Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34332d3433203d3e20323638383538.roa
File:                     323830343a356239633a343330303a3a2f34332d3433203d3e20323638383538.roa (raw, json)
Hash identifier:          CehjhKaWD++7Ant3cROUoyilP/+QWpxt0lP+Xl1HhKg=
Subject key identifier:   63:07:2B:DC:C7:F1:7B:CC:D7:E3:E6:15:CD:13:5D:B0:92:A7:88:D6
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       7F66C4C6089CC97378E6300FB4B87C3B1A28D518
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34332d3433203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:53 +0000
ROA not before:           Wed 03 Apr 2024 20:38:53 +0000
ROA not after:            Wed 02 Apr 2025 20:43:53 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4300::/43 maxlen: 43

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 13:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:66:c4:c6:08:9c:c9:73:78:e6:30:0f:b4:b8:7c:3b:1a:28:d5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:53 2024 GMT
            Not After : Apr  2 20:43:53 2025 GMT
        Subject: CN=63072BDCC7F17BCCD7E3E615CD135DB092A788D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:bc:4d:6b:13:a5:82:74:8f:58:4b:a2:9e:
                    a9:47:2c:f0:67:64:3b:b6:2e:7a:c6:6c:1f:c6:44:
                    57:48:80:16:de:84:9c:90:85:6f:ed:08:60:e9:d7:
                    9f:51:73:65:29:5e:d8:bd:24:77:fa:55:4b:4d:b5:
                    39:31:63:cd:e6:bc:22:1f:be:c1:d7:49:7d:e2:65:
                    5e:42:74:b4:e0:5a:31:1a:c9:0b:ca:b0:56:65:80:
                    f4:dc:c4:12:42:0d:79:03:5f:2d:69:10:70:31:a1:
                    13:d3:a2:a2:2c:4d:8a:25:a1:93:bb:83:75:7a:be:
                    e9:ed:49:aa:df:d5:6c:3e:0c:1c:15:74:90:56:e2:
                    99:f9:41:8f:f3:dd:62:e9:88:43:db:3a:ca:fc:3d:
                    4a:82:40:18:05:e0:4a:b4:cd:1e:fa:b1:5e:18:c8:
                    3c:61:45:e9:88:48:7e:71:63:66:b2:14:db:d2:de:
                    24:2e:d9:1e:2c:70:5e:71:ae:5a:b6:9b:af:67:88:
                    85:54:ff:fd:b6:10:37:61:aa:96:c2:c1:ba:f2:e1:
                    24:f1:88:6b:1a:70:e8:7d:80:57:a2:d2:90:ad:36:
                    e0:bd:ec:9c:aa:40:2c:a0:00:77:d6:96:a7:0e:1d:
                    5e:24:4e:d9:69:54:fa:3d:a3:7f:f1:d6:e8:e5:cf:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:2B:DC:C7:F1:7B:CC:D7:E3:E6:15:CD:13:5D:B0:92:A7:88:D6
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343330303a3a2f34332d3433203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4300::/43

    Signature Algorithm: sha256WithRSAEncryption
         53:23:03:46:43:81:31:a1:95:f6:91:73:7e:24:b5:7b:4d:03:
         65:a8:50:c2:7f:62:6b:9c:78:93:a0:8e:2f:90:72:41:e9:d2:
         56:33:02:75:da:3d:c2:b8:bb:a1:b6:44:e3:a6:de:ef:35:2b:
         6f:a3:30:9c:0b:81:34:de:dd:e5:33:b0:92:51:cc:da:21:d2:
         7c:75:1a:0c:b4:04:fd:d9:73:d2:b6:17:60:1c:fc:7c:26:1c:
         0b:a8:31:0a:da:d3:61:6c:f0:d0:b2:25:1f:6d:70:f1:ab:0a:
         49:43:26:9d:c1:54:86:e3:d4:96:40:95:28:44:ef:44:71:41:
         2f:6d:17:af:28:cf:ae:44:5c:bd:ef:69:18:50:a6:1c:22:f5:
         90:0a:fd:96:46:dd:bf:66:da:8e:1a:4e:4b:a1:1d:3d:a7:63:
         0f:45:a6:c7:c3:e6:ee:47:81:d1:3b:57:08:41:c5:1e:15:9d:
         c1:ef:9a:ae:1c:39:90:74:2c:2a:87:b7:2a:1a:20:9b:43:09:
         82:cf:52:42:3c:21:1f:8e:13:81:7f:e3:4e:df:35:1f:6c:f7:
         47:01:b1:89:0c:f3:e3:4a:84:53:54:40:04:e4:b0:45:8f:7f:
         8e:cb:48:8a:3d:e7:3e:f8:f6:d2:e4:0e:56:da:65:ab:97:b4:
         89:7b:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:52:57 2024 by rpki-client on console-ams.rpki-client.org