Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a326530303a3a2f34372d3437203d3e20323637343230.roa
File:                     323830343a346433633a326530303a3a2f34372d3437203d3e20323637343230.roa (raw, json)
Hash identifier:          G5FIfOug0aSzB8JaCZgc9+qEoeVd0rmTD36o5hYZxTE=
Subject key identifier:   1B:9F:28:F1:8D:90:66:28:C5:06:1F:B9:C9:A0:A8:55:A4:FC:D2:FC
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       3E72900F879486FA4CAD6E7711AC8581902BBEAA
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a326530303a3a2f34372d3437203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:38 +0000
ROA not before:           Fri 05 Apr 2024 01:55:38 +0000
ROA not after:            Fri 04 Apr 2025 02:00:38 +0000
asID:                     267420
IP address blocks:        2804:4d3c:2e00::/47 maxlen: 47

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:72:90:0f:87:94:86:fa:4c:ad:6e:77:11:ac:85:81:90:2b:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:38 2024 GMT
            Not After : Apr  4 02:00:38 2025 GMT
        Subject: CN=1B9F28F18D906628C5061FB9C9A0A855A4FCD2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:02:b9:7f:0a:e3:87:60:4d:f8:72:c7:f3:
                    9b:df:04:b7:35:00:62:4a:e9:ef:b6:cc:3d:e3:fa:
                    c4:ca:c1:25:f1:01:09:23:19:c4:a1:b1:9f:76:96:
                    54:09:57:3c:c8:58:5e:87:c1:fa:50:c0:b5:b7:26:
                    13:80:dd:02:9a:d9:c3:a9:51:36:dd:a9:8a:34:43:
                    2f:0a:ff:5d:0f:15:a8:f7:3a:19:ba:0b:2c:7a:81:
                    64:a9:ad:ef:d6:3f:4c:5b:c0:2e:d3:dc:89:20:8e:
                    bb:78:85:a4:01:7e:e8:45:ca:cd:12:38:58:02:59:
                    15:a5:6d:ee:2e:a8:9c:8b:df:75:de:24:01:c9:49:
                    a9:af:30:d2:b8:f7:e2:23:6b:23:b5:6b:2f:48:9a:
                    2b:51:32:a3:6a:5a:b8:b4:35:2e:a4:b8:ec:1e:a3:
                    e6:62:6f:e7:95:d4:11:e0:fe:2e:61:69:ad:19:a2:
                    e0:05:2c:ff:4a:43:d7:6a:02:a4:46:b6:b5:63:65:
                    61:85:27:d0:88:86:43:e0:f3:03:8d:58:b3:13:12:
                    c2:9b:5a:cc:b1:24:d5:09:28:07:08:36:56:1d:71:
                    bc:11:d2:ce:f9:c2:f3:f5:87:5e:66:94:9a:e9:14:
                    48:32:07:08:26:f8:16:81:0f:63:c3:f8:21:0a:ce:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:28:F1:8D:90:66:28:C5:06:1F:B9:C9:A0:A8:55:A4:FC:D2:FC
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a326530303a3a2f34372d3437203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:2e00::/47

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:00:4b:ec:83:e1:d0:05:9a:aa:0c:c5:c5:6e:51:e4:ce:
         7d:fc:14:7d:9a:65:89:01:cb:34:4f:5d:55:fb:66:1c:fc:bf:
         e4:99:06:fa:48:8b:cb:3b:3e:fb:74:16:d8:54:6e:31:9c:33:
         ee:8e:07:78:da:a7:9b:4b:69:8c:e8:d3:3f:24:e3:8c:c8:72:
         c2:e6:d0:25:32:f5:f1:e5:80:84:02:c5:79:78:09:39:53:22:
         49:06:53:2f:c5:23:52:bd:c2:6c:90:e8:d0:6b:a6:28:5a:e1:
         7b:a2:7e:3c:60:4f:84:7f:54:4a:9d:d2:8e:77:2c:3a:f4:a4:
         fd:a9:41:34:e3:37:ef:18:ca:10:d6:a2:2b:f3:9c:30:ad:91:
         42:ab:69:47:f9:a6:11:dd:b9:2a:6d:23:15:a5:7b:45:d3:93:
         24:90:0a:c1:05:81:27:6f:96:10:3e:92:ec:d4:da:cd:45:fa:
         64:77:02:b1:ec:d9:88:09:bb:46:1a:77:3d:5f:08:82:29:59:
         9b:9a:24:f8:2b:e8:c8:86:dc:a1:33:e2:aa:4c:0e:ab:b9:55:
         69:f8:b9:c1:f5:f7:37:9e:cb:12:db:76:6b:9d:02:03:ea:e6:
         bb:98:dd:22:f4:28:71:5d:9b:c4:37:76:b9:70:bc:57:e0:47:
         57:5c:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org