Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa
File:                     323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa (raw, json)
Hash identifier:          4/wn7HkPO094EGp4MyUZNbMUifVrcGltA8XKJ9gkh/k=
Subject key identifier:   C0:5C:FD:16:5E:6F:97:B4:D8:3B:BF:55:4E:0D:D7:A4:DC:66:36:81
Certificate issuer:       /CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
Certificate serial:       6B053539F899BA1C03649C776587771350223BF7
Authority key identifier: FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa
Signing time:             Sat 16 Nov 2024 14:09:39 +0000
ROA not before:           Sat 16 Nov 2024 14:04:39 +0000
ROA not after:            Sat 15 Nov 2025 14:09:39 +0000
asID:                     266471
IP address blocks:        2804:3858:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 20:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:05:35:39:f8:99:ba:1c:03:64:9c:77:65:87:77:13:50:22:3b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
        Validity
            Not Before: Nov 16 14:04:39 2024 GMT
            Not After : Nov 15 14:09:39 2025 GMT
        Subject: CN=C05CFD165E6F97B4D83BBF554E0DD7A4DC663681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:60:75:fe:26:fe:28:85:82:a2:bd:23:79:7d:
                    ea:82:72:ee:e2:f5:67:29:d3:8c:d0:01:77:71:cc:
                    1b:23:01:d3:4c:e2:3c:c7:b2:20:50:47:ba:3a:49:
                    99:a1:d6:0a:2f:31:da:48:a0:fa:e5:af:07:f2:8e:
                    1a:b7:cf:0d:16:72:69:a1:6e:05:98:e1:1a:a6:e3:
                    e1:db:72:b5:1d:8d:7e:84:d8:2c:df:f7:df:8d:6b:
                    90:19:31:aa:da:27:ff:b2:40:2a:f9:2f:21:9e:eb:
                    ba:f1:49:de:72:38:dc:c6:2c:6f:12:d6:3f:63:22:
                    a3:96:cb:95:3b:6b:46:b2:77:a2:7e:c6:d2:a5:00:
                    2a:0e:26:88:3c:0b:10:f7:df:8e:63:14:79:b1:d4:
                    72:db:e7:9f:7c:52:b0:17:26:74:75:d9:c6:02:5c:
                    a5:9d:3b:6a:cf:32:5e:94:de:a4:75:00:be:14:76:
                    73:0b:4f:93:95:33:13:ba:5b:a4:0c:14:20:8e:af:
                    d9:bf:61:f0:1f:3e:7b:f2:f9:af:cc:09:27:43:44:
                    39:a2:01:b2:92:bd:b8:1c:cc:e9:76:89:56:51:64:
                    16:cd:48:61:d0:01:e0:31:eb:e4:7f:ba:20:96:42:
                    74:60:fe:6b:41:ea:da:9c:39:55:cf:07:69:67:da:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5C:FD:16:5E:6F:97:B4:D8:3B:BF:55:4E:0D:D7:A4:DC:66:36:81
            X509v3 Authority Key Identifier:
                keyid:FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:17:c3:25:93:9a:7f:82:9e:da:ac:33:8c:3b:c2:78:d5:
         c4:92:c7:f8:c3:39:e9:da:ec:af:02:7e:ed:48:fa:2a:d3:f6:
         33:12:00:bc:56:4b:6c:73:67:2a:af:c2:ea:dc:fc:4a:4c:0c:
         8d:59:52:76:ea:8c:2f:f2:1c:77:a5:cb:db:2d:12:2d:3e:7a:
         bc:7b:22:8b:0a:fe:ad:cf:f6:2a:28:e6:7e:95:30:1f:ed:7b:
         23:65:ff:7b:5c:75:c3:22:f4:14:05:30:fa:9c:b1:1f:ee:8d:
         42:39:9a:31:9d:79:56:bb:7a:9c:1e:36:6e:f8:8c:08:36:d2:
         ca:fc:a1:54:00:5e:75:51:ad:b4:f4:cc:61:09:af:36:8f:3b:
         73:9f:88:30:34:a2:24:35:f3:58:ee:e8:38:db:b2:8b:bb:59:
         4e:6e:91:4c:db:b1:de:1f:8e:65:ba:b4:fe:9a:53:2d:f4:65:
         41:dc:2b:09:7c:00:0e:0d:5e:e2:fa:72:5d:47:58:d4:b0:99:
         18:09:c8:4a:54:5d:73:7b:43:7f:e1:d1:c6:76:cd:d5:fb:87:
         3c:e0:a7:37:b9:f8:ab:d5:5f:10:89:04:ae:44:0f:e5:1f:ce:
         d4:3c:86:81:1a:d3:2b:57:5c:15:51:19:6f:47:98:f9:eb:a4:
         54:4e:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 23:26:37 2024 by rpki-client on console-fra.rpki-client.org