Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a663a3a2f34382d3438203d3e20323638383538.roa
File:                     323830343a356239633a663a3a2f34382d3438203d3e20323638383538.roa (raw, json)
Hash identifier:          hjyc3frS+U5ZkUZsddujcaefw1mTBMFeR/u09wn2dO8=
Subject key identifier:   19:BE:4B:4A:44:78:0C:15:B4:E8:A9:AA:5E:90:5F:9D:6D:1B:61:A9
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       681F251002C62DC3AB6F6D8012A67DEE42A1D0C8
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a663a3a2f34382d3438203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:54 +0000
ROA not before:           Wed 03 Apr 2024 20:38:54 +0000
ROA not after:            Wed 02 Apr 2025 20:43:54 +0000
asID:                     268858
IP address blocks:        2804:5b9c:f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 13:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1f:25:10:02:c6:2d:c3:ab:6f:6d:80:12:a6:7d:ee:42:a1:d0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:54 2024 GMT
            Not After : Apr  2 20:43:54 2025 GMT
        Subject: CN=19BE4B4A44780C15B4E8A9AA5E905F9D6D1B61A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:95:a8:1b:01:29:5f:d6:85:60:b3:71:7e:
                    bc:ab:fb:ac:80:46:ae:cb:e1:3b:84:68:08:b9:c3:
                    a6:9f:6f:55:cf:0e:05:8c:30:3d:bd:61:ac:99:bf:
                    5b:23:4c:fa:73:8d:8e:71:ef:bf:7d:98:a2:35:6d:
                    19:cf:26:c7:a0:fa:65:1d:c5:d6:1f:03:29:57:82:
                    fe:15:12:95:75:1b:b0:4b:ff:00:af:6a:64:7a:e0:
                    e4:3a:d9:e8:55:97:19:d5:6b:89:69:f2:9a:35:c7:
                    4e:42:04:57:94:e5:2a:8b:72:5d:10:6c:73:ae:85:
                    c0:de:0e:ed:de:b9:5a:18:d9:ba:4d:fc:bb:41:27:
                    80:f0:ef:f6:01:7f:bd:53:d1:75:08:31:a0:5c:ff:
                    80:df:b8:43:e1:aa:11:d8:cb:89:22:c1:a4:07:b1:
                    27:84:4f:94:06:1b:ea:35:ca:f8:31:36:36:97:b0:
                    5c:95:56:84:30:01:bc:fa:00:c6:3a:2f:e5:07:7f:
                    40:2b:10:16:e1:76:7f:06:c7:3c:51:41:74:9f:1c:
                    7e:7a:f6:84:60:d2:01:28:1d:78:9a:a0:de:b1:ae:
                    b6:05:53:29:ae:81:40:6d:0f:59:41:c5:38:ff:72:
                    80:17:36:bb:39:9b:74:32:e5:22:82:8d:c1:db:85:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BE:4B:4A:44:78:0C:15:B4:E8:A9:AA:5E:90:5F:9D:6D:1B:61:A9
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a663a3a2f34382d3438203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:a1:e5:c3:08:05:02:4a:25:4a:c6:8c:89:6d:6b:1b:b4:
         c5:88:7e:05:23:b3:2f:fd:66:db:ca:9e:c1:e4:e7:fd:fc:b3:
         51:4a:96:79:9a:37:40:55:d4:f3:df:8b:1b:b9:83:d8:42:9d:
         c2:70:cb:6b:26:27:75:da:38:56:60:9a:79:fd:08:7e:f2:d0:
         28:a9:a8:4e:05:39:fa:09:6b:57:7b:ef:23:af:af:43:05:87:
         1a:3e:d9:de:a2:82:91:41:ce:c7:74:f3:c2:ec:f8:5d:58:e0:
         f2:20:84:5f:74:b8:20:30:99:b8:c1:d8:4f:04:e6:3b:06:3a:
         0e:65:42:a2:5a:26:04:ad:00:ea:6b:b2:2d:52:ee:cb:a6:9d:
         db:06:10:6f:06:00:80:6a:ae:66:fd:3a:e0:f2:cf:09:28:97:
         12:68:3a:b9:be:15:dc:95:4a:9d:a5:be:8b:bf:a7:c8:4d:22:
         a0:d9:e9:18:23:28:89:44:a6:d7:40:7c:af:21:21:91:a4:28:
         86:19:96:7d:ba:13:12:6d:f6:bd:f6:44:77:48:fe:26:13:1a:
         2e:d8:03:62:c8:2b:c1:5e:61:78:96:46:e3:e9:50:60:18:0d:
         39:2e:f4:56:dd:c7:76:09:fc:87:fc:2b:d3:11:ce:3a:7d:cf:
         c3:0d:62:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:12:05 2024 by rpki-client on console-fra.rpki-client.org