Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3336203d3e20323637343230.roa
File:                     323830343a346433633a3a2f33322d3336203d3e20323637343230.roa (raw, json)
Hash identifier:          9OboksMUuHb3+wVW8LMtLqdlZ5qgaYtCcnqCQ2p/l9g=
Subject key identifier:   A0:0A:C2:3A:16:CD:81:D0:F7:6C:E5:48:09:CA:B0:F3:26:2C:CF:FC
Certificate issuer:       /CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
Certificate serial:       20D20DA868C0DD50341E0CB4B7778D83433F660E
Authority key identifier: EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3336203d3e20323637343230.roa
Signing time:             Tue 03 Sep 2024 13:27:06 +0000
ROA not before:           Tue 03 Sep 2024 13:22:06 +0000
ROA not after:            Tue 02 Sep 2025 13:27:06 +0000
asID:                     267420
IP address blocks:        2804:4d3c::/32 maxlen: 36

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 14:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:0d:a8:68:c0:dd:50:34:1e:0c:b4:b7:77:8d:83:43:3f:66:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
        Validity
            Not Before: Sep  3 13:22:06 2024 GMT
            Not After : Sep  2 13:27:06 2025 GMT
        Subject: CN=A00AC23A16CD81D0F76CE54809CAB0F3262CCFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:bf:0d:24:70:df:a7:9f:5a:84:c8:37:1b:
                    09:aa:d9:9c:37:27:e2:f5:2f:be:86:5c:b2:5f:58:
                    c3:5b:0c:a1:d2:fe:65:b9:91:81:2c:f3:8c:38:cb:
                    bf:b0:51:26:c9:a1:84:86:47:a2:56:ee:47:f9:7a:
                    c0:1f:54:fa:52:ac:39:51:c0:fb:a6:d8:8c:de:4d:
                    c8:57:44:42:b3:2d:49:aa:6e:57:cc:90:c1:ff:8d:
                    bd:5c:32:6b:df:f3:bf:d4:32:ce:96:b7:2e:40:14:
                    76:92:6a:2d:34:f7:a5:78:f2:4f:45:3a:6f:74:16:
                    76:76:68:d1:cd:99:95:5f:ae:c9:9d:a0:b5:89:4b:
                    3b:51:2f:5e:6c:1a:f2:b3:1c:b6:78:9c:dc:3c:04:
                    da:30:31:80:ab:21:13:09:a6:c5:33:4f:d3:8c:07:
                    e5:bc:a9:86:cc:40:28:0b:78:53:cc:0e:b5:0e:e7:
                    22:f0:18:a2:83:9b:aa:b7:50:57:c5:32:48:d6:e6:
                    0f:65:38:56:5d:fb:67:70:62:dc:1d:c5:f7:97:02:
                    b2:6e:f4:17:1b:7c:4a:f7:d8:ab:c8:60:3e:a6:32:
                    c8:81:ce:82:23:8f:fa:bc:28:21:b1:c9:6d:bd:e5:
                    af:4e:7f:83:31:68:ba:7f:51:d0:ef:ad:4f:5f:1a:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0A:C2:3A:16:CD:81:D0:F7:6C:E5:48:09:CA:B0:F3:26:2C:CF:FC
            X509v3 Authority Key Identifier:
                keyid:EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3336203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:07:d9:80:50:c3:2b:b8:9c:01:67:00:35:83:fa:4d:91:11:
         b3:b4:dd:eb:af:14:fb:15:ee:db:d3:4d:f8:54:5d:35:0e:65:
         02:82:63:8b:75:73:92:cf:be:55:ba:73:87:2f:59:12:cc:7a:
         4e:ec:8c:9c:8b:98:26:9e:89:07:19:dc:58:f1:52:be:b8:6e:
         90:bb:e5:04:64:1b:e2:08:da:9d:05:26:9c:87:47:d2:e4:43:
         dd:3e:e5:e2:c0:25:99:a9:39:49:12:54:26:88:04:e6:3c:93:
         73:a4:9c:21:bb:7e:68:ef:2b:b2:c6:41:7a:d1:5b:a6:0f:fc:
         a8:0e:5d:dc:a5:e9:e4:c3:5f:85:10:7e:b1:7c:d8:23:70:36:
         2e:b8:4a:e3:7b:6d:49:8d:a4:b7:84:07:93:57:1b:f6:99:72:
         62:1e:7f:ba:3b:dd:db:84:9b:b3:b9:c7:17:f2:b2:0f:d7:0f:
         ec:50:89:ff:49:6e:39:8e:65:8e:62:f7:ad:07:5c:57:24:7a:
         28:18:88:46:a5:82:85:bd:f0:45:b3:6f:f7:25:e4:da:88:08:
         de:62:cc:4a:73:d6:e3:c2:b7:3b:11:63:ca:81:a3:54:2c:af:
         16:7d:99:24:50:08:79:1e:20:52:9c:1a:6f:7a:02:87:25:60:
         be:24:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 19:07:42 2024 by rpki-client on console-fra.rpki-client.org