Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/323830343a313539303a3a2f33322d3333203d3e20323633333935.roa
File:                     323830343a313539303a3a2f33322d3333203d3e20323633333935.roa (raw, json)
Hash identifier:          O045s2IQXOorLYmioDWT83OJAZFk3/Pn5cHZ/lq/azg=
Subject key identifier:   85:DA:26:BD:4D:94:E8:89:6B:F4:D1:CC:C4:9F:05:81:43:4E:FF:68
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       6FA17A31F662D3D5155180F2DCF0CE7EB466A02E
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/323830343a313539303a3a2f33322d3333203d3e20323633333935.roa
Signing time:             Thu 04 Apr 2024 21:10:42 +0000
ROA not before:           Thu 04 Apr 2024 21:05:42 +0000
ROA not after:            Thu 03 Apr 2025 21:10:42 +0000
asID:                     263395
IP address blocks:        2804:1590::/32 maxlen: 33

Validation:               Failed, certificate revoked on Fri 24 May 2024 06:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a1:7a:31:f6:62:d3:d5:15:51:80:f2:dc:f0:ce:7e:b4:66:a0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Apr  4 21:05:42 2024 GMT
            Not After : Apr  3 21:10:42 2025 GMT
        Subject: CN=85DA26BD4D94E8896BF4D1CCC49F0581434EFF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:12:5b:e2:c1:6c:f6:3a:d4:0f:b1:bf:f9:
                    f8:ae:ef:13:a6:bb:b4:ea:c7:3f:0a:1f:8b:64:73:
                    81:a1:7a:dd:8f:19:1b:9b:2a:05:57:99:95:d1:e4:
                    8e:49:5f:4c:06:d6:ad:67:8b:e8:54:fd:65:8c:31:
                    53:ac:13:b1:54:57:da:b3:85:cb:f9:aa:03:02:5a:
                    ba:0d:cd:46:34:98:bf:5c:ce:bb:28:34:22:1b:c3:
                    8d:51:44:bc:0f:5a:63:8e:06:36:a1:ac:f8:56:9c:
                    c2:4b:98:f2:6d:94:ea:36:85:0a:64:e7:6b:82:54:
                    1c:0a:d8:b4:b3:a5:31:aa:81:48:78:4e:e2:97:6a:
                    3a:e9:0a:66:5a:ba:73:3d:d5:98:f5:d0:28:2f:16:
                    4d:6f:a9:19:bd:f8:04:8d:18:79:ad:d4:2b:92:b5:
                    6c:33:0e:fd:9a:ba:24:e2:d3:4a:8e:dc:e1:b7:8a:
                    e5:fb:6e:36:d8:c3:31:eb:85:d1:59:31:f7:57:8c:
                    1a:b9:99:9b:39:ac:ab:0c:d0:42:ac:5c:da:e8:33:
                    bf:d9:95:28:f3:4b:99:15:89:10:0f:53:41:20:3a:
                    f1:1f:37:75:fd:86:c7:f4:9c:08:f5:16:55:76:ae:
                    82:39:84:ed:a5:65:d4:06:b8:48:97:b0:3d:3c:86:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:26:BD:4D:94:E8:89:6B:F4:D1:CC:C4:9F:05:81:43:4E:FF:68
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/323830343a313539303a3a2f33322d3333203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1590::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:da:38:6e:7b:35:b1:a1:2f:6e:f1:5a:8a:fd:46:62:f2:ed:
         35:6e:91:83:18:18:2a:8a:da:05:a3:f2:94:0e:b4:07:81:ba:
         6f:d5:14:c3:df:50:b3:7e:f1:35:89:75:0b:6d:3e:d0:bf:01:
         88:30:06:f4:a8:ab:00:70:5f:95:fb:41:88:ee:ed:7a:28:70:
         3c:46:06:ee:8a:00:9f:36:6e:bc:fa:4a:04:b4:41:f6:e9:07:
         75:72:16:55:c2:bb:aa:f8:64:0c:ca:a7:b5:b2:2f:a9:b4:b4:
         f3:5b:44:21:ef:b3:8f:7c:34:88:13:91:32:a5:fc:3a:c9:c9:
         94:f4:9f:1c:3b:87:b4:d1:c8:85:ab:11:d6:da:67:42:61:fe:
         a2:ca:70:82:13:b7:41:e4:0f:b4:a7:76:d7:56:d6:a8:20:f7:
         13:03:99:16:70:ef:63:e0:85:d0:6c:d8:58:e0:ed:4d:48:d4:
         e5:89:e3:f0:84:7b:73:aa:a5:85:6b:59:98:cd:c2:d2:a8:f7:
         f0:f5:35:35:20:60:65:b0:97:ee:fe:cf:52:89:69:da:d5:93:
         da:eb:22:98:dd:48:f4:28:28:9b:56:23:04:ac:04:56:75:f9:
         08:b0:e3:6e:52:6e:54:b3:07:01:25:bf:c2:6a:cd:69:1e:81:
         3e:63:6b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org