Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3836383a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a3836383a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          5p3DG9clrIAGy07STDrKN05kRmpgqPzeq5rLqSZA5Lw=
Subject key identifier:   5A:80:08:39:3E:8B:1D:5A:8A:FC:BE:CA:A2:9C:E5:2B:9F:71:2F:C6
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       6DA1C5DA67D24625EA99686A79F763A34DA94E3C
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3836383a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:36 +0000
ROA not before:           Fri 05 Apr 2024 01:55:36 +0000
ROA not after:            Fri 04 Apr 2025 02:00:36 +0000
asID:                     267420
IP address blocks:        2804:4d3c:868::/45 maxlen: 45

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a1:c5:da:67:d2:46:25:ea:99:68:6a:79:f7:63:a3:4d:a9:4e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:36 2024 GMT
            Not After : Apr  4 02:00:36 2025 GMT
        Subject: CN=5A8008393E8B1D5A8AFCBECAA29CE52B9F712FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:1a:5d:09:4e:5b:e9:50:69:0e:aa:92:33:
                    77:14:70:eb:61:9f:6a:a2:65:3c:b9:21:50:e9:5a:
                    c9:89:60:b5:65:c2:6a:41:d0:9d:cb:c7:63:08:d9:
                    45:13:6c:a4:a9:3a:d5:92:fd:5d:f0:17:71:09:51:
                    15:2d:84:f7:f0:85:be:14:ac:44:04:17:7b:4f:c7:
                    b8:3a:22:f5:26:8d:aa:f7:30:2f:e5:da:bb:6a:ae:
                    0f:f6:ba:32:b4:03:c5:51:91:7c:17:c7:49:58:7f:
                    24:f8:de:d4:8f:7f:0b:9a:2e:e7:c8:35:b2:2b:b3:
                    9c:5a:cc:8c:cb:3e:19:34:4c:14:0f:49:48:ae:9e:
                    47:8c:e9:ce:dc:61:b2:d6:49:08:41:27:7e:8b:e0:
                    7f:85:f6:96:0a:71:d2:34:e1:34:30:d9:ad:b8:2a:
                    f4:8e:40:c7:42:c4:a4:dd:4a:16:c1:23:76:4f:4b:
                    9f:86:ab:2d:01:80:c0:07:a9:8a:47:a4:31:9f:16:
                    76:2e:29:bf:4b:c9:ab:0b:28:eb:45:c6:a8:09:87:
                    5e:45:b2:fd:09:22:71:3a:d3:ae:72:3a:bb:fc:6f:
                    42:02:a7:93:85:70:f8:8c:e0:90:eb:81:7a:45:ef:
                    5f:be:56:b1:ef:64:1f:fc:7e:81:b9:8d:0f:e6:2c:
                    4f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:08:39:3E:8B:1D:5A:8A:FC:BE:CA:A2:9C:E5:2B:9F:71:2F:C6
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3836383a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:868::/45

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:ca:92:b7:61:97:79:06:57:0f:8d:a0:73:e1:e9:78:13:
         b8:a0:7c:ee:2a:fa:5a:b9:97:da:f3:3e:67:86:5e:6f:5b:a8:
         2f:30:1f:cc:30:97:66:ef:98:ec:e3:51:69:06:f2:34:e5:6d:
         96:f7:6f:90:b0:08:a2:9f:8f:2a:a4:c5:40:ac:27:b8:7f:4c:
         bf:86:4c:49:d2:0b:0f:c3:47:43:6f:78:0b:d8:0b:5d:62:96:
         9f:eb:ee:7f:eb:c3:c9:00:4a:98:51:78:0a:b6:53:ba:30:61:
         dd:a0:66:b8:8b:36:9e:3a:b7:ca:0b:2f:01:d0:66:0b:8c:5b:
         e1:7b:15:26:96:5a:7d:59:9b:28:d5:05:b4:ac:f0:17:48:56:
         65:33:16:c2:ea:9e:ac:ac:ec:6a:b6:02:e9:cf:b3:60:77:d4:
         e5:8a:f3:c0:d0:e4:42:de:12:d3:4b:f6:b3:80:92:54:14:28:
         ad:bd:c3:92:81:a8:dd:87:65:8b:f3:8e:70:58:ed:bc:a7:38:
         8c:7e:d3:da:e0:62:a3:38:ef:9e:19:44:59:72:99:94:2b:f4:
         61:f5:aa:2a:c7:97:6a:80:e9:d5:34:45:b9:c6:c2:73:ba:f9:
         bc:56:9b:18:41:38:bd:6b:d7:bd:dc:96:fe:39:35:34:0d:53:
         fe:f5:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org