Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a313a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a313a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          +Db27OGgR5VoXUOmeWmFbks83UKSOXcFM7m1XkwSC58=
Subject key identifier:   E7:18:04:65:7D:20:E2:A9:EE:A9:44:E2:06:2B:A8:82:DE:10:9B:A5
Certificate issuer:       /CN=4616AB00D45A608AC6F2CA20A8BEDA8377278362
Certificate serial:       65DAF2AA3B1DF938C243724798C4DDAE4312BD64
Authority key identifier: 46:16:AB:00:D4:5A:60:8A:C6:F2:CA:20:A8:BE:DA:83:77:27:83:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4616AB00D45A608AC6F2CA20A8BEDA8377278362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a313a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Sun 28 Jul 2024 00:15:29 +0000
ROA not before:           Sun 28 Jul 2024 00:10:29 +0000
ROA not after:            Sun 27 Jul 2025 00:15:29 +0000
asID:                     265330
IP address blocks:        2804:2e30:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:da:f2:aa:3b:1d:f9:38:c2:43:72:47:98:c4:dd:ae:43:12:bd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4616AB00D45A608AC6F2CA20A8BEDA8377278362
        Validity
            Not Before: Jul 28 00:10:29 2024 GMT
            Not After : Jul 27 00:15:29 2025 GMT
        Subject: CN=E71804657D20E2A9EEA944E2062BA882DE109BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:22:51:74:34:1e:ac:2a:34:79:87:58:55:
                    cf:9d:a8:35:f5:68:ce:03:76:fb:d9:42:a0:ac:c5:
                    a3:79:de:fc:4b:b2:1a:46:e0:c8:b6:f2:5e:d2:f4:
                    bc:0c:02:46:0b:ed:ce:74:d4:54:e4:7a:a7:8d:cc:
                    8a:d2:e9:c1:79:e8:cf:dd:99:08:7d:f2:aa:0d:98:
                    99:b2:16:a6:d8:e7:d9:9c:5a:fc:c9:b7:23:7b:c3:
                    61:10:a5:e8:33:de:7d:37:af:76:4a:37:55:77:83:
                    6a:d3:e1:f9:9a:9c:5c:22:81:b7:0b:eb:b3:6f:59:
                    9b:a9:69:67:2e:95:84:72:9f:78:3b:0e:47:80:d6:
                    4d:c2:5d:75:ab:58:44:64:d6:53:fd:64:f3:cd:52:
                    92:3a:d6:c6:38:11:8b:7f:c9:6d:6d:2b:b0:7f:c6:
                    be:df:36:c9:c5:d5:d2:62:e2:7e:92:67:4a:0c:46:
                    d1:89:44:c3:61:16:d3:71:1f:61:5a:9a:58:71:dc:
                    99:a4:f4:b8:3b:13:5d:62:5e:87:ae:56:0d:b7:d0:
                    ca:cb:23:4c:93:8c:6b:0f:ce:f5:d3:23:a0:d3:c1:
                    df:bd:09:08:b4:0e:4f:6c:61:03:d6:cb:10:f7:ef:
                    3d:39:3b:21:fa:f2:f1:48:22:18:1b:b0:2f:9b:bf:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:18:04:65:7D:20:E2:A9:EE:A9:44:E2:06:2B:A8:82:DE:10:9B:A5
            X509v3 Authority Key Identifier:
                keyid:46:16:AB:00:D4:5A:60:8A:C6:F2:CA:20:A8:BE:DA:83:77:27:83:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/4616AB00D45A608AC6F2CA20A8BEDA8377278362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4616AB00D45A608AC6F2CA20A8BEDA8377278362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a313a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:98:ad:89:05:ab:1d:90:4e:a9:03:a9:8f:1b:48:83:5d:1e:
         58:87:ef:e0:80:c1:4c:e3:de:31:f6:46:96:f2:aa:f2:90:e5:
         1a:53:44:1b:94:f4:46:7e:00:a1:34:6b:fd:fa:05:30:5e:18:
         da:4d:62:80:4b:8f:20:81:cc:66:c1:b8:91:a1:96:b9:1f:b9:
         f2:36:83:bc:70:4d:f2:64:c3:fc:8d:46:0c:ae:a5:dc:6c:00:
         5e:90:9e:9a:0a:16:33:47:c5:6b:35:92:48:fb:92:6d:2e:23:
         b7:60:5d:ec:e1:a2:b1:c7:eb:2c:62:ed:58:f4:51:d7:a9:26:
         82:29:58:55:a8:7b:30:8a:dc:f2:04:23:eb:26:e5:8a:6f:42:
         b1:78:ce:5c:aa:7c:5c:be:f0:52:0d:4f:4c:3d:b7:19:cc:18:
         12:b7:34:ec:92:92:71:bd:83:59:fc:80:17:ad:c3:28:0d:e5:
         14:98:9d:6a:83:9d:99:58:7e:50:13:f7:2b:15:06:73:cd:42:
         5e:7e:8b:89:87:60:a0:04:0c:7c:13:37:9e:a3:b5:3e:3e:f9:
         f4:2f:f9:c6:c6:d8:79:93:3b:cf:8f:4a:a4:d5:1f:66:f1:e4:
         c6:bc:c3:67:67:14:ea:a2:c1:d3:dc:84:47:8f:26:38:82:07:
         df:d2:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 16:14:07 2024 by rpki-client on console-fra.rpki-client.org