Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356434313a3a2f34382d3438203d3e20323637343230.roa
File:                     323830343a346433633a356434313a3a2f34382d3438203d3e20323637343230.roa (raw, json)
Hash identifier:          X3QVprEA9o0cSQ6YGWWu3GkRsoa62Cfluzk38hG8Fx8=
Subject key identifier:   45:FB:8B:F6:8E:6A:F6:84:CA:E0:C9:15:95:4D:1B:A8:9F:F8:61:3C
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       3F5515284C5F5A07F147E17437856CCC5A888EFA
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356434313a3a2f34382d3438203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:36 +0000
ROA not before:           Fri 05 Apr 2024 01:55:36 +0000
ROA not after:            Fri 04 Apr 2025 02:00:36 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5d41::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:55:15:28:4c:5f:5a:07:f1:47:e1:74:37:85:6c:cc:5a:88:8e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:36 2024 GMT
            Not After : Apr  4 02:00:36 2025 GMT
        Subject: CN=45FB8BF68E6AF684CAE0C915954D1BA89FF8613C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:5a:95:ae:7d:ec:6f:be:d9:7c:9a:3f:12:
                    6c:d6:39:be:31:3e:3a:f5:54:d7:81:f6:9a:00:c5:
                    d1:a3:f8:13:32:74:c5:cd:3b:7e:9c:84:5d:a7:d9:
                    76:3d:52:56:49:a8:fb:4a:5b:a1:39:e1:96:cd:0b:
                    a6:08:b3:60:22:7d:11:7c:37:c1:d6:07:e9:15:ce:
                    a2:b9:a0:13:4c:1a:d8:95:eb:32:1b:0b:9a:1e:f6:
                    7a:be:7e:88:9c:98:fb:51:88:65:14:a4:0d:b8:cc:
                    65:2b:52:c9:cd:f2:1f:eb:6d:33:6a:b4:08:a2:cb:
                    a8:2e:d6:5b:35:3f:66:76:b9:86:8b:3f:97:b0:eb:
                    2b:4a:ef:39:33:98:f7:05:55:42:ce:81:68:24:9d:
                    46:24:cb:da:1e:40:77:e8:73:53:b9:be:0f:f2:88:
                    b6:38:c6:2d:12:5c:70:ea:33:f2:c3:13:e3:3f:05:
                    d6:04:2e:ef:92:08:27:16:c7:6f:76:75:01:4a:5b:
                    1d:18:33:d1:2a:ca:af:32:c9:7a:09:fc:69:b9:5d:
                    bf:bd:94:d2:42:81:e3:77:25:8b:56:88:58:38:98:
                    96:38:33:68:d6:a4:9f:74:20:7e:34:50:ac:a7:44:
                    98:d8:6a:3b:91:0d:5a:21:66:05:11:51:d5:44:82:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FB:8B:F6:8E:6A:F6:84:CA:E0:C9:15:95:4D:1B:A8:9F:F8:61:3C
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356434313a3a2f34382d3438203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5d41::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:99:fb:cc:6c:81:9d:ed:8c:14:36:89:2f:f3:2f:1c:24:ba:
         8b:b7:b8:0f:d2:37:9a:b0:68:f8:29:11:14:5c:6e:83:9b:ae:
         61:1a:0c:60:7e:91:40:98:d0:6b:66:74:c1:21:b9:74:b9:ea:
         ba:6a:f7:96:b5:1c:cc:c3:4d:22:16:63:12:a5:de:cd:f5:7f:
         6e:81:ee:97:c9:59:9f:ef:22:e1:d9:e1:cb:50:dc:55:3c:eb:
         14:17:cb:8b:6b:b9:45:a1:6e:55:2d:1a:7c:d6:44:29:ae:2e:
         fd:9e:f1:54:ac:cf:b7:59:1d:11:84:89:79:1e:4a:cf:86:a5:
         27:72:d9:24:75:1f:92:8d:b3:ac:7a:c1:f9:dc:62:04:c7:c8:
         8e:21:c8:d7:26:75:d8:35:db:8c:64:88:5a:14:f0:38:8b:9e:
         24:44:c5:0f:14:92:52:8e:c4:e2:e8:04:92:8a:f4:ce:c7:48:
         15:4d:62:2c:95:62:ab:b0:62:d7:fb:ac:c1:fc:0d:0a:f1:3f:
         d4:06:c2:5b:ed:5b:32:8d:a3:05:e7:4f:b0:eb:1a:9f:97:6c:
         ac:18:77:fb:4e:1e:a3:bf:af:73:22:60:bf:6e:98:34:bb:35:
         a4:6d:c3:f6:35:0e:11:ec:b6:be:ce:3f:b1:2f:06:54:f2:9f:
         b4:18:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org