Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343034303a3a2f34332d3433203d3e20323638383538.roa
File:                     323830343a356239633a343034303a3a2f34332d3433203d3e20323638383538.roa (raw, json)
Hash identifier:          IM8J3OK6Rlb/uhYe/7/b0fMtG1V0K10gOfCaKZOst4g=
Subject key identifier:   04:45:57:79:9C:84:4E:C8:64:F5:CD:BC:8A:E0:6A:88:6D:B2:CB:07
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       5137B2945A39EE549DA2A8B9D1512DDC2987ED4D
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343034303a3a2f34332d3433203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:53 +0000
ROA not before:           Wed 03 Apr 2024 20:38:53 +0000
ROA not after:            Wed 02 Apr 2025 20:43:53 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4040::/43 maxlen: 43

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 13:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:37:b2:94:5a:39:ee:54:9d:a2:a8:b9:d1:51:2d:dc:29:87:ed:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:53 2024 GMT
            Not After : Apr  2 20:43:53 2025 GMT
        Subject: CN=044557799C844EC864F5CDBC8AE06A886DB2CB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:df:8a:37:ff:a9:df:f2:3f:24:93:e0:4a:b3:
                    f1:f6:a0:88:de:df:8b:c3:79:c1:72:a3:f0:71:c1:
                    9b:3b:69:45:09:5e:53:4e:0d:90:f1:78:59:af:dd:
                    bf:03:c5:ce:80:80:05:76:52:2b:b6:4b:c4:b2:a9:
                    77:42:b8:ca:a3:27:c3:e1:29:76:8d:af:32:b6:65:
                    79:b8:40:55:b8:65:b2:38:94:fb:f4:27:07:38:44:
                    6f:e0:d9:1b:80:ba:ab:ce:66:5a:ae:19:98:4e:58:
                    6d:eb:64:c2:76:c3:05:eb:59:cf:7a:77:73:43:ef:
                    83:5a:de:64:2b:b8:8e:f1:80:46:af:33:3c:ef:e6:
                    fa:93:4a:68:1c:c4:1a:d9:7a:62:de:fd:3b:13:30:
                    28:8b:a4:23:c8:7e:56:1e:1e:31:47:7e:b4:a9:ea:
                    6b:ea:10:88:e1:d2:2a:45:d9:d3:03:02:68:cf:db:
                    26:b6:d5:52:8b:62:08:e4:8d:de:14:d5:3d:a1:7b:
                    0c:83:fa:cb:21:13:61:85:9b:70:9b:72:d7:0e:d4:
                    87:27:86:ac:15:7e:55:8b:90:0c:86:a4:8e:1d:76:
                    3b:05:37:8b:7c:85:f1:52:46:0e:64:c0:f7:31:dd:
                    91:4a:55:0f:3d:75:b9:6b:42:c2:bf:24:48:6e:78:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:45:57:79:9C:84:4E:C8:64:F5:CD:BC:8A:E0:6A:88:6D:B2:CB:07
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343034303a3a2f34332d3433203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4040::/43

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:b0:c6:3c:2e:ef:25:c6:1f:db:25:4f:29:d4:8c:bd:9e:
         42:6f:e8:23:9d:2a:ec:1c:85:59:69:56:5a:e5:a2:1d:f6:97:
         52:a4:30:b8:a4:ae:9a:d6:d0:81:15:8d:f1:05:f1:ff:13:25:
         15:e3:09:46:0a:b7:23:57:b0:d4:f2:13:19:de:b0:3e:96:29:
         c6:5f:0f:e7:a5:62:8e:a3:a3:26:99:ca:ce:c5:f6:c6:1b:3a:
         50:16:72:c1:1b:74:55:6b:f2:66:76:72:44:f7:9d:cf:e9:68:
         2b:2a:1c:e1:df:f3:56:94:71:52:cd:ee:58:b4:fd:d3:07:6c:
         f9:a7:01:f3:bd:c3:43:fd:2b:6c:78:f9:d4:9b:a1:d4:a0:2f:
         bd:55:d5:cd:58:68:4c:4c:21:d9:98:b9:f3:ef:9a:da:71:5f:
         77:72:4a:22:50:1c:5c:48:c4:6c:06:3e:d1:23:ab:5a:23:a2:
         26:bf:0d:fe:38:67:fe:33:d2:20:bb:16:e9:1a:63:bf:6e:19:
         a2:2f:f8:19:68:19:d1:48:0f:c4:66:32:dc:ea:24:e0:42:6f:
         a8:7f:1e:8d:5e:36:a6:3b:b9:3d:3d:78:50:52:dc:bb:b5:f0:
         ca:40:cb:74:d1:4a:61:f3:af:50:96:39:4e:8c:68:b6:b9:08:
         40:f3:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:12:05 2024 by rpki-client on console-fra.rpki-client.org