Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3432203d3e20323633343231.roa
File:                     323830343a313630303a3a2f33322d3432203d3e20323633343231.roa (raw, json)
Hash identifier:          wjCjJ+JqePw7CDs4gK/faFxcTbv8vW06NN3WCOReb2E=
Subject key identifier:   21:24:6B:4D:DD:22:BA:EB:EC:DE:8A:8E:22:E3:E6:13:CC:A3:3F:9E
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       04F86184F210DC7DEA690D4CF4202DC4267103A4
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3432203d3e20323633343231.roa
Signing time:             Tue 10 Sep 2024 14:15:06 +0000
ROA not before:           Tue 10 Sep 2024 14:10:06 +0000
ROA not after:            Tue 09 Sep 2025 14:15:06 +0000
asID:                     263421
IP address blocks:        2804:1600::/32 maxlen: 42

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 15:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f8:61:84:f2:10:dc:7d:ea:69:0d:4c:f4:20:2d:c4:26:71:03:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Sep 10 14:10:06 2024 GMT
            Not After : Sep  9 14:15:06 2025 GMT
        Subject: CN=21246B4DDD22BAEBECDE8A8E22E3E613CCA33F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:47:87:50:f0:cc:34:e5:68:ae:d8:fd:c5:
                    0a:57:3f:e6:a0:8c:24:16:be:e6:7c:4f:db:57:d7:
                    60:47:18:bb:64:62:79:c8:75:c0:f0:83:7d:1c:e0:
                    2a:48:02:22:e7:45:a4:13:e6:1b:cd:d5:95:bd:04:
                    df:14:d7:51:8a:10:c1:f2:0b:46:08:21:45:e6:89:
                    ec:62:fd:d3:f3:30:01:de:21:9d:a9:9e:ff:99:59:
                    48:9a:50:f5:a7:67:df:ce:d5:2b:80:58:fa:69:6a:
                    ec:21:77:3a:7a:15:8d:fa:3b:d2:b8:28:39:5f:73:
                    8f:0a:80:2a:b5:50:9c:ac:76:1e:41:99:7f:dc:1c:
                    78:8e:9b:c1:52:d7:e7:03:19:9c:ff:02:27:4a:5c:
                    d0:53:06:11:d3:8b:08:20:2d:5d:af:b8:59:95:b0:
                    57:b0:63:85:02:5a:82:b9:ea:82:55:02:b8:b5:bc:
                    f2:5f:ea:ee:f8:a2:92:ae:45:78:55:88:2e:4c:92:
                    e1:1d:8c:52:c7:ae:7e:93:9d:ac:12:8f:ea:40:e6:
                    3d:76:97:a9:cc:97:ae:ce:8e:1d:18:fb:63:c4:e8:
                    d7:c5:d2:05:e8:42:ac:1f:66:1e:6c:40:17:6b:8d:
                    0d:b0:21:f4:f9:b1:73:81:5e:f9:4f:02:bb:80:7b:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:24:6B:4D:DD:22:BA:EB:EC:DE:8A:8E:22:E3:E6:13:CC:A3:3F:9E
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3432203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:f1:db:df:82:5a:18:87:b0:66:55:ff:41:ce:46:70:4b:
         88:d9:db:0a:f8:ef:0c:d8:b8:45:ae:26:3e:72:31:92:fa:1e:
         8f:86:6f:75:87:c0:88:ee:fc:19:30:fa:ca:3e:47:0a:b5:9b:
         37:d9:93:0e:04:d8:0c:7b:ef:81:c0:64:2f:8e:fd:89:6b:1f:
         88:9f:7b:d7:1f:f4:40:e3:41:a9:2d:ee:71:de:9a:91:13:b4:
         f0:8b:d8:2f:a7:b1:88:fb:db:1d:cb:8f:b0:37:e7:6e:99:b8:
         d7:f8:37:b9:b3:32:23:11:c3:21:5f:20:85:02:40:10:1e:fa:
         19:8a:33:af:2e:e8:10:19:9b:00:8c:90:5b:b8:dc:82:da:f6:
         13:f4:38:49:11:0e:2f:5e:16:29:f6:c2:b7:ec:8b:e6:f7:66:
         2c:1f:7f:3d:7e:bd:ec:82:69:f1:6a:6c:6c:6b:35:a1:7e:e0:
         15:56:16:e0:73:cb:1c:8b:5a:8b:a1:2b:b1:aa:2c:f4:60:41:
         12:e4:e4:d0:00:9a:da:c3:e1:98:4f:01:a9:a4:84:b0:a3:de:
         3d:d9:2c:4e:1a:5b:0f:c0:99:84:be:c2:ae:1b:4d:65:40:a4:
         19:e5:0b:17:75:7a:88:74:d8:fc:e2:46:d6:62:bd:02:6d:8b:
         87:e5:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 17:30:57 2024 by rpki-client on console-fra.rpki-client.org