Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a383030303a3a2f33332d3333203d3e20323730343633.roa
File:                     323830343a366335633a383030303a3a2f33332d3333203d3e20323730343633.roa (raw, json)
Hash identifier:          SJSTf/oAr/PhnQ/L7HlhluTLUbaeQ9Ti7gqbEHd/BIQ=
Subject key identifier:   0B:FB:31:57:B1:FD:0E:F4:62:41:2C:F3:42:0F:33:D0:2F:C4:ED:EF
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       2407CF91E983F59878FCD2518C0C5F3DB8514464
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a383030303a3a2f33332d3333203d3e20323730343633.roa
Signing time:             Thu 18 Apr 2024 13:43:00 +0000
ROA not before:           Thu 18 Apr 2024 13:38:00 +0000
ROA not after:            Thu 17 Apr 2025 13:43:00 +0000
asID:                     270463
IP address blocks:        2804:6c5c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:cf:91:e9:83:f5:98:78:fc:d2:51:8c:0c:5f:3d:b8:51:44:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: Apr 18 13:38:00 2024 GMT
            Not After : Apr 17 13:43:00 2025 GMT
        Subject: CN=0BFB3157B1FD0EF462412CF3420F33D02FC4EDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:24:23:ac:45:07:de:14:a3:6b:c7:ce:9c:
                    6e:a7:7f:2d:a5:02:14:93:f3:ad:9b:ed:63:32:ed:
                    07:ec:f1:a6:dd:53:ac:12:92:d9:b0:a1:ab:9d:19:
                    81:84:70:6c:d7:bf:8a:c6:e9:f8:58:d7:74:5b:9c:
                    64:d3:e3:70:1a:5d:e5:7f:aa:35:c6:15:51:49:d9:
                    2b:2c:ee:f4:db:9b:83:80:76:54:f8:2e:2e:d5:a4:
                    5c:ae:f8:d3:20:60:48:2e:0f:9b:45:9a:6c:aa:2a:
                    6d:2c:56:a3:06:0b:2c:fe:ed:ac:64:14:15:96:da:
                    fc:0d:0c:b5:71:b0:a9:ad:c8:40:0a:37:53:e0:20:
                    15:1a:cd:58:f8:a7:d7:0f:6d:a1:c4:c8:71:8c:3e:
                    f4:69:73:ad:69:ab:97:eb:e8:e0:91:f4:9c:55:77:
                    4a:ed:5d:78:fc:a3:9f:2e:9b:24:f9:fa:da:9d:6f:
                    1a:94:93:04:e7:f0:2a:61:1d:fb:e1:a6:8e:68:e1:
                    c2:ff:5a:7e:8d:25:f0:65:d1:68:d0:9e:bf:30:9e:
                    b5:6a:c7:54:62:9d:4d:73:03:06:23:79:9a:7d:8b:
                    d6:cb:0b:33:a3:6c:9f:5a:29:a2:73:41:e1:14:36:
                    8c:eb:7b:2d:21:57:6a:70:44:61:73:96:d4:be:c7:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FB:31:57:B1:FD:0E:F4:62:41:2C:F3:42:0F:33:D0:2F:C4:ED:EF
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a383030303a3a2f33332d3333203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:75:24:b1:cd:47:f0:25:c3:13:2e:c4:84:e2:20:79:4b:
         ad:0f:e8:2d:29:a8:76:fb:27:00:c1:13:a2:62:9f:a1:f5:a2:
         94:65:ae:68:35:45:76:71:e4:71:f8:ac:b2:66:e1:54:77:1b:
         93:a1:89:92:5f:77:1e:6c:29:0e:57:f8:40:dc:fc:a5:e9:fa:
         59:f6:7d:51:f9:ab:66:52:88:11:18:83:fb:d5:51:58:7b:29:
         a2:6b:25:b9:49:89:ac:3e:74:da:7b:49:22:a6:3b:f9:54:b2:
         12:08:5f:a9:41:1d:76:88:b4:a6:2e:cc:c3:3d:ed:06:a2:89:
         d0:4e:78:18:76:e8:8a:a1:7c:4f:1b:d7:a1:7e:8f:d7:20:42:
         95:f6:1d:d2:75:7a:f4:2d:c8:b4:c2:88:ea:5a:4f:64:9d:05:
         5c:0b:3f:0b:e1:15:6d:41:59:16:81:a8:0b:79:ec:c8:d0:40:
         c7:5a:aa:e9:60:cf:80:6e:28:db:4c:e4:3a:ae:d5:5a:ab:d4:
         b4:20:94:04:f2:15:f0:ea:bb:73:3f:6a:64:36:57:48:62:d3:
         4a:15:9f:5c:78:23:4a:dc:ba:84:45:59:44:8f:5e:bd:33:03:
         12:3b:59:8d:ff:8f:30:64:b7:99:7c:84:d7:45:6e:0a:14:fe:
         4f:29:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org