Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a316530303a3a2f34332d3433203d3e20323637343230.roa
File:                     323830343a346433633a316530303a3a2f34332d3433203d3e20323637343230.roa (raw, json)
Hash identifier:          NazITW0oy3fah0aBTv0+gLmsXXfTFYDM+CR80umlRyI=
Subject key identifier:   AF:3B:68:14:89:94:7D:C7:A6:0E:A4:F0:3A:E8:34:C3:05:9A:7F:E3
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       50643BD44DDBFCB9D4250DAFD63EDFF361B254FF
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a316530303a3a2f34332d3433203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:1e00::/43 maxlen: 43

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:64:3b:d4:4d:db:fc:b9:d4:25:0d:af:d6:3e:df:f3:61:b2:54:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=AF3B681489947DC7A60EA4F03AE834C3059A7FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:3a:44:cc:65:99:08:ca:77:ba:48:58:62:
                    fe:48:4c:46:c7:eb:dc:31:c9:ab:5d:7f:82:6b:2e:
                    ed:15:f5:e7:29:bf:98:a1:12:0f:21:84:14:6e:62:
                    cc:fa:43:6d:1a:d2:4b:6a:b8:16:5d:8d:1a:27:2a:
                    e1:b3:21:6f:68:dc:34:07:2f:23:30:6e:0f:17:27:
                    dd:ae:7c:10:72:0d:8e:cc:78:ad:66:eb:57:d1:bd:
                    a4:12:24:8f:22:bf:fc:e6:2e:e8:91:5b:8d:ec:44:
                    b2:8d:8d:a5:8a:1d:5d:2b:1f:27:11:3b:06:5d:a7:
                    53:4c:8c:05:b6:f1:10:33:6f:9c:6c:2d:1b:91:9d:
                    ac:05:34:67:b3:69:f6:1b:c1:03:af:d3:fb:14:f9:
                    e1:28:ec:d5:82:85:a9:be:27:a3:40:a9:28:f9:b0:
                    3b:e9:5c:6f:f9:7b:90:27:ed:c5:8a:89:27:37:2f:
                    94:d4:8d:9c:65:c8:7a:34:ce:c1:16:ca:bb:3a:b3:
                    1b:a0:28:5e:bb:d5:05:90:a9:ba:23:69:8f:ba:f8:
                    8c:bb:55:aa:4d:aa:76:2a:06:9a:5c:4f:2f:d4:3c:
                    1d:bc:2f:c5:49:3e:5f:29:36:01:2d:bf:1f:bd:5d:
                    b5:15:bb:2a:84:cc:9c:63:08:68:50:52:b0:d7:31:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3B:68:14:89:94:7D:C7:A6:0E:A4:F0:3A:E8:34:C3:05:9A:7F:E3
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a316530303a3a2f34332d3433203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:1e00::/43

    Signature Algorithm: sha256WithRSAEncryption
         95:2b:a7:ec:5b:e4:95:b8:37:1a:73:5e:49:ac:bc:42:ea:f7:
         14:a7:3f:6a:a9:13:76:81:94:45:bd:9b:4a:ea:19:98:de:2d:
         30:4f:95:6f:b3:74:20:a7:ed:d2:47:02:c2:44:60:3d:76:ad:
         00:61:4d:3b:38:26:bb:67:e2:2d:c9:c2:1c:62:99:39:1e:af:
         9a:2c:da:fa:b9:73:69:f2:aa:d1:81:66:0f:aa:ce:4e:6a:dd:
         ff:3a:9e:41:99:f2:69:81:d6:2f:70:eb:7e:3f:43:e1:eb:44:
         35:13:15:b2:44:33:44:41:bb:20:02:c4:09:8c:f5:dd:c5:fc:
         0f:d0:73:7b:eb:0f:07:32:dd:04:25:14:e8:52:48:bc:5b:8d:
         3b:02:ad:16:55:01:c9:54:44:d9:e0:4b:75:31:95:a2:0f:31:
         83:ed:02:98:98:a9:13:ff:ce:db:e2:66:de:13:92:1a:f5:f9:
         33:fa:b8:41:1d:59:8a:c8:52:93:e3:b3:f1:0d:eb:20:e8:e3:
         f3:84:0c:a1:2d:ca:0f:53:0d:89:fb:9d:33:5d:09:93:2c:76:
         c4:c4:65:ac:d3:e4:57:10:17:b4:fa:ed:ff:7c:ea:48:f1:a8:
         2a:c7:84:a5:cd:7a:03:9d:44:d9:d2:bd:54:c5:c0:1e:93:ae:
         1c:81:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org