Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33322d3438203d3e20323638323335.roa
File:                     323830343a346530383a3a2f33322d3438203d3e20323638323335.roa (raw, json)
Hash identifier:          hL+Lgr6Al5KM/BT5sFxF/u3gNE5aWrZeSl4fGpl2t1s=
Subject key identifier:   D7:ED:E1:B9:93:7C:F5:CD:7D:50:B7:3F:2E:C4:57:45:AB:E4:C2:C3
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       20B52A6B4974A49CCBF8CCE4308E9C89261EED10
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33322d3438203d3e20323638323335.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     268235
IP address blocks:        2804:4e08::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 03 Apr 2025 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b5:2a:6b:49:74:a4:9c:cb:f8:cc:e4:30:8e:9c:89:26:1e:ed:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:37:45:68:f6:68:08:4a:c2:1d:ca:68:98:
                    63:89:6b:b1:34:44:65:f7:3e:43:70:6d:7e:a0:44:
                    f1:58:55:c5:ed:37:82:0e:b7:4c:9f:19:ff:81:9c:
                    83:9c:f2:b6:05:91:80:fd:c8:43:1a:af:dc:de:21:
                    ad:a7:0f:75:97:1a:c1:54:c8:89:a6:2a:df:56:cd:
                    64:33:2f:9c:da:26:f1:79:ed:df:be:b8:d5:8f:57:
                    3d:b9:35:5f:1d:39:c7:6a:2c:dc:6a:d0:e8:c9:30:
                    4c:1a:f2:60:ed:e8:43:0a:e9:73:65:ea:b9:f5:61:
                    f7:b7:27:66:6b:25:82:3d:c0:73:fb:86:1e:ff:f7:
                    ec:84:71:8c:1d:db:d9:90:a5:38:b8:00:33:c5:1d:
                    30:ce:80:21:42:26:c5:2e:42:5e:e9:fa:e8:d5:44:
                    3b:34:6e:5b:e3:c1:44:c5:30:26:76:6e:9a:65:fa:
                    86:aa:a4:b7:b5:aa:be:80:4c:af:eb:d5:7c:e9:38:
                    19:ee:39:58:b6:64:1f:13:eb:ec:f2:3e:3c:57:37:
                    a4:78:7b:ae:59:ae:d2:3f:63:17:54:4b:07:fe:16:
                    9b:62:8d:7b:9a:3c:af:62:12:cd:60:54:84:6c:32:
                    5b:bc:b6:97:22:15:33:9e:86:7c:c0:18:2b:55:37:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:ED:E1:B9:93:7C:F5:CD:7D:50:B7:3F:2E:C4:57:45:AB:E4:C2:C3
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33322d3438203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:01:e7:d5:20:2d:59:86:5b:2d:24:08:39:a1:7e:36:2c:
         3a:2e:1c:9b:c3:c1:ad:b3:a6:92:d9:73:b2:cf:f3:95:e2:1c:
         f7:a0:5c:d3:13:cb:25:44:52:d8:84:e0:a9:40:b0:ff:51:e0:
         13:91:04:a7:b8:ef:e4:1d:a6:c1:20:a5:b0:50:20:63:8d:5f:
         51:58:86:6a:61:74:4e:74:6e:bc:d1:61:3b:b8:31:56:0a:f9:
         58:f4:52:3d:ee:40:2e:55:b7:af:7d:dd:27:63:33:63:7f:fd:
         3b:a4:7a:1a:53:ac:17:ea:e7:e5:45:15:1c:33:51:b9:33:2b:
         4b:00:42:f2:d1:9a:f6:a2:a7:8a:27:0c:45:f9:13:f6:3c:c7:
         89:2e:66:dd:36:59:eb:3e:dd:80:44:c8:1e:4e:4b:f7:af:bb:
         94:35:f6:a1:88:2d:a3:98:94:f1:2f:dd:ed:ef:0c:7b:e9:d3:
         21:ef:05:96:7b:53:59:c6:af:5d:b1:69:0b:e6:d8:e6:0d:74:
         4b:01:24:7d:dc:ec:ed:05:2f:72:86:85:06:a3:bc:9a:d9:70:
         c9:01:c1:b0:72:62:44:16:59:6c:32:cc:98:bb:02:1a:1c:26:
         16:35:82:f1:e3:d1:da:f2:39:7d:2c:cf:a3:87:37:33:a0:33:
         dc:c6:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 16:40:22 2024 by rpki-client on console-ams.rpki-client.org