Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a66313a3a2f34382d3438203d3e20323638383538.roa
File:                     323830343a356239633a66313a3a2f34382d3438203d3e20323638383538.roa (raw, json)
Hash identifier:          9cLVWnOfyAoeVjJLtpJmrkUwQR791+zkVwt9mA2jFyk=
Subject key identifier:   4B:0B:07:63:A9:B3:6C:72:05:62:66:19:20:BB:C8:9C:BB:CB:82:14
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       57416F91AC58C092F3D5996268CF8B7B35B73BE0
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a66313a3a2f34382d3438203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:54 +0000
ROA not before:           Wed 03 Apr 2024 20:38:54 +0000
ROA not after:            Wed 02 Apr 2025 20:43:54 +0000
asID:                     268858
IP address blocks:        2804:5b9c:f1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 13:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:41:6f:91:ac:58:c0:92:f3:d5:99:62:68:cf:8b:7b:35:b7:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:54 2024 GMT
            Not After : Apr  2 20:43:54 2025 GMT
        Subject: CN=4B0B0763A9B36C720562661920BBC89CBBCB8214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:af:fe:51:84:2b:98:56:00:16:42:fe:62:
                    73:45:bd:df:89:1a:2c:51:48:72:8b:8f:89:f0:22:
                    0c:40:18:31:77:e5:8c:25:dc:81:90:9e:9f:df:d3:
                    25:f6:52:75:f3:d4:58:31:8b:cf:50:61:bd:86:5f:
                    00:7a:f8:43:0a:d5:9c:35:a7:75:b1:a5:6f:78:f0:
                    fc:57:a8:2c:9c:7a:ca:af:e5:f3:0b:58:35:62:1e:
                    12:17:18:81:44:da:9e:4a:07:90:ef:30:df:5e:a4:
                    7d:6d:32:7b:91:65:40:ea:f7:97:c7:fc:7d:bb:4a:
                    1b:80:6e:bc:c6:c1:bd:6e:09:c3:26:66:53:9f:6a:
                    f9:b0:14:05:cb:31:6f:5c:51:68:e2:5b:64:ae:c9:
                    99:ae:4b:39:0b:e5:d1:06:3d:15:b0:32:6d:0c:f3:
                    27:4d:36:be:d8:fe:72:ad:7f:cb:06:73:bb:d7:85:
                    23:1a:39:d7:e7:80:4d:6a:94:cd:3f:e4:5e:e2:2a:
                    9b:1d:5b:24:b7:16:28:71:d9:7b:b1:a9:4b:cc:73:
                    c4:4e:ab:08:fb:41:76:68:a8:83:94:59:72:fa:41:
                    08:3f:15:b5:bc:65:c6:fc:3c:81:0e:4c:a1:6a:bc:
                    f7:7a:d7:d3:55:84:aa:3b:9c:a0:04:e8:51:a7:bd:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0B:07:63:A9:B3:6C:72:05:62:66:19:20:BB:C8:9C:BB:CB:82:14
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a66313a3a2f34382d3438203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:cb:01:88:d8:37:29:f5:96:42:27:0a:8b:59:4a:8e:58:d0:
         93:34:6a:43:ca:86:03:37:8f:52:f8:7b:f1:fe:20:ec:bf:74:
         6a:5f:7e:58:c0:1b:e2:7e:09:31:f7:ed:84:1f:03:f7:b9:ff:
         5e:fb:18:63:e5:d1:93:d4:45:2d:a5:0b:bf:85:8e:30:38:fe:
         e3:59:f7:f1:8c:40:80:01:61:c5:3e:7f:b2:52:d4:5d:78:56:
         b6:e0:df:14:22:26:4d:e5:0e:b3:bb:79:7f:49:fb:0e:09:89:
         a8:ec:f4:33:a7:4d:13:dc:22:28:c2:be:63:0a:32:a5:c6:8f:
         a5:26:6a:3f:03:e9:a4:e1:63:95:34:1a:0f:07:50:00:df:72:
         05:cf:46:1e:77:14:b1:eb:b1:33:8e:d6:d0:2d:dc:36:83:40:
         6a:58:86:b1:6d:1f:be:15:a6:a7:aa:79:ba:33:15:a2:8a:18:
         69:18:35:2a:88:4d:fb:89:ef:70:46:5a:0d:95:aa:32:cd:a0:
         73:15:67:25:2b:86:88:39:f7:05:14:c0:e7:cb:df:fd:b6:c1:
         e5:d3:6b:c9:23:86:9e:e9:b0:ca:28:94:67:43:59:f0:a1:69:
         0c:f7:8f:bf:d1:9f:af:39:8c:e3:99:05:4c:a0:91:1c:01:07:
         99:a1:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:12:05 2024 by rpki-client on console-fra.rpki-client.org