Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a633030303a3a2f33342d3334203d3e20323636303039.roa
File:                     323830343a343133303a633030303a3a2f33342d3334203d3e20323636303039.roa (raw, json)
Hash identifier:          OmFxCBfdP4nHy91g7XFkaLhjDFRTmQo6dK68PSGnPnE=
Subject key identifier:   CD:EF:13:00:B0:F5:3E:48:50:10:69:6D:83:91:A9:15:22:52:23:0F
Certificate issuer:       /CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
Certificate serial:       030DD2A9E883412CBFBC6CC95E780D9A409DC396
Authority key identifier: E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a633030303a3a2f33342d3334203d3e20323636303039.roa
Signing time:             Thu 04 Apr 2024 13:41:05 +0000
ROA not before:           Thu 04 Apr 2024 13:36:05 +0000
ROA not after:            Thu 03 Apr 2025 13:41:05 +0000
asID:                     266009
IP address blocks:        2804:4130:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 17:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0d:d2:a9:e8:83:41:2c:bf:bc:6c:c9:5e:78:0d:9a:40:9d:c3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
        Validity
            Not Before: Apr  4 13:36:05 2024 GMT
            Not After : Apr  3 13:41:05 2025 GMT
        Subject: CN=CDEF1300B0F53E485010696D8391A9152252230F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:db:8a:93:7e:8d:15:ad:78:23:db:a0:1a:
                    93:bb:cf:60:83:9c:bb:0c:2a:39:ad:90:ae:00:e9:
                    6f:42:52:a5:38:8c:2b:0e:55:4a:79:a5:44:16:0a:
                    5a:29:2b:60:fb:ba:c5:1c:3b:80:7f:18:5d:24:76:
                    02:0b:d0:63:e4:32:44:4c:67:cd:3f:fa:9c:af:07:
                    04:d3:71:8f:10:66:60:6f:a6:60:15:8f:09:91:8e:
                    27:ae:04:b9:bc:b5:bb:8a:bc:26:ce:76:68:d0:4b:
                    12:23:29:aa:3f:32:56:19:2e:21:3d:15:ba:1c:48:
                    ce:b3:ff:35:34:d3:f0:a7:d9:af:65:84:e7:9d:c8:
                    7b:38:f4:cc:e1:bc:d3:3b:fa:08:b4:c7:be:3c:c4:
                    48:f2:f7:40:cd:b8:ae:0b:4f:70:92:ba:f6:89:41:
                    c7:ee:58:03:d5:5b:03:d1:13:46:d1:11:8f:17:33:
                    06:44:c8:63:75:6a:ea:3c:f4:ac:f8:b8:e0:b4:88:
                    79:af:1d:63:06:bb:0f:1e:c0:07:9b:0d:eb:5c:2c:
                    93:32:11:0e:7e:4d:f4:5c:33:83:9b:62:26:76:4d:
                    08:fc:40:4a:fa:fe:bd:1d:bf:2a:ea:d1:8b:89:c0:
                    0e:7b:64:a5:0d:7f:79:35:ad:8d:c8:e0:aa:45:cc:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EF:13:00:B0:F5:3E:48:50:10:69:6D:83:91:A9:15:22:52:23:0F
            X509v3 Authority Key Identifier:
                keyid:E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a633030303a3a2f33342d3334203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4130:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:37:a3:67:98:05:87:7a:90:ee:4a:77:8d:25:e6:f8:22:e3:
         67:1c:f0:01:69:27:a7:fc:f3:1c:b5:5f:91:20:59:a5:4b:44:
         59:af:77:f9:52:69:9b:a5:2e:bb:67:cc:47:da:b2:34:33:0f:
         77:ec:1e:72:e3:f6:5b:35:64:ad:32:81:52:07:62:2c:82:74:
         90:60:41:f1:b5:89:b2:67:60:15:67:80:93:5b:51:69:f6:24:
         d9:c7:5c:e7:d5:82:a9:38:58:ff:b8:61:b4:b9:9f:f5:55:70:
         d3:18:e2:43:09:31:9e:0d:38:28:5b:bf:03:ce:7a:5c:b3:08:
         f5:b2:f3:82:25:06:97:13:5c:52:d2:e9:0d:25:b0:92:c3:df:
         4c:eb:41:5c:2e:9b:00:80:6a:81:26:77:d9:9c:a9:c8:fe:87:
         03:89:19:f2:5c:4e:70:eb:c3:10:8d:60:b7:14:28:25:e4:b0:
         ec:18:16:55:34:88:af:cd:1d:2b:5f:c5:ba:75:af:e5:e6:0c:
         6e:6b:a4:46:e3:14:68:b0:f4:0c:72:8a:9f:46:2f:21:a0:54:
         10:3a:8a:9b:b2:bd:5e:b8:71:db:bb:12:4b:fc:92:f2:39:16:
         47:2c:d0:9b:07:f6:19:ff:7d:e0:c8:1f:86:fc:af:df:4e:96:
         00:78:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 19:11:19 2024 by rpki-client on console-fra.rpki-client.org