Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a323430303a3a2f34302d3430203d3e20323637303736.roa
File:                     323830343a343763383a323430303a3a2f34302d3430203d3e20323637303736.roa (raw, json)
Hash identifier:          o0ncR+hm1Fua5EpRMnLK0oo3BMTBwvRwiKrcKfoxUrI=
Subject key identifier:   CD:BE:30:00:05:B5:47:9E:74:FF:D2:38:8F:C6:15:66:82:49:50:7D
Certificate issuer:       /CN=1CC741EDBBA21BD03B4790A7C9503F54CA161D7D
Certificate serial:       4E938F678263A0ADE1D3D9B2A85932D330667FF3
Authority key identifier: 1C:C7:41:ED:BB:A2:1B:D0:3B:47:90:A7:C9:50:3F:54:CA:16:1D:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a323430303a3a2f34302d3430203d3e20323637303736.roa
Signing time:             Thu 04 Apr 2024 21:09:43 +0000
ROA not before:           Thu 04 Apr 2024 21:04:43 +0000
ROA not after:            Thu 03 Apr 2025 21:09:43 +0000
asID:                     267076
IP address blocks:        2804:47c8:2400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 13:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:93:8f:67:82:63:a0:ad:e1:d3:d9:b2:a8:59:32:d3:30:66:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC741EDBBA21BD03B4790A7C9503F54CA161D7D
        Validity
            Not Before: Apr  4 21:04:43 2024 GMT
            Not After : Apr  3 21:09:43 2025 GMT
        Subject: CN=CDBE300005B5479E74FFD2388FC615668249507D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:ab:85:64:9d:1a:8c:70:90:b3:28:8c:62:
                    90:fe:4e:8e:a4:8f:e7:bf:6b:8a:bd:eb:15:34:29:
                    80:b5:d0:62:2e:f8:9c:44:05:7b:a8:30:b5:18:37:
                    a8:73:24:b3:1e:95:82:cb:f1:d3:b3:0e:2f:81:05:
                    9d:c2:d0:03:d1:ee:5c:d4:c0:27:98:ae:5c:8b:ef:
                    a6:09:f0:7e:e1:f3:36:60:a4:94:c0:05:b7:60:64:
                    45:e3:00:ce:0e:55:18:f3:ef:e3:15:60:97:46:e8:
                    cf:55:79:52:30:f7:1a:db:bc:97:97:bd:8d:81:6d:
                    fa:e0:39:ad:1b:1d:79:de:0b:74:e7:75:4b:44:0d:
                    1f:8e:7d:fe:c3:c1:8a:7f:e5:4f:bf:f4:a5:85:9a:
                    d4:3e:63:13:91:d0:a8:ac:f4:34:6d:6f:10:5d:61:
                    f2:8f:72:65:1a:3c:13:a2:02:da:e4:b0:27:5e:91:
                    d2:ba:9a:e7:02:e4:71:f1:ae:df:d7:fc:02:89:ca:
                    02:a5:d4:99:28:07:33:a8:ba:6d:c8:ed:94:ff:a7:
                    2b:23:16:69:7a:79:62:bc:c4:ef:c9:d4:14:9b:d3:
                    1c:98:a3:be:4d:39:06:42:eb:d2:8b:8b:b5:b0:10:
                    b5:7a:0c:b1:71:9f:a5:1a:7c:57:55:bc:db:ca:57:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BE:30:00:05:B5:47:9E:74:FF:D2:38:8F:C6:15:66:82:49:50:7D
            X509v3 Authority Key Identifier:
                keyid:1C:C7:41:ED:BB:A2:1B:D0:3B:47:90:A7:C9:50:3F:54:CA:16:1D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a323430303a3a2f34302d3430203d3e20323637303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c8:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         d3:95:42:04:0a:e1:aa:08:a0:98:29:1a:60:f9:ea:bb:28:79:
         e8:14:8b:32:e6:ca:d1:61:ef:93:b8:42:57:bc:f8:24:0c:d9:
         5f:81:86:64:c2:07:74:81:d3:dc:37:c5:8a:2b:f7:cf:0c:0b:
         4b:71:ce:ad:2c:ae:6c:0b:35:59:f7:d2:47:4f:08:16:ff:4c:
         cd:4c:62:10:d8:24:4b:ca:42:78:79:de:10:73:6c:c6:cf:38:
         43:59:ea:11:56:6d:a2:55:c2:b0:02:3a:13:a7:21:d5:13:5b:
         c3:f2:98:84:69:7f:03:62:af:b2:5b:7e:14:9d:b4:16:4c:e5:
         7e:f6:01:73:17:60:93:9d:aa:5d:e8:65:84:52:54:4b:1d:eb:
         99:f6:b7:12:10:e4:8f:6a:ae:8c:82:49:dd:5c:98:79:d0:67:
         70:36:a5:8c:a5:9f:a9:1e:60:15:47:8c:a1:b8:ee:c2:85:81:
         54:4c:57:d1:3f:36:01:bc:bd:3f:b0:74:34:60:3a:9e:94:be:
         3d:c5:1c:3c:4c:c1:74:b0:47:ca:29:8a:4d:2d:3f:94:a7:c9:
         5d:76:d8:20:47:5f:ea:0f:6a:2b:47:21:db:30:02:93:02:0b:
         a9:90:c3:75:8e:1e:84:04:c3:48:b1:3a:34:41:db:d7:f2:8a:
         4e:1b:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 17:23:41 2024 by rpki-client on console-ams.rpki-client.org