Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a3a2f33322d3332203d3e20323637393333.roa
File:                     323830343a353536383a3a2f33322d3332203d3e20323637393333.roa (raw, json)
Hash identifier:          rFytNSv3XtaXA+cvcC3F3C1GORAixQa3cAmP5Qwx5Xs=
Subject key identifier:   A9:04:28:88:44:5C:41:76:4D:42:93:6F:AF:F1:13:AD:00:27:68:B8
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       14C9D6B08356A422A0739660186EBD6CE950A78A
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a3a2f33322d3332203d3e20323637393333.roa
Signing time:             Sun 07 Jul 2024 12:08:34 +0000
ROA not before:           Sun 07 Jul 2024 12:03:34 +0000
ROA not after:            Sun 06 Jul 2025 12:08:34 +0000
asID:                     267933
IP address blocks:        2804:5568::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 20:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c9:d6:b0:83:56:a4:22:a0:73:96:60:18:6e:bd:6c:e9:50:a7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Jul  7 12:03:34 2024 GMT
            Not After : Jul  6 12:08:34 2025 GMT
        Subject: CN=A9042888445C41764D42936FAFF113AD002768B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:4d:bf:aa:c2:09:9f:f8:76:1f:54:a7:e5:
                    7b:8e:41:a3:79:f7:6b:8d:24:22:e8:56:71:88:99:
                    11:8f:43:c0:ae:4f:0b:b9:d7:c0:70:45:4d:79:9a:
                    3f:eb:c8:77:77:12:1a:bc:6b:e7:f1:df:b5:95:f7:
                    80:1a:7a:ef:3f:0a:25:86:95:be:04:73:51:70:9e:
                    40:29:d0:62:20:48:01:a4:cf:d3:07:82:c1:dc:50:
                    fd:73:0a:97:f3:78:a9:35:a4:17:a4:14:f4:e3:34:
                    86:7b:aa:71:dc:ae:01:6d:2b:e8:4f:ec:9e:a5:17:
                    a5:33:5c:8e:08:4c:b0:e8:48:53:41:6f:c9:af:b3:
                    d5:de:7b:06:ee:1f:21:44:29:37:d0:a7:68:63:94:
                    a9:4e:e3:fe:21:a8:f9:2c:7f:e6:7b:1e:a7:5f:01:
                    63:c8:02:be:6e:c8:06:05:e6:85:28:9d:a6:6c:d1:
                    8f:fb:e2:70:dd:64:e0:25:b3:2f:ad:35:90:8c:22:
                    30:7e:06:79:b3:5f:c7:8d:99:93:52:96:b9:a2:70:
                    12:97:ef:19:26:2b:a9:09:58:c4:d8:b9:a5:83:92:
                    b1:38:9b:16:fc:9e:a3:11:b9:51:44:f2:73:0c:fe:
                    df:8e:73:20:16:f8:b2:ec:90:b5:71:9d:2c:6f:3e:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:04:28:88:44:5C:41:76:4D:42:93:6F:AF:F1:13:AD:00:27:68:B8
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a3a2f33322d3332203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5568::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:23:47:c2:1a:5b:aa:81:42:0f:3a:f8:b3:40:d0:74:fc:
         08:9d:b2:c4:a2:20:d0:a4:ac:e1:87:41:e9:8a:32:67:b2:94:
         cd:7c:76:38:22:3d:e6:dd:d3:c9:75:12:54:4a:53:19:d2:6b:
         7e:a0:d1:18:a8:f3:bb:6d:62:c8:a0:3f:44:5b:e7:de:37:a3:
         23:98:69:2a:65:e7:b1:c3:07:51:04:fc:56:0a:65:99:7a:a1:
         a0:3c:92:dd:15:a3:3e:16:ac:92:dc:7c:7b:94:ed:dc:2e:33:
         7e:82:f6:ca:7e:3b:33:1a:65:1a:00:49:db:f4:12:e4:41:e0:
         1e:9a:ca:f5:c7:9a:98:d1:39:7d:0b:4b:50:8c:01:b4:3f:63:
         73:c1:f9:7b:18:30:03:7f:14:3b:ea:eb:2d:ba:3a:30:74:1b:
         34:9d:b0:c8:4d:26:d1:bd:c0:fc:b9:6d:d2:c0:9e:77:03:51:
         d5:7d:04:b3:be:eb:f0:ff:11:0f:12:dc:0a:f0:7e:2e:ca:e1:
         12:e3:f1:44:2f:b8:41:ff:2d:51:bc:19:2d:91:b5:0e:0c:f5:
         8a:1e:af:9d:c2:ea:52:f2:7d:94:04:06:83:3d:7e:22:86:39:
         aa:41:09:3b:d8:dc:6b:56:c6:24:ae:84:c5:78:5f:2d:ee:79:
         c8:d3:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 23:24:05 2024 by rpki-client on console-fra.rpki-client.org