Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3336203d3e203631363634.roa
File:                     323830343a316339383a3a2f33322d3336203d3e203631363634.roa (raw, json)
Hash identifier:          63GKTHTFlML2Y39DoD+MV+wBV5/UHuV+aZpUetIHyrM=
Subject key identifier:   01:14:EC:B9:65:BC:0C:E0:D7:F2:08:9B:A6:E9:B2:95:E7:B0:FC:C5
Certificate issuer:       /CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
Certificate serial:       467E0A29E734B3937C4A26899BC85CD10C24DC62
Authority key identifier: A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3336203d3e203631363634.roa
Signing time:             Thu 04 Apr 2024 07:28:36 +0000
ROA not before:           Thu 04 Apr 2024 07:23:36 +0000
ROA not after:            Thu 03 Apr 2025 07:28:36 +0000
asID:                     61664
IP address blocks:        2804:1c98::/32 maxlen: 36

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 12:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7e:0a:29:e7:34:b3:93:7c:4a:26:89:9b:c8:5c:d1:0c:24:dc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
        Validity
            Not Before: Apr  4 07:23:36 2024 GMT
            Not After : Apr  3 07:28:36 2025 GMT
        Subject: CN=0114ECB965BC0CE0D7F2089BA6E9B295E7B0FCC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:6d:2e:de:f8:48:86:da:ec:64:09:66:ba:
                    ec:1d:58:19:f8:3b:a5:ea:93:a5:7a:8a:8f:fd:43:
                    06:69:f1:27:b1:46:8b:5e:d5:40:5c:14:8e:65:33:
                    1a:75:b1:aa:e5:fa:fd:af:22:f3:e0:3f:a6:3a:2d:
                    4f:1a:b4:7a:06:c6:ee:42:7b:43:15:b7:5a:1f:f2:
                    ea:3b:99:d1:cf:da:81:35:dd:7c:b6:f7:de:69:27:
                    be:c8:64:68:bc:59:71:42:b6:9c:d5:36:20:17:1b:
                    84:aa:62:c9:f3:c0:ce:d0:f5:a4:98:a4:35:da:0e:
                    a8:0d:8f:fd:15:18:d5:a9:e1:cf:b2:bd:38:cd:a4:
                    46:a1:cd:fc:77:7a:8d:93:3e:ef:eb:ea:e8:12:5f:
                    50:5d:6d:09:e6:6b:94:80:e8:f8:18:f1:3e:40:75:
                    83:1b:4b:de:eb:22:22:bc:8f:39:db:e9:1b:d4:eb:
                    20:4d:33:d8:ba:76:f3:60:d9:d8:f4:0f:e2:d8:ba:
                    52:61:ed:30:22:00:6a:6f:89:99:4b:98:f5:85:2c:
                    a7:ae:72:cf:46:5b:eb:1f:16:3a:ec:ab:d8:1e:20:
                    df:1e:95:36:ea:e9:cf:a0:e4:cd:e2:1d:8e:ed:d0:
                    dd:7d:9e:37:d6:09:65:49:38:bf:e0:3f:d2:a2:bf:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:14:EC:B9:65:BC:0C:E0:D7:F2:08:9B:A6:E9:B2:95:E7:B0:FC:C5
            X509v3 Authority Key Identifier:
                keyid:A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3336203d3e203631363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c98::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:fe:e4:62:e6:4c:61:3f:42:ca:ac:6f:2e:4e:ee:7e:f3:9a:
         91:8a:31:9b:7b:3a:3a:1a:f5:28:a1:73:90:8a:f2:4d:0c:f7:
         31:95:4d:7a:d5:36:f5:b8:8b:4a:a5:2d:df:a8:7a:f1:55:93:
         70:1f:18:4a:91:65:84:92:fb:97:e2:d0:87:1c:a9:50:b2:51:
         59:23:dd:00:01:76:10:19:0c:0e:42:2b:86:98:e4:70:3b:4b:
         69:b2:3f:96:d1:bc:2b:d2:f1:7e:f3:5e:18:5c:b0:5c:d0:05:
         6d:96:78:83:d0:02:17:a3:71:9b:70:f8:1c:0b:44:43:33:5c:
         5e:71:e4:7c:a0:3c:eb:cc:71:68:9c:df:e3:8e:36:97:24:12:
         df:e1:e4:7d:c2:a5:ff:5b:70:a0:bb:1e:ac:be:6c:b0:c6:71:
         87:1f:62:76:81:26:83:4a:69:d9:99:2b:66:60:e8:c4:9a:de:
         bb:fe:bc:17:4a:34:b9:f4:3e:7e:ce:d9:44:52:2a:7f:37:36:
         10:68:d9:ba:04:12:ad:09:f1:49:85:ad:52:01:17:0c:18:70:
         c9:26:62:76:10:76:14:9b:20:ef:08:b7:15:3a:d2:e3:67:94:
         07:fa:9d:9d:f1:4f:ff:b4:04:32:92:ac:09:6f:1b:ce:4e:8d:
         bf:d1:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 17:32:36 2024 by rpki-client on console-ams.rpki-client.org