Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa
File:                     323830343a333835383a3a2f33322d3332203d3e20323636343731.roa (raw, json)
Hash identifier:          lDuudz91XEYngeF+K+ewq7EizI1T94UgjIPKuxCwaps=
Subject key identifier:   E5:8D:C9:83:8D:41:0C:E7:EE:1E:D6:B8:40:2A:F8:8F:0E:95:AB:EE
Certificate issuer:       /CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
Certificate serial:       10D1D0CAD85F862AE0D298A2FCBDD6827F587E9F
Authority key identifier: FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa
Signing time:             Sat 16 Nov 2024 14:09:30 +0000
ROA not before:           Sat 16 Nov 2024 14:04:30 +0000
ROA not after:            Sat 15 Nov 2025 14:09:30 +0000
asID:                     266471
IP address blocks:        2804:3858::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 20:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d1:d0:ca:d8:5f:86:2a:e0:d2:98:a2:fc:bd:d6:82:7f:58:7e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
        Validity
            Not Before: Nov 16 14:04:30 2024 GMT
            Not After : Nov 15 14:09:30 2025 GMT
        Subject: CN=E58DC9838D410CE7EE1ED6B8402AF88F0E95ABEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:f7:34:00:7d:6e:e1:9b:ce:b9:d2:05:ac:
                    08:02:2a:a1:af:d3:3d:0b:b3:38:40:6c:4c:70:64:
                    33:be:63:47:fc:68:00:37:0c:bd:3a:8f:6e:5a:df:
                    09:d8:08:93:47:59:66:de:2a:0f:08:5b:25:6d:e9:
                    8f:d1:1d:a2:f9:cf:b8:9b:62:70:66:b1:df:81:41:
                    59:d1:c2:65:e3:28:dc:6f:33:23:c0:bd:84:14:d2:
                    8a:1a:0d:4b:3a:1c:14:5b:30:05:80:27:f3:d2:30:
                    06:7a:3b:95:b3:8c:ea:82:4a:a0:94:ce:7b:a3:d1:
                    6e:e2:4c:89:31:9d:d0:22:f3:74:34:91:37:0a:fe:
                    d4:b3:ae:91:77:37:a5:0f:c3:0b:20:c1:a1:07:cc:
                    73:16:fa:48:dc:0c:40:fb:d5:6a:f0:57:a7:0f:81:
                    22:0c:5a:36:be:6c:44:f0:6b:57:d7:0f:c4:c7:97:
                    82:d0:f6:2b:15:a3:85:9d:e7:ea:c7:04:1b:6d:0d:
                    5f:72:23:f4:07:97:82:d9:4b:b9:1a:98:67:bd:a4:
                    03:aa:10:58:0e:15:65:ff:19:eb:da:eb:f5:b9:44:
                    52:dd:0e:ac:59:e4:b0:bd:09:b1:43:54:e0:74:d4:
                    a0:44:49:a5:5c:fc:05:6d:ab:83:6e:65:65:ca:16:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8D:C9:83:8D:41:0C:E7:EE:1E:D6:B8:40:2A:F8:8F:0E:95:AB:EE
            X509v3 Authority Key Identifier:
                keyid:FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:b0:25:0d:1b:07:cc:92:d1:2d:73:dc:dc:23:07:51:94:fb:
         d2:a1:f5:2f:79:9a:3a:a3:c6:d5:72:31:97:9e:eb:db:2e:39:
         b8:65:67:1f:a0:55:92:61:ce:cf:a8:36:af:72:99:57:cc:26:
         22:78:b5:ac:72:48:22:fa:99:81:55:9c:f5:a0:72:78:d4:d8:
         1f:af:4d:c4:fc:bc:b9:bb:dd:1b:7e:d4:13:6e:4e:1d:ef:b7:
         5a:cd:77:ad:8b:b4:0e:75:0d:0a:69:c0:2c:38:c2:59:49:42:
         ef:82:d2:f9:fc:ae:4e:40:99:7b:31:c6:a3:3e:2f:2a:f4:2a:
         07:59:b3:3a:e0:3a:16:b2:21:2b:47:65:62:3c:01:37:f2:e9:
         d5:93:77:c0:d1:4f:4c:d6:bc:1d:15:70:2b:d9:08:b4:e9:03:
         f7:16:34:c7:cb:0a:2b:07:6d:de:5c:ce:f9:1b:bb:65:28:7d:
         70:de:01:7d:35:97:de:6e:a0:48:2c:39:20:76:a8:d3:8e:58:
         d1:57:7b:c3:94:af:ca:2e:74:cb:4b:dd:40:8e:22:ab:30:b1:
         0e:9c:ec:3d:14:ee:40:1b:2f:1a:73:38:dd:66:92:78:42:ea:
         ca:29:ac:82:74:d8:b3:a4:7c:a0:29:12:23:ec:41:87:ca:c3:
         b9:4f:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 00:19:23 2024 by rpki-client on console-ams.rpki-client.org