Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386530303a3a2f34302d3430203d3e203532353336.roa
File:                     323830343a386337633a386530303a3a2f34302d3430203d3e203532353336.roa (raw, json)
Hash identifier:          gBipvorifygUVFNmtORdUker4ahb/8PwGvyuHVPvqSM=
Subject key identifier:   37:6C:DC:F2:1E:30:36:9D:CD:6A:08:BB:E1:F2:DF:E2:69:67:0A:42
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       69ABF1CC06FA7F1CCD277CE5DC9F561912893AE0
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386530303a3a2f34302d3430203d3e203532353336.roa
Signing time:             Thu 18 Apr 2024 18:01:06 +0000
ROA not before:           Thu 18 Apr 2024 17:56:06 +0000
ROA not after:            Thu 17 Apr 2025 18:01:06 +0000
asID:                     52536
IP address blocks:        2804:8c7c:8e00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ab:f1:cc:06:fa:7f:1c:cd:27:7c:e5:dc:9f:56:19:12:89:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:56:06 2024 GMT
            Not After : Apr 17 18:01:06 2025 GMT
        Subject: CN=376CDCF21E30369DCD6A08BBE1F2DFE269670A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:8c:d6:dd:99:0e:15:17:77:e1:db:1d:44:
                    33:1a:f7:0b:cc:a2:93:f1:e2:7c:19:26:a1:b0:a2:
                    6b:41:c3:1e:84:cf:a3:a2:fa:2e:84:04:d3:5c:bf:
                    8a:d2:5a:14:e7:14:34:e9:d1:e3:14:58:dc:0e:b6:
                    ff:de:44:e3:d9:da:73:27:d1:be:f8:7c:2e:de:2d:
                    83:ab:0e:54:45:64:16:f2:1e:70:73:8f:5b:18:d1:
                    4f:69:de:1c:d0:45:40:87:b8:44:0c:55:28:36:8e:
                    ab:b3:5e:48:a4:7e:88:24:c4:c7:b4:e7:18:c1:90:
                    7d:f5:b1:5a:95:3e:c2:60:26:91:f8:bb:0f:a1:4e:
                    94:5c:34:71:c0:c4:87:4e:6b:c5:7b:5c:1a:67:93:
                    dd:92:2d:40:7c:93:e7:08:1d:97:a8:b9:fd:5d:4f:
                    6b:6f:d4:87:af:70:aa:91:e5:e5:f4:38:0b:c3:fb:
                    72:e0:e3:41:9d:99:ef:2e:e3:2b:68:37:a7:ce:fa:
                    36:46:29:33:8c:89:4e:2b:5d:1f:05:e7:6c:2f:c1:
                    f5:45:09:26:96:b4:d1:66:e3:d8:36:c4:13:d4:65:
                    68:df:fa:c9:c0:95:57:61:e0:a8:5f:2e:3b:a5:41:
                    5e:c6:39:88:d6:75:69:06:fb:6f:14:0b:0b:d7:0d:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6C:DC:F2:1E:30:36:9D:CD:6A:08:BB:E1:F2:DF:E2:69:67:0A:42
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386530303a3a2f34302d3430203d3e203532353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:69:25:e2:a9:f5:3d:e3:da:b5:af:85:e5:55:30:8e:a0:
         24:f7:d6:6d:9f:39:63:bb:a9:20:82:a1:77:22:bc:09:73:94:
         fa:9d:ad:1a:33:7d:62:01:ee:b9:5d:dc:c2:5e:f8:aa:fa:43:
         7d:ce:7a:a7:7b:bc:67:b7:b4:cc:8c:32:5f:bb:0c:d8:b2:ef:
         1e:31:b8:94:cd:32:61:0e:0f:48:7a:43:25:12:10:53:10:dc:
         40:d9:ae:66:60:4d:f3:ed:1c:6f:95:04:89:ab:1d:eb:45:b0:
         fd:a6:40:8c:d9:23:cd:67:8e:62:91:e5:da:7e:b9:f0:ae:cf:
         c2:3a:2f:3e:10:ce:c5:bb:aa:1e:77:b2:85:3d:e0:fd:83:ad:
         80:0b:2b:84:14:86:25:f4:7d:b4:2e:64:e5:cc:f1:32:e2:c0:
         72:7d:77:71:84:42:50:71:9c:1a:9b:02:c5:3b:8f:bd:d7:79:
         f1:42:90:d1:2e:eb:b7:f6:81:80:34:38:66:68:a9:80:c7:58:
         bd:e3:00:af:f0:d7:f3:10:1f:bc:dc:69:36:fb:30:5e:ba:ba:
         49:74:2e:9b:3d:de:d0:ad:4a:8d:b0:d4:4e:a6:e4:27:11:9d:
         3c:a3:ab:04:28:eb:bb:34:27:29:87:e7:6a:b1:01:04:5f:4a:
         a2:b9:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org