Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a666163653a3a2f34382d3438203d3e20323637353934.roa
File:                     323830343a343364383a666163653a3a2f34382d3438203d3e20323637353934.roa (raw, json)
Hash identifier:          gOWnjl7B0RCiB9m1Ut9y46c2lLnv58ueCBfIjGfb7kE=
Subject key identifier:   43:00:95:DC:62:3A:1E:07:0B:E4:AD:F9:D2:34:DD:EC:CC:2F:09:3F
Certificate issuer:       /CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
Certificate serial:       1538A3583AA2C29EB1C0C128F30D90FAD9F5DE6C
Authority key identifier: 5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a666163653a3a2f34382d3438203d3e20323637353934.roa
Signing time:             Fri 24 Mar 2023 01:47:11 +0000
ROA not before:           Fri 24 Mar 2023 01:42:11 +0000
ROA not after:            Fri 22 Mar 2024 01:47:11 +0000
asID:                     267594
IP address blocks:        2804:43d8:face::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 21:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:38:a3:58:3a:a2:c2:9e:b1:c0:c1:28:f3:0d:90:fa:d9:f5:de:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
        Validity
            Not Before: Mar 24 01:42:11 2023 GMT
            Not After : Mar 22 01:47:11 2024 GMT
        Subject: CN=430095DC623A1E070BE4ADF9D234DDECCC2F093F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:f0:f2:b1:d3:67:d5:41:a6:ce:7a:e7:20:
                    96:b0:ee:d0:d6:29:b0:f0:83:d3:eb:f2:7a:31:59:
                    39:b4:4a:9a:47:da:9f:6a:d0:23:0f:18:9a:91:3f:
                    89:44:99:6f:97:28:66:89:83:e2:20:45:69:fb:33:
                    47:2a:ba:a4:41:b8:74:5d:9f:e3:2f:da:1e:de:f4:
                    97:50:93:88:04:d6:ff:fe:53:4f:f0:54:af:a0:e4:
                    f9:c0:b0:e5:92:bc:3b:c7:3a:f0:aa:24:61:f8:2e:
                    f3:93:2b:90:37:42:d2:3a:64:cb:1c:dd:f2:42:6d:
                    f5:76:a3:8b:30:ce:fb:9c:65:65:58:c8:2d:c5:48:
                    a5:01:fd:12:11:04:7f:78:d3:3d:f3:4d:8d:6e:08:
                    cf:87:b6:96:d8:c2:0b:0d:7f:5b:70:87:4f:44:00:
                    03:92:60:53:f3:2c:d2:64:6a:49:43:b1:52:fa:66:
                    db:a8:cf:91:2c:be:b0:a1:ea:d5:a4:69:ef:ca:fd:
                    ad:c8:e9:a9:8f:e5:48:24:92:2b:9d:b9:c4:24:ee:
                    98:ee:df:c8:69:e3:06:82:9d:08:e3:a8:19:9f:71:
                    ed:98:6c:52:ab:51:d3:01:e2:85:f8:62:20:b5:f9:
                    f8:c5:d4:27:1a:9e:65:e9:52:51:69:40:93:e0:dd:
                    21:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:95:DC:62:3A:1E:07:0B:E4:AD:F9:D2:34:DD:EC:CC:2F:09:3F
            X509v3 Authority Key Identifier:
                keyid:5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a666163653a3a2f34382d3438203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d8:face::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:aa:df:69:9c:5f:8f:84:59:5a:ef:9e:a9:da:37:23:d1:
         02:ed:fa:9e:dc:82:4f:dd:30:b2:05:2b:83:f5:3f:e6:9a:aa:
         2a:93:27:9e:5b:7e:31:26:36:14:95:27:95:98:2b:b2:6f:6d:
         d5:6b:45:53:c0:b1:5b:27:62:10:89:a1:e8:90:76:62:da:75:
         ab:79:c1:48:af:94:a6:8d:58:c5:c7:d2:52:fd:0e:a8:68:34:
         32:22:82:25:32:9e:12:26:41:45:b1:de:8e:ae:f5:c0:dc:5a:
         1b:8a:77:a4:2e:06:5e:f2:2c:1d:be:5f:71:3f:f4:64:15:82:
         56:b1:47:d5:52:0e:99:61:6e:db:53:cb:2e:ff:2c:97:69:5e:
         ab:1f:0f:52:01:39:78:32:47:6f:ac:3b:3d:d9:ea:a2:3c:21:
         5a:20:e4:b8:0d:72:8d:61:38:84:29:ee:bd:15:1e:74:aa:2e:
         25:50:74:a4:fa:0e:d5:7b:b1:19:ee:77:62:09:0b:8b:4e:41:
         f3:cf:ac:de:f1:fa:96:09:6e:85:25:5c:3d:ec:05:ac:40:6c:
         06:13:1d:fb:3c:94:ce:31:96:e1:f6:50:4d:8d:0a:9d:81:6b:
         d5:2f:df:a9:23:94:12:44:ac:c1:6c:7f:fe:50:85:c1:35:ff:
         e8:a2:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 22:14:54 2024 by rpki-client on console-fra.rpki-client.org