Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a323030303a3a2f34312d3431203d3e20323637343230.roa
File:                     323830343a346433633a323030303a3a2f34312d3431203d3e20323637343230.roa (raw, json)
Hash identifier:          AmCraAyoyGS+7KVManE7HTYVXkx5CNtGEG2QvvkDwXI=
Subject key identifier:   82:6C:7E:66:B3:EF:89:F8:BA:01:15:A5:92:D7:D0:6C:88:FB:BD:DD
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       7AAD58BE1091CABB85B41C1BF1207A5E199F50A7
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a323030303a3a2f34312d3431203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:38 +0000
ROA not before:           Fri 05 Apr 2024 01:55:38 +0000
ROA not after:            Fri 04 Apr 2025 02:00:38 +0000
asID:                     267420
IP address blocks:        2804:4d3c:2000::/41 maxlen: 41

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ad:58:be:10:91:ca:bb:85:b4:1c:1b:f1:20:7a:5e:19:9f:50:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:38 2024 GMT
            Not After : Apr  4 02:00:38 2025 GMT
        Subject: CN=826C7E66B3EF89F8BA0115A592D7D06C88FBBDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:d9:c0:89:f7:59:86:10:74:32:87:58:29:
                    63:01:21:6a:d4:5e:7f:6e:62:2c:e6:d4:ec:33:57:
                    f6:20:22:3b:79:48:f4:ef:99:95:1d:6a:e7:c4:f1:
                    3c:fd:95:68:25:31:db:45:02:99:31:22:43:31:f9:
                    ff:f7:21:53:54:1d:38:37:d5:00:e4:f0:aa:28:7f:
                    26:b1:39:0e:49:c6:a8:5f:e5:9a:fc:1d:9d:de:9c:
                    16:40:c7:9d:c5:ce:83:bb:8e:cb:e7:5f:f0:c5:f6:
                    2f:0a:84:e7:19:04:e1:28:46:74:f4:91:47:86:c7:
                    60:39:88:14:51:0d:f1:86:06:5c:43:0a:a4:9a:4f:
                    13:5c:d0:dc:6a:6e:6c:01:62:35:50:8c:43:07:42:
                    e8:a8:dc:fd:59:f9:f8:63:7d:b3:e3:94:77:67:d8:
                    86:e4:9e:96:12:7e:2b:13:26:f2:3f:e1:08:43:21:
                    40:3c:bf:a6:ab:66:62:e1:d0:c9:60:e9:1e:ce:95:
                    fe:08:81:e7:5f:8f:3d:56:17:d5:84:19:d1:07:bb:
                    33:7d:ac:5d:14:66:5b:41:71:6f:68:12:d5:a2:42:
                    7d:e5:0d:fa:6d:81:c9:79:45:34:dc:6d:87:7e:b2:
                    81:df:5f:f9:5e:18:d9:89:d5:d8:b1:54:e6:1e:38:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6C:7E:66:B3:EF:89:F8:BA:01:15:A5:92:D7:D0:6C:88:FB:BD:DD
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a323030303a3a2f34312d3431203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:2000::/41

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:52:c8:b4:4e:85:74:7c:c9:61:05:58:96:ab:2f:c3:54:
         dd:35:28:05:b5:05:13:00:4b:f1:ad:ca:f9:14:39:1a:37:c9:
         2d:c1:81:d2:50:fa:e7:12:d7:74:02:f5:46:ab:d4:78:9d:29:
         4a:34:f2:63:a0:37:81:0b:2a:50:8c:43:70:25:75:7a:f5:c4:
         98:84:be:68:99:3f:29:09:52:dd:b2:10:a6:1d:19:23:f6:ad:
         e1:7e:66:4c:76:73:78:2f:d8:28:59:3c:61:88:b3:3c:2d:5e:
         cf:fc:af:16:c4:fe:b8:5b:e1:4a:b1:bb:39:6b:96:2e:72:24:
         8c:03:43:a1:bc:79:0e:ea:89:24:42:5d:b2:ee:b4:55:ad:5c:
         0a:4b:93:e6:d9:81:87:36:f7:51:d3:f9:0d:88:83:74:7e:5c:
         d3:8f:f3:20:c4:8f:3f:e2:79:18:cc:87:36:90:1d:b0:bf:60:
         49:e9:4f:66:4b:a7:d7:e7:0d:d3:a7:5c:c4:1b:85:99:58:97:
         fb:ac:53:4c:55:93:bb:07:4f:9d:0f:ce:92:36:10:3a:e9:5b:
         58:93:d5:f7:46:0f:4b:e3:bb:ae:25:7d:21:0d:af:da:34:e1:
         f5:ab:57:63:be:dc:9c:a8:ee:6b:92:1c:a3:d4:e2:98:1d:95:
         cc:48:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org