Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356434323a3a2f34382d3438203d3e20323637343230.roa
File:                     323830343a346433633a356434323a3a2f34382d3438203d3e20323637343230.roa (raw, json)
Hash identifier:          /djfCzodiUXm9kPUNoosqjKSOkZvlIK9sGPoxz+w4sY=
Subject key identifier:   92:89:5F:C8:B8:8F:00:10:0E:B0:52:1D:AD:A8:A7:82:E9:42:44:CA
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       448B5F7E4EBBB9F6D954902DC307582E3724DA5C
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356434323a3a2f34382d3438203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:36 +0000
ROA not before:           Fri 05 Apr 2024 01:55:36 +0000
ROA not after:            Fri 04 Apr 2025 02:00:36 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5d42::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8b:5f:7e:4e:bb:b9:f6:d9:54:90:2d:c3:07:58:2e:37:24:da:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:36 2024 GMT
            Not After : Apr  4 02:00:36 2025 GMT
        Subject: CN=92895FC8B88F00100EB0521DADA8A782E94244CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:f3:1a:a3:11:f8:f8:6e:30:53:c7:c5:95:
                    a0:15:b3:6c:3d:6e:d3:7a:b3:9f:87:15:e6:d3:9e:
                    f0:00:fe:92:12:0d:7d:2e:71:f9:59:12:d7:bc:bf:
                    73:58:d1:02:41:6a:03:2f:05:f8:5c:62:2d:a3:70:
                    6a:e1:03:01:5f:69:c7:aa:f7:bb:e9:1e:35:82:f7:
                    64:0c:77:40:27:4b:7a:a2:2b:53:49:ba:40:05:ce:
                    dc:6e:9a:ea:06:77:e8:74:2d:e0:46:c7:08:ac:b7:
                    80:ab:48:51:6a:9e:43:bc:bc:5d:7e:c2:48:fa:2e:
                    fe:5b:af:0c:e2:de:9a:79:84:07:d2:ad:1a:34:04:
                    c6:0f:55:d9:af:01:78:5a:6b:c1:8b:4c:05:28:84:
                    7e:3d:1f:c9:e9:4e:c7:27:cd:8c:96:8f:66:5d:83:
                    e4:18:15:08:30:9f:e4:25:69:52:07:68:e3:7a:03:
                    99:19:c6:9b:e4:c5:1c:01:3f:ec:db:0c:ff:91:c4:
                    0c:28:2b:a8:0a:bf:b3:1f:7c:b9:35:e6:f4:a8:d6:
                    96:71:d7:1b:69:19:a7:f3:f1:cb:dc:65:58:e4:fb:
                    61:4c:04:8c:af:c1:4b:f1:37:5c:07:03:fd:97:0d:
                    37:7a:bc:4c:cf:ee:cb:81:f4:77:fd:ff:6b:df:c4:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:89:5F:C8:B8:8F:00:10:0E:B0:52:1D:AD:A8:A7:82:E9:42:44:CA
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356434323a3a2f34382d3438203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5d42::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:59:3c:ab:fc:44:a3:00:04:0a:27:d0:39:e1:dd:2e:e6:
         35:9f:36:97:ef:3c:6f:1d:50:db:ee:6d:af:84:f2:f8:20:4a:
         53:b1:f6:ea:b1:95:3b:60:1f:08:a1:33:04:51:15:f9:e6:8d:
         c9:36:50:06:d0:45:65:98:41:27:66:2e:7e:a7:91:3a:21:a7:
         6d:b3:7d:72:d1:7c:3d:05:42:7f:ec:c5:90:bc:18:4f:08:e0:
         da:88:e7:3e:39:70:64:1b:a5:b4:7b:82:dd:75:db:ba:95:20:
         0a:93:ba:fb:bd:e4:99:66:24:38:71:6b:b7:28:a5:95:c7:50:
         5c:98:8f:fc:9e:02:ca:d4:19:5e:55:11:f4:62:34:e5:04:a7:
         b9:62:bb:27:06:2a:1b:51:80:dc:c4:a0:33:ca:f4:44:e7:f7:
         fd:fc:3f:e2:f8:a6:d5:49:54:ff:60:3e:8d:d3:27:1e:c5:55:
         12:e9:a8:43:4a:ed:2a:57:b0:4b:7b:49:69:44:f7:ec:2e:9a:
         3d:6b:a6:a9:1b:72:01:1b:0f:b4:ec:24:35:4e:20:5d:4d:84:
         b9:7d:2f:be:4d:c2:29:4d:09:36:77:ec:21:26:92:2b:88:57:
         e5:a9:7a:b6:dc:e5:11:3d:cc:cd:5f:b3:01:e1:69:46:85:10:
         4c:28:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org