36DA5D88CEBEA
Authority key identifier: 9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/323830343a376638383a3a2f33322d3332203d3e20323731363934.roa
Signing time:             Thu 04 Apr 2024 16:50:40 +0000
ROA not before:           Thu 04 Apr 2024 16:45:40 +0000
ROA not after:            Thu 03 Apr 2025 16:50:40 +0000
asID:                     271694
IP address blocks:        2804:7f88::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 29 May 2024 11:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a0:62:a5:16:89:a9:6b:5d:e8:5b:fb:2f:d3:6d:a5:d8:8c:eb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B0FDA073951168EEB28943672D529AFE023A2B0
        Validity
            Not Before: Apr  4 16:45:40 2024 GMT
            Not After : Apr  3 16:50:40 2025 GMT
        Subject: CN=C1D0AC062AF687CDA87AF423100244B1F546110C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:7d:b9:56:26:d7:ae:62:c3:2c:3d:4e:18:
                    0f:4f:fc:ff:68:f8:d1:df:5c:7c:81:c1:b1:75:d9:
                    d3:6b:6b:f8:f2:69:8f:0a:17:27:17:5c:5f:0c:e3:
                    02:7c:3c:e2:78:ff:3e:ad:4f:26:58:d4:0a:e7:4e:
                    b3:9d:1c:b9:09:76:92:ff:31:e8:a6:e0:f7:b9:91:
                    7d:6d:e0:e5:47:93:b3:a9:f8:ad:c1:4d:10:0f:be:
                    80:f1:7c:e4:5d:c9:b8:e5:cd:66:bf:e2:18:06:20:
                    7e:39:ea:58:99:c0:c3:a6:a3:82:34:65:c1:b2:1c:
                    5b:b0:7c:47:62:12:9c:78:c0:8a:4d:2a:16:9f:56:
                    8a:9b:97:7e:48:f0:e0:b0:07:9e:05:b6:7b:a5:74:
                    a0:c1:a6:5b:35:e0:ba:19:00:f0:ac:f2:1a:d0:35:
                    0c:ee:af:f1:91:0a:1e:2c:96:85:80:c4:03:60:f2:
                    43:cd:cd:46:20:b1:86:3c:28:2f:c3:52:6c:6c:55:
                    9a:eb:d8:e8:b2:1f:06:b9:68:55:65:4d:94:82:1c:
                    1d:76:28:aa:45:bd:4b:d4:ef:60:ce:18:53:15:07:
                    f8:63:03:46:45:e5:b4:7e:61:f9:ea:a4:87:9f:1a:
                    bb:d2:ba:9f:c6:c7:a0:9d:86:86:fb:20:e3:a7:1f:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D0:AC:06:2A:F6:87:CD:A8:7A:F4:23:10:02:44:B1:F5:46:11:0C
            X509v3 Authority Key Identifier:
                keyid:9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/323830343a376638383a3a2f33322d3332203d3e20323731363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f88::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:6f:af:53:01:48:c9:61:78:2e:de:83:de:c0:9c:ed:af:
         55:91:96:83:a8:1f:14:a2:a1:ed:ee:08:52:eb:89:b4:7f:85:
         5d:44:48:2d:f6:16:d7:8a:2d:81:11:60:28:57:e6:0c:ff:5a:
         4b:71:d4:a8:a6:1c:de:89:9b:00:d2:21:3b:f6:f3:5f:dc:37:
         c6:b0:27:4d:74:0a:bc:2e:12:19:00:b7:a8:55:e3:61:7b:8e:
         de:59:1a:09:60:26:36:b8:c8:cb:e3:ab:c4:15:8e:6a:34:81:
         2c:b0:ca:0d:34:fe:7f:b6:d8:a2:5d:b9:95:b7:8c:72:ff:60:
         7c:cc:fd:a7:5b:0b:7d:0b:fc:c1:79:a0:00:28:6b:64:94:fa:
         c0:c8:f9:54:63:42:11:ae:97:0a:3b:1f:f9:9e:5b:cc:73:05:
         66:5d:e8:f2:30:57:38:21:93:de:e6:5e:4d:71:af:72:87:0f:
         0c:fe:10:cc:00:8d:1a:6d:d5:3f:5b:87:ae:2d:35:1e:17:8b:
         64:65:04:a3:88:7d:29:44:22:d0:84:f6:a4:b4:a4:e8:09:fc:
         6e:33:36:e5:cd:45:89:96:81:5e:ff:ce:86:51:b6:c1:24:8f:
         14:4f:8e:4e:5b:d4:70:1d:67:e7:3a:6f:a9:b0:38:83:33:7d:
         9a:0a:f6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org