Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356463303a3a2f34332d3433203d3e20323637343230.roa
File:                     323830343a346433633a356463303a3a2f34332d3433203d3e20323637343230.roa (raw, json)
Hash identifier:          nFXU7jZpgCsUqB+mHVWiCTuWrk3hAeJ6/jws5v5ANDY=
Subject key identifier:   FA:B7:2D:A2:B4:4A:32:CE:E3:8D:F4:9E:4E:E8:3B:63:09:EB:84:65
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       6F02E74ADAAF9EFB6FA3814B2516B2EC573EE8FB
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356463303a3a2f34332d3433203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5dc0::/43 maxlen: 43

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:e7:4a:da:af:9e:fb:6f:a3:81:4b:25:16:b2:ec:57:3e:e8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=FAB72DA2B44A32CEE38DF49E4EE83B6309EB8465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:7d:82:55:55:ff:48:3e:f7:11:39:8c:94:
                    5c:00:14:d3:fd:93:31:9c:8a:c7:f1:60:e6:98:c7:
                    7a:71:70:96:70:7e:8f:64:de:9c:8b:ca:20:82:d7:
                    93:9e:55:ee:e0:f7:43:2f:2b:1a:5c:0f:38:9b:8b:
                    c0:7c:8f:cd:7d:aa:91:32:2f:54:45:74:78:09:80:
                    94:cc:ca:d9:3a:21:13:01:0f:75:35:34:14:4e:87:
                    ee:55:c8:2e:1b:d0:9a:18:19:24:95:92:71:b8:f4:
                    a7:c9:0e:52:cc:98:c0:24:c1:31:fc:36:e4:ca:df:
                    42:72:28:78:90:4c:a6:85:5e:02:f3:aa:ac:f8:3f:
                    f7:e0:b4:c6:c5:5c:64:19:03:1a:26:2d:b9:ec:b6:
                    37:45:d6:81:d1:1d:eb:0d:c0:01:43:34:7e:f6:9c:
                    9f:24:e4:88:ad:32:05:b2:b6:ee:4e:46:ce:92:45:
                    51:fe:a7:d6:c6:44:16:ca:11:47:02:0c:05:96:50:
                    54:75:ab:10:3d:17:c3:f4:65:6f:53:c6:d8:df:9d:
                    19:74:a0:42:24:1c:67:16:7c:58:c7:15:2e:fe:07:
                    d3:f9:14:dc:fa:67:84:5b:b0:d0:46:2f:b7:62:a1:
                    08:cb:8f:17:cc:29:45:70:25:ad:a6:9b:5d:5c:09:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B7:2D:A2:B4:4A:32:CE:E3:8D:F4:9E:4E:E8:3B:63:09:EB:84:65
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356463303a3a2f34332d3433203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5dc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:ac:9f:7f:a2:04:16:7a:b5:d8:79:a3:38:11:13:ad:56:
         ae:79:b7:15:45:51:1e:3f:94:17:7f:0e:17:f8:7e:89:7a:d4:
         14:c0:62:cf:45:e6:38:23:00:1f:b1:50:d5:a8:21:32:dc:73:
         ca:16:d8:8c:01:2a:d2:93:c0:22:62:fa:5b:de:02:9a:b6:51:
         fa:66:34:1a:d7:36:e4:76:2c:3b:6a:5a:67:68:91:c0:27:f7:
         9d:50:cd:2c:99:97:8e:02:c3:39:10:3a:ef:ca:28:bb:06:4d:
         c7:11:56:35:b8:5e:3c:ce:15:f6:3f:b2:9e:e8:11:da:6f:c3:
         18:89:8e:3e:c0:8f:4b:ce:2e:c1:b7:e5:b5:62:7c:f3:8e:c3:
         26:cf:c2:62:41:57:55:56:cd:64:5c:29:47:37:d9:37:a0:2b:
         a6:1f:ec:95:12:3c:ff:13:b3:87:af:46:09:0c:d8:2d:27:64:
         3b:13:c9:cf:e6:4b:a1:bf:4f:b9:49:db:13:d9:0f:19:ff:6f:
         c0:b4:c4:7d:a1:3f:d0:25:3e:ae:82:c0:a5:5d:02:c1:e8:a3:
         15:e3:e3:43:10:f4:2c:1b:71:4e:06:b7:89:dd:23:bd:a3:de:
         ce:3f:b2:e3:1e:7d:84:ed:a7:8c:40:f3:7e:87:98:50:76:7e:
         77:95:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org