Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a343030303a3a2f33342d3334203d3e20323731353030.roa
File:                     323830343a376338303a343030303a3a2f33342d3334203d3e20323731353030.roa (raw, json)
Hash identifier:          1ANX+bvHHuc4SM6D/dpH5x1/sz0rz4IGBaA4cpLl98s=
Subject key identifier:   11:96:3F:FE:72:02:66:E7:B6:58:E7:35:52:12:A2:52:5A:07:9D:A6
Certificate issuer:       /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial:       1DE7161A4D849CCF119CBC7DE80F78D6090635EF
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a343030303a3a2f33342d3334203d3e20323731353030.roa
Signing time:             Tue 30 Apr 2024 08:05:31 +0000
ROA not before:           Tue 30 Apr 2024 08:00:31 +0000
ROA not after:            Tue 29 Apr 2025 08:05:31 +0000
asID:                     271500
IP address blocks:        2804:7c80:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 03:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e7:16:1a:4d:84:9c:cf:11:9c:bc:7d:e8:0f:78:d6:09:06:35:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
        Validity
            Not Before: Apr 30 08:00:31 2024 GMT
            Not After : Apr 29 08:05:31 2025 GMT
        Subject: CN=11963FFE720266E7B658E7355212A2525A079DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:cb:2f:bb:eb:90:45:1b:6e:6b:1e:ed:93:
                    37:d1:72:39:3b:6a:63:a6:be:85:6e:85:85:35:f7:
                    b2:b6:ad:67:b3:13:e9:ee:34:c4:ec:0a:8d:9d:45:
                    53:3d:7c:42:81:4e:f9:65:ce:33:58:92:6d:03:97:
                    75:04:3b:ac:3a:e5:76:7f:90:5a:80:d4:f9:8d:8c:
                    71:e1:97:96:c5:18:9d:37:3e:8d:11:9b:76:e6:61:
                    a5:97:de:8d:e4:72:4c:65:4b:1b:21:6f:9e:a6:3b:
                    52:cc:f6:1d:6a:4c:c4:78:55:7e:6d:f4:07:9e:b1:
                    2f:2f:d7:83:54:1d:e8:45:c4:a7:93:d7:ee:f7:0d:
                    95:16:3e:fd:f7:36:39:1a:b7:01:41:11:2e:21:d0:
                    e2:c5:b1:38:7b:d1:fe:50:6c:d0:c2:bd:b9:3f:f5:
                    82:f9:db:23:3d:17:6b:87:2e:18:f9:f1:8d:d2:08:
                    a2:43:38:8f:29:77:45:5d:2f:20:0e:d6:e7:ef:2b:
                    a5:34:01:4b:3c:98:21:63:c7:3e:f7:8b:9f:1a:4b:
                    a1:d4:f6:f8:34:de:0b:5d:7b:22:e2:da:eb:a2:5b:
                    be:7d:fc:6e:f0:e0:99:2e:cd:90:88:65:77:43:e7:
                    f7:ca:15:dc:74:8d:50:d8:4a:ce:6b:2f:f2:fb:1f:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:96:3F:FE:72:02:66:E7:B6:58:E7:35:52:12:A2:52:5A:07:9D:A6
            X509v3 Authority Key Identifier:
                keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a343030303a3a2f33342d3334203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c80:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:11:4b:3c:5b:6c:9b:59:8f:51:e8:e7:f4:3b:d0:37:33:
         e9:56:09:a2:2c:13:7c:9c:3b:03:65:24:e5:66:39:3b:a1:56:
         18:ca:7c:6d:82:e9:a1:f7:01:b8:8c:16:98:0a:cb:5e:00:f9:
         8d:b9:b4:a7:c5:34:33:a7:3f:9f:ae:ec:d3:f2:9e:2e:92:d3:
         4f:eb:cd:69:7a:c1:71:51:c7:41:60:ba:e5:9e:23:c9:e6:34:
         d3:2d:95:e8:dd:af:de:a5:2a:f1:d6:35:18:66:fb:34:c8:22:
         97:43:f7:a5:6c:3c:bc:4c:42:8e:f7:55:a7:e9:24:eb:79:31:
         0f:83:c1:5b:34:a9:3e:b5:5c:52:ff:be:2e:e5:2f:fc:53:27:
         26:9b:01:94:55:fd:bd:63:65:0f:a6:fc:f1:34:de:fe:f0:15:
         95:11:66:3e:6e:67:33:6d:ea:c3:a1:1b:b2:e2:5d:f3:71:0e:
         4b:1d:fc:52:06:40:fa:6b:70:47:4a:aa:ed:f8:d5:88:53:d1:
         05:7f:6f:e0:a9:fa:bf:68:f9:a7:b4:ac:c8:95:05:d5:2a:58:
         d5:82:4f:fc:ce:30:25:83:73:41:bd:2b:16:8a:a1:7f:b4:35:
         60:2d:35:d2:d3:6f:98:3e:8d:25:72:54:14:40:ae:7f:5d:67:
         14:2d:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 04:15:11 2024 by rpki-client on console-ams.rpki-client.org