Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33323a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a33323a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          09TRdgLvFY48vpl16VeIctnt+emsxPF2RaXNNtZjPBc=
Subject key identifier:   20:CD:22:62:00:FB:43:14:56:5D:3D:7B:1B:74:AF:31:F3:19:D1:5A
Certificate issuer:       /CN=4616AB00D45A608AC6F2CA20A8BEDA8377278362
Certificate serial:       611532A6A4209528C1E47FEED020573E2A0B378F
Authority key identifier: 46:16:AB:00:D4:5A:60:8A:C6:F2:CA:20:A8:BE:DA:83:77:27:83:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4616AB00D45A608AC6F2CA20A8BEDA8377278362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33323a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Sun 28 Jul 2024 00:15:30 +0000
ROA not before:           Sun 28 Jul 2024 00:10:30 +0000
ROA not after:            Sun 27 Jul 2025 00:15:30 +0000
asID:                     265330
IP address blocks:        2804:2e30:32::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:15:32:a6:a4:20:95:28:c1:e4:7f:ee:d0:20:57:3e:2a:0b:37:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4616AB00D45A608AC6F2CA20A8BEDA8377278362
        Validity
            Not Before: Jul 28 00:10:30 2024 GMT
            Not After : Jul 27 00:15:30 2025 GMT
        Subject: CN=20CD226200FB4314565D3D7B1B74AF31F319D15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:d1:82:b8:62:f4:bc:0c:15:73:0c:4a:79:
                    4c:1a:66:7c:3c:4a:e6:2a:6a:1f:a4:ec:70:51:0a:
                    59:16:7a:e6:2c:0e:95:ed:05:93:9d:90:56:d2:fe:
                    e3:0c:a5:e3:58:84:f1:2a:37:83:4f:94:36:03:22:
                    f6:30:65:fd:69:54:bd:2b:72:c5:32:bb:61:ca:2b:
                    b1:dc:5a:74:b3:d8:55:f6:3b:8c:02:20:3d:c3:4b:
                    6d:8a:f5:27:3e:0f:84:86:01:c1:33:f8:ab:8e:87:
                    3d:b1:e7:26:6d:6f:4f:ec:f2:30:87:0b:1a:4d:53:
                    c3:99:75:6b:b4:57:59:e3:cd:9f:56:4e:84:65:ff:
                    fb:94:be:91:e3:d0:20:8f:55:c1:28:59:2a:c4:f6:
                    eb:34:37:a0:39:cf:eb:fc:c1:e9:50:0f:14:79:12:
                    84:c8:16:8a:2f:0b:81:2a:bd:58:99:df:c3:58:c3:
                    db:c6:7f:22:4a:87:64:b2:b4:4e:d3:4f:2d:13:8a:
                    dc:cf:6c:a1:e5:17:f6:a9:60:07:bc:57:48:70:96:
                    de:77:4c:29:0e:4c:eb:64:06:a5:db:50:1a:4b:d1:
                    f6:cb:ba:ca:8b:62:96:a3:1e:30:56:f6:c9:9c:da:
                    04:a7:b3:98:ab:78:54:66:89:c8:a0:62:8b:e0:6e:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CD:22:62:00:FB:43:14:56:5D:3D:7B:1B:74:AF:31:F3:19:D1:5A
            X509v3 Authority Key Identifier:
                keyid:46:16:AB:00:D4:5A:60:8A:C6:F2:CA:20:A8:BE:DA:83:77:27:83:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/4616AB00D45A608AC6F2CA20A8BEDA8377278362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4616AB00D45A608AC6F2CA20A8BEDA8377278362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33323a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:32::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:1e:1c:2d:d1:4c:f1:1e:90:f2:3e:55:0a:78:37:42:ad:e8:
         c3:da:3c:2e:9c:56:95:79:50:90:c1:3b:cd:5f:96:24:d7:15:
         56:3e:ff:e1:56:eb:01:52:03:04:dc:1f:b0:9c:18:d1:42:c3:
         8c:75:52:8e:0e:f5:57:b4:33:bb:4a:d3:0f:fd:39:32:12:83:
         12:c9:5f:d0:3f:ff:a0:eb:52:25:6c:6d:aa:17:54:b6:48:5e:
         13:51:bb:32:b9:da:f9:b7:d0:29:52:0e:82:7a:e2:0d:cf:0f:
         84:dc:2d:0d:64:b1:3b:60:25:65:4c:0d:9b:5e:89:cc:b7:98:
         a2:a8:50:65:a7:09:32:dc:22:9e:db:09:bb:57:99:0b:0d:3c:
         f3:89:e8:25:3f:18:44:54:41:6d:7c:c8:40:9b:de:13:d1:f8:
         91:b2:74:8f:89:7e:0f:65:de:cf:c5:09:a1:f5:65:a2:0e:f8:
         6c:1b:46:a4:34:3e:f5:80:f5:3e:99:59:14:93:ed:0f:04:57:
         5b:ed:87:9e:58:ce:5d:50:db:46:75:60:18:ee:26:64:23:40:
         f1:11:c0:3a:bd:a9:78:1b:be:e6:e5:95:73:e7:42:82:f0:35:
         b8:05:0b:d8:fd:83:b6:f8:c7:b4:b7:59:31:8b:e1:5c:c9:04:
         8e:f8:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 17:07:29 2024 by rpki-client on console-ams.rpki-client.org