Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3332203d3e20323637353432.roa
File:                     323830343a343330303a3a2f33322d3332203d3e20323637353432.roa (raw, json)
Hash identifier:          FB1pGZzK5uSwsJzZyMlDW3mbv09dRDUUoGOWtTV2J7Y=
Subject key identifier:   2F:EC:B0:73:FA:D1:DA:79:E4:76:AA:86:BD:29:FC:57:0B:B4:4E:37
Certificate issuer:       /CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
Certificate serial:       791FBAF7FC626FBC34B9C32B963A7AAA545F1F65
Authority key identifier: D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3332203d3e20323637353432.roa
Signing time:             Tue 21 May 2024 19:29:22 +0000
ROA not before:           Tue 21 May 2024 19:24:22 +0000
ROA not after:            Tue 20 May 2025 19:29:22 +0000
asID:                     267542
IP address blocks:        2804:4300::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 22 May 2024 11:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1f:ba:f7:fc:62:6f:bc:34:b9:c3:2b:96:3a:7a:aa:54:5f:1f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
        Validity
            Not Before: May 21 19:24:22 2024 GMT
            Not After : May 20 19:29:22 2025 GMT
        Subject: CN=2FECB073FAD1DA79E476AA86BD29FC570BB44E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:14:c2:89:5c:65:51:34:80:3e:bb:2d:97:4c:
                    5a:b5:a5:af:19:d7:29:fc:68:4a:72:02:95:05:cb:
                    72:29:53:75:0a:df:d3:5c:da:d1:dc:a6:17:b6:b2:
                    88:49:9c:80:81:e5:7d:41:a7:9d:2c:7a:fd:cd:39:
                    bd:8a:e2:22:24:5a:31:ae:e0:16:31:9c:dd:e0:a7:
                    e2:57:53:6a:3b:05:f5:b4:ce:8c:4d:c6:e7:3f:da:
                    ea:e8:94:9c:8c:e7:bf:14:d8:0f:38:26:c5:e2:9e:
                    84:00:78:24:0c:2f:c6:7d:38:f2:5f:6e:d6:97:13:
                    bf:f3:56:7b:5a:c0:06:16:d6:22:44:be:4c:65:93:
                    dc:03:1e:8f:51:cb:df:ba:b9:40:c8:3c:80:ea:74:
                    74:47:4b:47:4e:e4:8e:54:65:c5:60:4b:f2:8e:42:
                    34:8b:b2:ff:76:7c:4c:5c:2d:da:d7:f3:cf:11:45:
                    bf:d4:70:da:0b:8c:0e:11:c0:64:4b:ba:e3:b8:9f:
                    42:8d:51:4b:fa:32:30:e8:af:2a:09:24:49:8e:ad:
                    ae:df:fd:82:42:a5:d8:bc:cc:8d:86:e7:57:1a:99:
                    49:49:97:32:79:8d:95:1c:6c:17:23:ff:83:7b:0c:
                    a4:73:0f:f1:fa:8a:46:e3:61:d5:98:df:a7:39:24:
                    47:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:B0:73:FA:D1:DA:79:E4:76:AA:86:BD:29:FC:57:0B:B4:4E:37
            X509v3 Authority Key Identifier:
                keyid:D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3332203d3e20323637353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:46:1d:f8:b4:87:45:bf:98:ae:90:74:5a:99:ef:0b:54:09:
         3d:37:45:15:e4:9b:cb:35:5c:e2:f7:8b:1f:fe:6f:85:2b:ff:
         a5:8c:5b:ad:47:98:b4:39:08:11:27:81:91:72:f3:a6:54:6a:
         68:1e:38:36:16:49:21:c3:2b:cb:25:33:4a:49:23:ac:69:ba:
         23:c1:21:e2:90:93:e1:4b:3b:4d:f4:3d:38:30:2a:2a:87:ec:
         1e:2f:c7:9e:ea:30:ee:25:40:c0:a6:f6:f0:43:eb:08:c0:e7:
         d7:c2:68:5b:da:23:e5:18:3f:29:ca:55:c0:ba:c5:7f:9c:61:
         c6:2f:12:03:5c:bd:5c:6d:ad:26:8a:14:dd:6c:f7:95:41:b6:
         06:a0:58:3e:9f:31:26:cc:88:c6:31:7f:f6:45:9e:29:f2:de:
         4f:14:ac:6f:2f:9a:ba:f1:3e:f2:55:79:be:4a:43:91:21:c5:
         ed:9e:7e:8b:51:65:1f:2a:ba:ef:f5:d3:51:de:16:bc:ea:bf:
         a7:67:54:fd:13:12:ad:2d:00:f7:9a:34:3d:d7:09:77:55:3a:
         49:26:36:4d:9c:57:1f:65:e5:b2:47:14:c3:68:5b:45:b9:9b:
         50:e5:22:12:8a:95:53:9c:88:b2:99:1c:b9:f8:e2:37:2a:fd:
         cc:be:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org