Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a313030303a3a2f34382d3438203d3e20323637343230.roa
File:                     323830343a346433633a313030303a3a2f34382d3438203d3e20323637343230.roa (raw, json)
Hash identifier:          fNsA2w4bXDjgqQy609aVSNe/A+tgGzKBbBlCjVi/9Ks=
Subject key identifier:   26:97:C2:2A:61:3F:18:14:D3:3B:4B:38:A0:24:51:D4:D0:BA:6F:15
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       2822D4432C22FFC941F57F13452509544D78EBE4
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a313030303a3a2f34382d3438203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:1000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:22:d4:43:2c:22:ff:c9:41:f5:7f:13:45:25:09:54:4d:78:eb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=2697C22A613F1814D33B4B38A02451D4D0BA6F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:e9:5d:cb:85:01:27:7b:25:20:e1:c1:1b:
                    aa:9f:fa:2e:07:7f:07:01:95:60:20:38:f2:51:58:
                    5d:82:bc:87:53:78:aa:2f:64:43:db:94:de:24:80:
                    29:40:9c:22:90:8a:b1:73:0d:03:8c:92:ee:fe:23:
                    d0:0d:51:df:e4:54:6e:f3:ec:7d:58:2f:c7:36:d4:
                    c3:0d:e7:bf:2c:c5:44:7f:23:bd:f4:67:16:ed:08:
                    53:23:15:b0:37:da:01:a0:62:a3:ae:47:d1:f9:0a:
                    7e:f8:cb:9c:62:64:ca:61:20:0a:f1:3b:97:6c:7f:
                    48:77:23:b0:de:7c:63:38:e4:31:e3:45:bb:aa:f1:
                    6b:5b:c5:f2:7c:cd:b0:3d:f7:14:6b:b2:48:2b:a5:
                    10:e1:0e:88:c5:51:68:68:29:d6:f0:f9:5b:9d:52:
                    b0:39:5f:61:a9:e5:d9:40:95:11:d4:20:b7:52:31:
                    bf:b3:00:08:90:98:b6:bb:49:cd:fb:21:f9:f1:2f:
                    df:53:99:bf:10:42:fa:0e:7b:04:94:de:0a:19:e1:
                    fd:91:22:a0:98:dc:67:24:09:d5:d0:89:79:18:6f:
                    91:56:a8:2a:57:6a:6b:cd:74:da:30:69:82:5d:07:
                    c0:03:75:15:d0:fe:86:d3:ba:63:28:45:77:0c:3b:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:97:C2:2A:61:3F:18:14:D3:3B:4B:38:A0:24:51:D4:D0:BA:6F:15
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a313030303a3a2f34382d3438203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:58:f9:f4:fb:b1:4c:0d:ec:02:1e:e9:02:1f:eb:a9:11:
         e4:90:fd:d8:16:24:c6:5b:19:09:0b:30:d8:42:5b:71:e6:58:
         b8:7c:82:ae:2e:b0:10:3c:bf:23:ee:9e:23:42:e0:17:03:3d:
         20:fe:e7:0a:17:62:38:78:d6:d0:f2:97:4e:ee:78:f1:bb:d2:
         ff:b4:20:9a:90:ee:10:78:3e:60:d4:76:52:34:75:c8:91:0e:
         c2:7f:04:a4:a9:6e:a3:fb:8b:d0:97:ff:45:7e:b2:1a:35:bd:
         f2:43:3e:da:68:97:eb:8c:87:8e:fe:4f:89:aa:e1:43:c4:08:
         e3:9e:28:10:48:36:6a:ed:e0:f1:3c:e9:4f:90:9f:3c:29:fb:
         4a:52:a9:72:43:e5:a1:cc:31:0f:76:92:2d:c8:9c:2b:31:ad:
         0d:52:a3:78:76:c7:37:01:eb:66:22:5e:62:b2:81:d9:69:f9:
         f9:3f:48:54:73:be:2e:ab:e2:18:77:dd:42:3b:71:29:e6:da:
         38:04:29:52:fc:5c:00:e8:d4:c3:96:36:f6:59:e0:51:a8:46:
         c6:6a:e8:d6:f0:7d:98:47:03:de:d4:1e:6e:0c:9c:cd:02:cd:
         5f:3a:0d:49:2d:95:94:bc:13:d1:8f:16:95:72:af:b5:85:8d:
         4f:d3:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org