Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa
File:                     323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa (raw, json)
Hash identifier:          m2NOiFfFYWeKrBeS4JlJN6vaIHlWLcVaPvuPB6OlFQI=
Subject key identifier:   B8:3E:C5:47:40:9A:0C:97:85:8F:28:55:02:F4:64:93:EC:0A:1B:22
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       312DF43AD6C69FF91635CDE1F563F9429595144E
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa
Signing time:             Mon 03 Jun 2024 18:30:18 +0000
ROA not before:           Mon 03 Jun 2024 18:25:18 +0000
ROA not after:            Mon 02 Jun 2025 18:30:18 +0000
asID:                     61885
IP address blocks:        2804:1ac8:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 18:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2d:f4:3a:d6:c6:9f:f9:16:35:cd:e1:f5:63:f9:42:95:95:14:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Jun  3 18:25:18 2024 GMT
            Not After : Jun  2 18:30:18 2025 GMT
        Subject: CN=B83EC547409A0C97858F285502F46493EC0A1B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:1a:6f:ed:b4:81:4b:bb:7f:2f:e2:18:3c:
                    23:59:5c:7c:d4:74:e8:a9:e8:37:1e:c9:1b:05:cd:
                    c5:68:f4:b8:1f:2c:14:f1:5b:00:b5:e8:7a:06:e7:
                    a6:29:fb:21:9c:89:9e:30:2a:c9:0e:00:38:ab:7e:
                    c7:2a:67:e3:75:c7:a0:a1:8d:d8:56:c4:c7:69:c9:
                    b5:76:6d:b3:ad:49:f1:af:cc:51:f7:0a:90:d2:e6:
                    bf:c7:ea:c7:ca:df:de:ca:d2:92:9f:a4:ee:13:ff:
                    69:2a:38:ae:bb:b5:c2:a0:f3:21:6a:d9:1c:5b:39:
                    de:d7:3c:ea:64:52:c8:aa:67:8a:16:d1:07:6a:22:
                    5e:45:94:77:ce:66:0b:d1:ba:3c:85:5e:e2:62:71:
                    9f:b2:3c:b0:d0:ae:24:a9:bb:d3:f3:89:b7:5e:cc:
                    ac:72:17:d1:61:78:10:09:60:d7:48:61:af:e2:71:
                    76:0e:bc:e4:01:38:d2:63:47:d8:06:4d:1d:2b:61:
                    3c:6e:41:04:bd:3f:c9:03:d9:b3:6b:ba:22:70:b4:
                    f1:ab:0d:de:f7:14:bc:dd:36:0d:f5:c4:4b:ef:de:
                    83:19:9e:6a:f7:f1:b8:82:40:fd:f7:20:66:d6:c5:
                    42:56:e5:94:60:31:d8:11:33:43:0c:6a:f5:8c:a5:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3E:C5:47:40:9A:0C:97:85:8F:28:55:02:F4:64:93:EC:0A:1B:22
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:38:4b:83:c5:26:6f:e4:9c:aa:c5:a6:0f:41:30:1b:f3:94:
         cc:b5:90:c1:3f:24:90:59:fd:fa:4a:6b:95:27:9a:be:ba:32:
         3d:6f:c4:9e:45:76:a6:09:e9:19:89:85:35:78:2e:42:45:65:
         73:9b:e1:ba:62:8a:eb:83:08:c3:07:92:fd:2f:e9:da:ce:75:
         a9:16:93:a5:31:8c:cd:22:4a:91:5f:ce:74:ef:22:04:67:fb:
         8a:ec:5a:98:c5:5c:6a:44:e7:1f:c8:af:89:f0:91:2c:5f:bb:
         0b:af:84:f1:48:cf:b8:93:e6:43:9e:30:21:68:86:8a:29:82:
         17:bb:98:a6:d1:32:d8:84:c1:d0:a9:00:55:6a:6e:50:80:b7:
         94:3b:b1:79:4f:b3:e5:62:b1:08:78:3e:cb:da:2a:b8:45:ff:
         41:43:44:77:0d:74:39:86:4a:bd:c8:2a:32:7b:a2:6e:2c:ac:
         16:da:72:b5:07:7c:29:ca:96:b5:e7:db:1b:cb:71:1e:d9:5e:
         de:08:32:bc:62:2f:9d:ed:1c:43:4c:33:d4:25:13:32:10:f0:
         fb:59:f1:33:4c:42:79:ec:af:ab:51:98:2a:8f:7e:68:eb:1c:
         47:4e:72:ed:d4:d7:83:f6:da:4b:13:e0:26:ef:86:0b:d2:40:
         d1:50:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org