Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3630303a3a2f34382d3438203d3e20323732373130.roa
File:                     323830343a383737343a3630303a3a2f34382d3438203d3e20323732373130.roa (raw, json)
Hash identifier:          uF8lIvKW9F5d11hYbdH0ZADOxBsH+FO4Y7W0PBv77aw=
Subject key identifier:   A0:17:40:15:6B:1F:99:6F:7F:BF:12:4D:41:BC:12:1E:8F:4D:6F:99
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       3ACB5546D182C909C6DD8C5327BFD6056FFA522A
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3630303a3a2f34382d3438203d3e20323732373130.roa
Signing time:             Tue 17 Sep 2024 16:14:00 +0000
ROA not before:           Tue 17 Sep 2024 16:09:00 +0000
ROA not after:            Tue 16 Sep 2025 16:14:00 +0000
asID:                     272710
IP address blocks:        2804:8774:600::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 21:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cb:55:46:d1:82:c9:09:c6:dd:8c:53:27:bf:d6:05:6f:fa:52:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Sep 17 16:09:00 2024 GMT
            Not After : Sep 16 16:14:00 2025 GMT
        Subject: CN=A01740156B1F996F7FBF124D41BC121E8F4D6F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:19:1f:ff:86:d3:97:07:1b:8d:02:1c:ad:f9:
                    d3:0c:ad:28:ed:46:34:e4:28:4b:01:c3:91:c3:86:
                    45:47:e9:50:c7:81:cc:8e:86:79:e8:8b:d4:a3:da:
                    52:a7:03:e2:a7:d8:4d:e7:74:cc:51:a5:fd:ff:eb:
                    21:ba:32:d5:24:68:39:fa:0f:ea:53:55:18:59:c7:
                    ff:00:1b:51:b5:45:24:a7:b3:11:f4:da:8b:bf:c8:
                    0a:1e:ac:78:02:5c:76:2a:10:9c:39:2c:e9:23:0d:
                    cc:4f:8d:54:cb:86:d1:71:58:39:0d:f9:fa:24:26:
                    9d:48:79:f3:52:1c:8b:33:f1:37:81:bd:4b:84:ad:
                    47:24:71:29:e7:f0:0b:95:20:de:94:c0:9b:2b:94:
                    fc:78:88:4b:b8:8c:6a:b2:34:38:a7:39:6f:cd:64:
                    9a:6d:f9:fa:32:c8:a0:c7:76:fc:a1:87:cd:7d:fd:
                    bf:49:db:ee:ef:48:d3:3b:4a:22:a1:65:55:84:07:
                    26:51:92:f3:ec:20:05:34:b0:d9:0b:f9:fe:7a:30:
                    46:aa:23:20:8c:54:e6:96:91:ca:7e:78:9e:51:de:
                    fc:b0:53:6e:e2:9d:14:6a:16:44:b5:55:fd:5b:d6:
                    ec:12:ab:b4:7c:dc:ab:09:d2:5a:46:7b:30:7e:60:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:17:40:15:6B:1F:99:6F:7F:BF:12:4D:41:BC:12:1E:8F:4D:6F:99
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3630303a3a2f34382d3438203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:dd:67:b8:f3:75:34:7b:5d:8d:51:73:17:a0:06:da:78:
         ac:0b:4b:22:af:bf:a3:94:4c:20:89:04:38:b0:97:f7:a4:0f:
         98:ca:51:81:42:ee:50:37:b6:56:d9:03:73:56:4a:c5:55:cf:
         2c:f1:97:37:2f:9c:e0:62:b4:5c:ac:19:c6:eb:ff:af:75:fe:
         d0:89:17:f4:f2:44:c4:a4:26:95:73:79:4f:7a:b0:18:b4:1a:
         ac:f6:c6:2c:49:1a:77:d9:cb:e6:1b:94:65:a9:3a:ec:4b:05:
         81:d4:86:ef:ba:ec:96:86:e4:71:4c:ad:6f:b2:58:45:8f:d9:
         67:11:a5:13:3a:20:2f:41:8c:e8:08:c9:a8:1f:5c:68:2e:75:
         9c:c5:7b:56:6e:9b:f3:b6:26:cc:76:b3:9d:fa:9d:a0:9f:28:
         36:c6:47:18:64:a2:06:9c:30:17:85:2e:2e:8c:21:44:20:45:
         84:a0:12:c6:80:6e:dc:16:eb:a6:bd:da:9c:92:47:0b:4e:ed:
         04:26:b2:c4:a9:0d:b2:90:8b:9e:33:12:3f:38:f0:84:df:20:
         2e:2f:28:08:f5:c9:54:5c:36:76:9d:49:29:70:d8:62:4c:68:
         4f:3d:0a:58:53:87:d9:aa:89:a1:25:ad:76:dc:53:0e:8b:aa:
         d7:d8:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:46:23 2024 by rpki-client on console-ams.rpki-client.org