Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3836303a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a3836303a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          QBjzgv5XiTYeqftCT954AFW0dCNijR+nRXajtGkyNbo=
Subject key identifier:   31:1F:06:24:F5:EC:80:32:2A:AC:4D:B0:00:56:F5:89:7F:82:85:0A
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       298D6DF061FA4F724332D21B09BE95B7871A6772
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3836303a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:860::/45 maxlen: 45

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8d:6d:f0:61:fa:4f:72:43:32:d2:1b:09:be:95:b7:87:1a:67:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=311F0624F5EC80322AAC4DB00056F5897F82850A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:0b:ea:ea:2f:66:f8:f3:d3:6f:f7:d6:66:
                    d6:8e:e5:53:87:44:7f:df:b6:70:01:b3:52:2b:56:
                    d9:bb:bc:cb:29:db:81:42:b5:95:5a:93:70:68:00:
                    6a:2b:bc:2c:37:ca:1f:17:b9:2c:fe:c5:1e:bd:f3:
                    aa:e0:a1:76:f4:5b:ff:3e:4f:8b:96:fb:93:df:7f:
                    b9:e8:9c:fd:d2:67:8c:29:42:aa:2c:6f:b9:4d:15:
                    9f:0c:bc:31:07:c5:f7:c0:a8:fd:8e:f0:6f:d9:e8:
                    d3:20:05:c0:1d:f2:fb:14:c1:aa:f9:c7:40:f8:54:
                    ca:6e:b0:2b:20:a4:d6:0a:62:96:c6:39:d6:12:5b:
                    2a:e3:69:ab:5f:47:95:46:36:7d:0f:be:74:21:e1:
                    7e:51:83:36:88:b1:44:fa:c8:22:b8:cc:f0:dd:74:
                    af:60:9d:2d:17:b9:e1:94:83:9c:6a:a1:d4:bd:0f:
                    e3:45:07:9a:cd:9f:35:47:4e:8e:33:9d:12:20:3d:
                    4a:aa:69:ff:f3:17:99:8c:75:c3:83:ae:f1:66:a5:
                    cd:54:e3:0a:3e:80:e1:af:43:2e:98:e4:03:54:18:
                    7a:fb:de:e3:2b:eb:d8:e5:a7:a8:ec:3a:b9:99:48:
                    6b:09:5e:42:41:c8:b3:44:e9:d1:88:ba:72:0e:75:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1F:06:24:F5:EC:80:32:2A:AC:4D:B0:00:56:F5:89:7F:82:85:0A
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3836303a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:860::/45

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:2f:c4:6c:6e:e5:cf:d9:a1:9e:5b:42:7d:0f:e4:01:d6:
         c3:5a:31:d6:71:e3:c6:c7:0b:e3:98:7a:c3:33:7a:34:95:81:
         9e:d8:3d:54:31:d0:e2:eb:08:35:35:20:2b:a4:ff:39:69:fe:
         5f:ac:c2:7f:13:52:09:dc:a5:d6:04:87:fd:b1:64:cf:18:d3:
         cb:ef:bd:d2:f7:8a:c3:b9:09:28:35:d4:09:6d:3c:08:15:21:
         f3:60:cc:c3:cb:0f:75:96:28:ec:8b:3e:52:8b:a3:22:c7:17:
         d2:6b:4b:f0:a1:45:cc:03:c4:df:b1:fb:85:cc:af:08:81:d2:
         77:c9:b5:37:4a:06:0a:82:d3:49:11:51:a0:47:ad:ea:c6:9a:
         7f:8f:06:86:3d:91:61:39:b0:d8:94:f5:03:93:ec:da:06:64:
         eb:93:58:93:11:de:56:b3:ce:05:20:b6:a1:a8:5d:1a:f8:93:
         84:0a:72:e5:a6:55:b3:a1:07:ec:47:2f:96:b0:0e:25:ea:69:
         3d:dc:1b:14:cd:a6:0a:2f:83:7d:be:25:f3:07:51:db:94:ee:
         d4:1e:07:61:78:e1:96:5d:b2:73:47:3b:0a:37:8f:fe:d6:cb:
         a6:4c:80:3f:ae:0c:fc:30:47:5b:9a:ef:c5:87:4d:11:e6:2b:
         b4:93:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org