Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3332203d3e20323639343937.roa
File:                     323830343a363538383a3a2f33322d3332203d3e20323639343937.roa (raw, json)
Hash identifier:          ZUkBx7+fzhT980EnwlZ7OM87DYPU+xmGh5jduPxPYlU=
Subject key identifier:   67:BA:ED:2B:3A:16:9A:04:7A:71:1D:67:74:5E:F2:3E:F4:CF:56:85
Certificate issuer:       /CN=BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7
Certificate serial:       22AC316F9741CD1C3DD89F9FBF33A7CD49A67289
Authority key identifier: BD:82:DD:BC:32:3F:4C:52:9A:2B:DA:07:55:A1:A8:F7:BF:2B:B0:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3332203d3e20323639343937.roa
Signing time:             Thu 11 Apr 2024 20:40:24 +0000
ROA not before:           Thu 11 Apr 2024 20:35:24 +0000
ROA not after:            Thu 10 Apr 2025 20:40:24 +0000
asID:                     269497
IP address blocks:        2804:6588::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 10 Apr 2025 20:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ac:31:6f:97:41:cd:1c:3d:d8:9f:9f:bf:33:a7:cd:49:a6:72:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7
        Validity
            Not Before: Apr 11 20:35:24 2024 GMT
            Not After : Apr 10 20:40:24 2025 GMT
        Subject: CN=3082010A0282010100CAEF040F7E4B1F512D9F19F488FED3C813787BDF1567C70FE2365531CB4AEC899A26823491BC20E6049395AA666E8AEB5DD9E0F478C43DFF7E83A803D0CF3A1D316CEA7BCB691819B8F21DA72B83A5A040470AC1D88C38E94BFB0DB3776FCAD3EF5D83A655759AE300B7169C45EEB8157A42852D0C635803181C57740DFC9618EAD60AAF9C39374BBF11636DDC6EF505AEC5CF1E587ABD97CABA6FFB2584A487B766C22AF6D909168F33D82AB3EFEE686F7586B79C2DE1EA767007D9491664104FE876E2E768930407741AA3B8D4714AA56ECF772E10924D0E7A7573396B6E74325C729550F30EC8D524F0040261B2CA8623029C28DBBA879AFDDC559A9C1DDD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:04:0f:7e:4b:1f:51:2d:9f:19:f4:88:fe:
                    d3:c8:13:78:7b:df:15:67:c7:0f:e2:36:55:31:cb:
                    4a:ec:89:9a:26:82:34:91:bc:20:e6:04:93:95:aa:
                    66:6e:8a:eb:5d:d9:e0:f4:78:c4:3d:ff:7e:83:a8:
                    03:d0:cf:3a:1d:31:6c:ea:7b:cb:69:18:19:b8:f2:
                    1d:a7:2b:83:a5:a0:40:47:0a:c1:d8:8c:38:e9:4b:
                    fb:0d:b3:77:6f:ca:d3:ef:5d:83:a6:55:75:9a:e3:
                    00:b7:16:9c:45:ee:b8:15:7a:42:85:2d:0c:63:58:
                    03:18:1c:57:74:0d:fc:96:18:ea:d6:0a:af:9c:39:
                    37:4b:bf:11:63:6d:dc:6e:f5:05:ae:c5:cf:1e:58:
                    7a:bd:97:ca:ba:6f:fb:25:84:a4:87:b7:66:c2:2a:
                    f6:d9:09:16:8f:33:d8:2a:b3:ef:ee:68:6f:75:86:
                    b7:9c:2d:e1:ea:76:70:07:d9:49:16:64:10:4f:e8:
                    76:e2:e7:68:93:04:07:74:1a:a3:b8:d4:71:4a:a5:
                    6e:cf:77:2e:10:92:4d:0e:7a:75:73:39:6b:6e:74:
                    32:5c:72:95:50:f3:0e:c8:d5:24:f0:04:02:61:b2:
                    ca:86:23:02:9c:28:db:ba:87:9a:fd:dc:55:9a:9c:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BA:ED:2B:3A:16:9A:04:7A:71:1D:67:74:5E:F2:3E:F4:CF:56:85
            X509v3 Authority Key Identifier:
                keyid:BD:82:DD:BC:32:3F:4C:52:9A:2B:DA:07:55:A1:A8:F7:BF:2B:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3332203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6588::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:55:81:72:66:e9:90:b8:d9:0f:a2:7e:a9:cd:36:c1:2e:
         ab:f1:a8:8e:22:bc:e8:9b:6f:49:72:57:d6:ad:a3:71:ad:94:
         72:fc:b4:2c:b1:69:ea:77:09:e3:f6:1b:85:90:83:3a:a6:3b:
         03:4b:4e:61:e9:0d:f1:d3:4f:12:30:88:e5:2f:ba:14:af:75:
         ec:d9:86:1d:ed:40:ea:77:2d:1e:f7:71:49:ad:85:68:6d:4f:
         42:c7:6b:c0:ef:44:de:92:f3:5e:26:c7:43:c2:d4:a7:91:0d:
         aa:87:96:42:ee:b8:35:39:dc:40:89:56:2e:f0:fe:aa:62:e4:
         e9:96:ea:58:38:1d:16:8f:af:6c:60:df:cf:b9:5b:ca:8f:9c:
         ba:d7:51:41:c1:26:fa:e3:66:74:e5:c5:8f:41:d5:c5:8c:9c:
         95:6b:12:98:1e:9b:37:c3:2f:88:79:29:53:91:46:57:ad:1b:
         26:14:63:c4:9b:19:8c:9a:47:f9:a7:0e:2e:6e:fa:04:13:22:
         a3:f6:db:3e:f1:3b:b5:4a:49:9d:8c:6a:96:5e:c1:4e:50:de:
         7b:90:14:0f:7c:c2:e3:66:28:d4:57:41:64:3d:49:91:42:a3:
         f4:dc:d2:84:8a:5c:16:f3:a8:8e:2b:3d:af:c8:30:e1:d5:20:
         c1:77:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 20:13:30 2024 by rpki-client on console-fra.rpki-client.org