Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33342d3334203d3e20323637393633.roa
File:                     323830343a353565343a3a2f33342d3334203d3e20323637393633.roa (raw, json)
Hash identifier:          vwtA/L6v2HDFEbufgieqDBVjiMOrZ/5HwRquiPu2S30=
Subject key identifier:   32:0C:45:2F:4A:55:BF:93:63:0C:4B:07:D6:06:DB:FF:8A:38:70:2A
Certificate issuer:       /CN=20635662A8A5867029EC359E96E65DF88B91AA83
Certificate serial:       6ABB53A90DFB2B752B9950285715A9C7B1836C22
Authority key identifier: 20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33342d3334203d3e20323637393633.roa
Signing time:             Thu 15 Aug 2024 16:45:00 +0000
ROA not before:           Thu 15 Aug 2024 16:40:00 +0000
ROA not after:            Thu 14 Aug 2025 16:45:00 +0000
asID:                     267963
IP address blocks:        2804:55e4::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 17:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bb:53:a9:0d:fb:2b:75:2b:99:50:28:57:15:a9:c7:b1:83:6c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20635662A8A5867029EC359E96E65DF88B91AA83
        Validity
            Not Before: Aug 15 16:40:00 2024 GMT
            Not After : Aug 14 16:45:00 2025 GMT
        Subject: CN=320C452F4A55BF93630C4B07D606DBFF8A38702A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:1b:9d:c3:9c:f9:8b:16:68:8d:1d:8d:5e:
                    74:2f:70:89:41:10:a0:42:0a:d2:d1:c4:c8:05:48:
                    1c:3a:61:3a:37:3d:3d:c3:9d:ca:3f:02:4b:8b:31:
                    02:51:3d:ae:91:41:9b:e0:bc:de:30:e3:91:20:3b:
                    5d:1a:29:34:c4:c4:89:43:bc:17:a8:0a:ed:74:a5:
                    74:f3:38:48:9d:91:c8:36:9c:d3:78:9c:5f:82:e9:
                    45:1a:de:58:e4:73:40:a0:e1:7f:c5:89:13:80:38:
                    09:68:ca:52:63:15:f8:1c:ba:08:c2:da:00:9b:2f:
                    30:ae:92:a1:92:d7:54:aa:24:3e:ee:ea:74:7e:13:
                    e6:cd:cc:36:6c:e5:ee:9b:67:c6:04:ef:82:f4:4a:
                    4b:e7:63:90:8a:85:38:e1:f9:4e:68:6f:34:c4:58:
                    83:ab:87:db:a4:e6:d8:b7:9a:13:8c:09:4e:90:bc:
                    80:63:5c:3b:cd:3b:c3:e4:42:4a:b2:06:99:a3:6f:
                    18:a8:ac:54:58:57:94:95:8d:2d:c9:55:9f:28:a9:
                    39:1e:1a:84:c1:bf:29:7d:fa:c7:e6:4d:9d:c7:67:
                    a4:a6:86:46:94:57:20:01:ab:8a:f4:86:4f:f3:1b:
                    f4:d1:f3:e4:d6:a3:14:49:57:5c:b9:0f:cc:db:c5:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:45:2F:4A:55:BF:93:63:0C:4B:07:D6:06:DB:FF:8A:38:70:2A
            X509v3 Authority Key Identifier:
                keyid:20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33342d3334203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e4::/34

    Signature Algorithm: sha256WithRSAEncryption
         07:f4:85:9e:18:91:33:c6:2e:bf:2c:92:f8:2d:8a:23:52:c2:
         e6:71:a7:87:99:ef:86:00:65:db:d4:6c:c2:76:ed:5c:0b:58:
         1b:c1:8e:0c:84:ce:53:c0:30:2d:79:74:e4:17:b0:66:b5:3e:
         f5:87:4e:5c:98:fd:61:d1:a8:d9:4f:4c:5c:db:11:03:31:01:
         0b:12:5f:3a:18:5a:a0:32:8c:f7:27:ad:a5:b8:65:bd:1e:d3:
         9c:af:1d:23:b5:cd:07:85:5a:9b:16:ac:0f:bf:dd:82:23:85:
         75:e8:a8:7c:e3:f7:e1:af:14:78:6e:72:29:ce:14:b1:c1:6f:
         84:5a:f8:a6:55:43:19:2e:12:e9:55:ec:af:52:db:7c:29:d7:
         a7:ed:b0:77:03:66:73:9f:d3:42:c4:a8:9f:9a:bc:2c:11:ed:
         2f:7f:ed:30:fd:f8:f0:0c:d3:59:7a:bd:f1:2c:53:1e:40:dd:
         7c:5b:51:82:03:68:42:88:4f:e3:5d:44:e3:07:9c:b4:d2:c5:
         53:6c:a5:72:4f:ae:ec:83:6b:80:3b:c8:e2:8c:51:58:d6:bd:
         b1:6e:19:27:b5:94:56:b2:09:a6:d0:76:2d:68:4e:a4:e7:8c:
         c7:e9:46:fa:5f:4e:61:44:33:0b:b7:0d:b8:dd:08:5c:cd:de:
         48:78:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org