Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          pirbhXJYAJYZRdTh30/nBmmIvVQGDtaJ22HhMEHONQ0=
Subject key identifier:   CA:6D:45:F8:B9:8A:CD:69:ED:03:78:83:AE:64:6B:6F:A1:45:8C:25
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       68E0DB23A37CDA2F64B8AB49A77692067DF9FACA
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Tue 14 May 2024 17:10:09 +0000
ROA not before:           Tue 14 May 2024 17:05:09 +0000
ROA not after:            Tue 13 May 2025 17:10:09 +0000
asID:                     265187
IP address blocks:        2804:2c00:100::/42 maxlen: 42

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 16:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e0:db:23:a3:7c:da:2f:64:b8:ab:49:a7:76:92:06:7d:f9:fa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: May 14 17:05:09 2024 GMT
            Not After : May 13 17:10:09 2025 GMT
        Subject: CN=CA6D45F8B98ACD69ED037883AE646B6FA1458C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:cd:57:ee:81:35:27:b7:a8:f8:6c:5c:f0:3b:
                    c3:c2:a8:22:26:dc:67:29:2e:2d:1c:d8:1f:72:c6:
                    b6:79:8f:96:85:60:b3:15:26:4f:ab:8f:fd:c3:21:
                    50:84:c5:c2:a4:5d:93:e9:d5:fd:8d:fb:44:a7:4b:
                    bb:ea:7c:1a:50:40:b8:ab:4a:2b:d1:d9:1c:31:3f:
                    eb:19:e9:07:06:e6:b2:44:1d:82:1a:c6:c5:e8:87:
                    09:e0:df:e4:6f:cc:1f:0b:54:25:4f:1b:40:5b:aa:
                    94:d4:c4:cb:e7:34:6d:28:02:15:e5:1e:05:36:b7:
                    b8:a2:9e:1d:d2:93:a7:43:8f:93:3d:2f:a1:bd:2f:
                    6d:96:16:f6:0d:49:89:84:b1:71:44:aa:0d:42:b5:
                    93:42:8e:98:46:4c:cd:74:e6:47:23:70:fe:bf:ac:
                    66:4f:be:2e:08:e5:c5:bc:de:1d:1f:03:a1:87:99:
                    ee:16:f1:bc:f5:62:b2:dc:e2:55:6a:88:60:a9:14:
                    17:75:1d:15:6a:ea:30:02:31:c9:19:f7:2e:12:a0:
                    82:19:8e:5c:23:f7:95:b6:4e:ac:ef:36:1b:f8:80:
                    5d:79:d5:14:e1:5d:d3:85:4d:91:f5:2f:4a:58:fb:
                    40:c2:e0:3b:d6:d0:9f:c8:da:9c:14:ed:42:71:fa:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6D:45:F8:B9:8A:CD:69:ED:03:78:83:AE:64:6B:6F:A1:45:8C:25
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         56:3c:5b:73:b5:44:5a:72:08:04:25:e5:25:5f:4b:bb:fa:5e:
         15:9c:fc:09:9b:a7:71:fd:cf:0d:e7:54:f5:37:a3:e0:f0:4e:
         87:6e:a0:ce:e5:db:e2:45:3f:ba:9f:d1:b1:eb:f1:ea:39:dd:
         e2:33:40:7e:b3:63:2e:a4:03:df:c3:38:bf:8a:0f:9d:b3:6b:
         b4:ec:10:90:8b:c2:54:28:a7:d5:09:f3:76:43:ed:31:70:f1:
         6c:bb:7c:d9:04:b5:f1:c6:3d:3a:49:23:d4:2e:06:da:47:9e:
         30:fa:0b:14:21:b7:4e:75:64:a9:bb:61:b5:dc:b8:4a:98:76:
         24:06:f1:9e:aa:31:61:a1:30:17:85:bf:7a:ee:88:a7:09:ff:
         24:c5:5c:53:4a:6d:9f:ed:44:7c:1c:bb:7e:60:f3:8e:e5:fa:
         16:ad:d4:8a:80:f8:ff:50:93:07:c0:f0:8f:98:6a:d2:b8:55:
         49:d5:c3:46:ba:12:be:d8:51:a5:41:25:ac:af:9b:ef:01:af:
         f6:7d:c8:9e:e0:35:15:de:fe:5f:ad:2c:49:c9:5b:80:05:41:
         fc:44:2b:69:5b:e5:0c:ee:e2:59:2c:c9:8c:12:9f:1c:6d:72:
         0d:bb:fd:7d:2b:e5:c3:e7:18:71:0f:27:9f:ad:a8:4e:99:03:
         62:eb:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 19:12:36 2024 by rpki-client on console-ams.rpki-client.org