Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/323830343a346139383a663030303a3a2f33362d3336203d3e20323637323531.roa
File:                     323830343a346139383a663030303a3a2f33362d3336203d3e20323637323531.roa (raw, json)
Hash identifier:          DnOI67im2Z8ZorYybENRvugTrpDbaTUFKpjKhDESRsg=
Subject key identifier:   59:D1:B5:B9:B3:4F:16:8D:10:54:BA:B6:17:68:2C:2B:3B:55:99:C7
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       398E45F955D7F919D21BA4BAB41196E77D833059
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/323830343a346139383a663030303a3a2f33362d3336203d3e20323637323531.roa
Signing time:             Wed 03 Apr 2024 18:32:28 +0000
ROA not before:           Wed 03 Apr 2024 18:27:28 +0000
ROA not after:            Wed 02 Apr 2025 18:32:28 +0000
asID:                     267251
IP address blocks:        2804:4a98:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8e:45:f9:55:d7:f9:19:d2:1b:a4:ba:b4:11:96:e7:7d:83:30:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr  3 18:27:28 2024 GMT
            Not After : Apr  2 18:32:28 2025 GMT
        Subject: CN=59D1B5B9B34F168D1054BAB617682C2B3B5599C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:63:d8:0d:2e:1a:ec:ee:34:f5:48:3b:af:
                    1c:0c:c8:a3:10:83:a1:81:7b:7d:6a:b0:1f:79:48:
                    54:66:43:2e:13:d6:70:16:8c:b6:c5:c4:24:48:ae:
                    88:f1:a6:a6:4b:a2:f8:89:7c:e0:75:e8:35:57:7e:
                    80:7d:b0:fb:50:84:10:8e:05:ef:5d:7c:88:30:8a:
                    72:51:de:bf:71:3a:0d:2c:47:50:b4:5b:33:55:00:
                    9b:e8:68:df:47:2f:5d:14:89:bb:cb:70:99:04:7e:
                    14:5d:86:53:db:68:79:af:9c:83:aa:45:a0:91:21:
                    a2:6d:1b:c8:88:d4:10:84:a7:84:95:6f:01:08:88:
                    ae:18:f2:d0:92:6f:51:bc:9e:74:23:cb:05:c8:88:
                    d9:e4:df:d1:98:01:0b:e7:04:db:63:ad:40:5a:03:
                    17:5e:c1:b3:1e:bf:67:a3:1b:bb:e3:6c:ed:d0:ad:
                    dc:51:04:54:18:be:ff:ff:53:2f:66:6e:f4:b0:3c:
                    3a:61:04:f5:dc:31:80:35:3a:81:b9:07:8e:b9:68:
                    41:5a:aa:66:5e:8c:98:fe:f5:46:55:21:e7:97:3e:
                    34:aa:68:a2:b4:ac:8a:ca:9f:7b:cb:dd:00:1d:89:
                    7f:97:38:04:d3:80:6d:44:5a:b6:e5:92:97:97:c8:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D1:B5:B9:B3:4F:16:8D:10:54:BA:B6:17:68:2C:2B:3B:55:99:C7
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/323830343a346139383a663030303a3a2f33362d3336203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a98:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:f7:c6:11:d2:53:e2:c7:6c:e6:a6:04:a4:1f:18:5b:cd:
         2b:0c:00:ab:eb:30:f8:9e:96:dc:88:9d:82:f4:c7:f3:54:08:
         7d:3d:01:e4:1d:8b:75:c6:3c:90:8b:27:c8:ac:48:99:0a:55:
         09:10:b3:b1:e3:11:57:af:06:84:64:33:75:19:66:b1:6f:52:
         22:8c:f2:7a:11:d4:4e:5b:2c:b1:28:46:a1:ef:08:f6:22:03:
         40:24:1e:46:f6:ee:b4:f2:47:8d:ff:24:55:c2:61:15:77:3b:
         4d:3a:2c:4d:fc:d6:ac:91:16:fb:67:84:8f:dc:4f:21:81:bd:
         fe:df:6a:44:c7:86:3f:9a:b9:f2:ce:8a:bf:93:fc:78:f5:a1:
         86:d8:e3:63:32:2b:3b:a8:6e:84:c4:b5:f0:46:2f:e5:f2:e6:
         ef:e6:34:ee:b5:41:79:76:c5:5b:51:81:08:28:c7:a5:3c:0b:
         11:37:2b:64:47:17:57:9e:c6:56:7b:cc:2f:d7:7a:42:ac:29:
         8f:ba:6c:7e:e4:b1:0d:17:65:76:71:79:c0:33:c5:c4:6d:46:
         ab:24:09:6d:40:1c:6e:c6:b8:6b:d8:5f:b7:87:89:78:a2:2c:
         1b:fe:12:61:f5:18:0e:77:68:14:17:c7:84:b1:71:c8:51:ca:
         02:27:da:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:30 2024 by rpki-client on console-fra.rpki-client.org