Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3332203d3e20323638323632.roa
File:                     323830343a346537343a3a2f33322d3332203d3e20323638323632.roa (raw, json)
Hash identifier:          M7jifPt7gG+sMkFDO5DQG/Whr4VxaUJ5q4Id8QsW3AU=
Subject key identifier:   5B:5D:C3:AC:FE:9B:C0:7E:D9:C7:57:4D:DF:26:EC:38:94:52:9F:F3
Certificate issuer:       /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial:       1BE3942560B327ACE1A8FE6DC76A1D32BC8EEB93
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3332203d3e20323638323632.roa
Signing time:             Thu 25 Apr 2024 13:14:25 +0000
ROA not before:           Thu 25 Apr 2024 13:09:25 +0000
ROA not after:            Thu 24 Apr 2025 13:14:25 +0000
asID:                     268262
IP address blocks:        2804:4e74::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e3:94:25:60:b3:27:ac:e1:a8:fe:6d:c7:6a:1d:32:bc:8e:eb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
        Validity
            Not Before: Apr 25 13:09:25 2024 GMT
            Not After : Apr 24 13:14:25 2025 GMT
        Subject: CN=5B5DC3ACFE9BC07ED9C7574DDF26EC3894529FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:60:68:e1:17:7d:3d:d2:67:9f:34:7a:c7:
                    ab:cf:0c:7b:73:cc:3f:03:e0:85:6f:dd:15:3b:eb:
                    4c:67:44:ea:97:2a:0b:0e:95:e3:0d:ae:4f:fa:f8:
                    c9:88:74:53:f4:32:44:9c:60:9d:07:d0:ee:35:10:
                    b9:ac:a1:f3:a1:5f:72:a5:44:1c:2f:82:8f:62:7b:
                    cd:e3:36:a9:e0:41:94:5a:15:55:a0:0e:52:79:62:
                    53:9c:10:e3:e6:3b:d9:9f:17:3b:1c:b2:65:cf:02:
                    65:ae:f1:a5:99:15:38:48:79:87:79:4d:b4:b8:2d:
                    41:25:be:95:de:c6:5e:99:95:ee:36:8a:00:11:f8:
                    21:9c:b4:74:d7:7f:1c:0c:2c:ce:82:c7:9c:de:71:
                    1e:c7:2d:bb:ca:1a:66:57:61:67:40:01:1a:85:15:
                    1b:b8:41:60:fb:bc:b1:7c:dc:54:45:b6:e8:a0:22:
                    f6:08:3c:34:17:df:20:17:68:bc:10:dd:3e:a4:44:
                    37:d0:fd:ce:62:88:a5:00:17:e5:fa:6a:20:b2:41:
                    c2:cc:e1:86:e1:1a:3f:96:94:1f:5f:36:ff:97:72:
                    b9:60:97:8b:21:a3:12:27:ee:75:11:10:80:39:e9:
                    c6:c4:72:42:40:d1:31:d9:a3:3f:d4:29:f9:6e:e7:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:C3:AC:FE:9B:C0:7E:D9:C7:57:4D:DF:26:EC:38:94:52:9F:F3
            X509v3 Authority Key Identifier:
                keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3332203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e74::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:3c:78:bc:e7:e1:52:40:60:93:ce:39:45:57:ba:52:73:
         6d:ff:e8:12:8e:d1:1f:8e:ea:2b:a9:41:10:d4:46:92:96:d3:
         e1:3d:c6:c1:3e:fd:59:ab:41:15:38:33:fc:07:74:b9:02:dd:
         0b:36:ae:9c:12:82:e9:d7:09:11:d0:6c:f5:4d:d3:03:8a:a3:
         cb:3f:42:aa:78:f3:19:38:4f:2b:41:07:21:f2:41:ff:62:39:
         85:d1:7a:04:c2:d4:22:a2:54:9b:68:28:e0:1f:27:1f:ac:4a:
         46:8c:83:5c:1c:89:a1:ba:ed:24:9c:5c:00:96:28:40:fa:98:
         2d:ff:3b:92:b3:4d:60:84:86:5f:b8:63:ae:a7:96:b8:bd:98:
         b7:51:2a:a4:82:cd:fb:2a:05:78:85:2c:61:35:ce:22:fd:05:
         2d:33:ab:87:60:63:ee:18:02:40:44:04:41:67:e3:c2:a0:f6:
         5c:9f:cd:f9:9f:f1:7b:3b:08:b2:72:7f:47:3c:b5:fe:1f:25:
         95:bf:e1:b4:73:92:4d:97:89:39:87:14:8e:88:38:99:f0:04:
         8c:71:87:80:ee:6c:de:2d:f7:3d:c8:9a:83:57:cc:63:03:9a:
         8e:67:ad:de:78:77:81:c1:8a:7e:5a:c0:04:d7:1b:af:4b:f9:
         32:05:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org