Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3861303a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a3861303a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          VbTOVLJ0KGdz0BHNlWachrlgtcHoi5sQUR3f1YjXEGU=
Subject key identifier:   51:F6:92:29:B7:CF:D3:11:10:CA:8F:1F:E8:E5:28:7C:99:A1:F8:9E
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       06B8FB791B917601EC51396C906E6F0CD13F5616
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3861303a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:8a0::/45 maxlen: 45

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b8:fb:79:1b:91:76:01:ec:51:39:6c:90:6e:6f:0c:d1:3f:56:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=51F69229B7CFD31110CA8F1FE8E5287C99A1F89E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:48:d3:fa:7f:4a:b1:68:1f:c5:8e:6c:10:
                    7f:49:fe:f3:7f:7f:49:9a:c0:ba:ad:51:c2:42:bb:
                    0a:ab:63:b1:f4:7b:0e:d3:2c:fe:46:1b:82:9b:88:
                    6b:52:a5:c2:85:7c:82:52:db:9d:af:43:20:aa:66:
                    55:c3:52:45:8b:c6:fa:40:e4:da:73:6c:86:48:51:
                    b6:f1:70:44:bd:eb:2f:1d:6d:10:c4:9e:50:72:8e:
                    5a:ff:30:c7:68:94:67:45:5d:f2:4c:20:75:d7:10:
                    4a:74:01:b0:8d:a0:45:aa:56:ef:6e:f4:2a:2f:11:
                    5e:0c:9b:f7:09:e1:dd:d5:1a:29:70:73:3b:8d:70:
                    25:09:a9:a2:a7:1c:84:0b:69:f1:cf:35:76:50:f3:
                    bc:35:26:7c:6d:a5:6d:14:b6:9e:94:79:34:6e:94:
                    a8:16:04:af:98:bb:4c:13:78:7b:05:14:d3:33:86:
                    90:ee:5d:b3:37:83:bb:fd:ef:02:00:35:91:78:0e:
                    b7:19:75:3a:12:8a:c1:5f:d4:00:c5:ff:89:4f:f3:
                    ae:3f:8b:38:84:c4:17:2a:76:fc:ff:db:fb:ca:44:
                    51:cd:3c:e7:ba:f0:04:6e:6c:30:2e:fa:91:fa:03:
                    4a:55:34:92:95:45:9a:4b:55:c1:57:62:8c:b0:f4:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:92:29:B7:CF:D3:11:10:CA:8F:1F:E8:E5:28:7C:99:A1:F8:9E
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3861303a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:8a0::/45

    Signature Algorithm: sha256WithRSAEncryption
         34:fb:ef:55:f5:65:9d:a4:e8:ed:8c:cd:07:ec:02:dc:a1:6f:
         07:f0:7b:31:b2:3a:ee:75:cb:75:43:06:6e:b5:01:96:de:7e:
         9d:41:30:a2:63:58:44:5d:3d:b9:ab:2c:7b:06:7a:5a:43:f6:
         d6:84:75:c7:7c:3e:16:72:00:c3:86:86:27:ca:27:57:94:2e:
         a1:39:60:7b:b3:66:ca:bb:97:00:dc:e4:b9:ca:5c:a9:f9:80:
         37:b7:d6:2d:bb:71:d0:a9:a6:60:02:02:28:b2:37:12:b8:72:
         d8:62:b7:53:ef:ad:79:72:7d:2c:5c:d0:3e:48:27:53:cc:71:
         10:57:43:dd:7a:53:85:92:02:71:d5:71:be:36:ba:be:97:e3:
         64:4a:a4:a1:70:35:28:df:50:a0:17:b0:ad:39:e9:e9:e1:b4:
         31:9d:7c:af:64:96:5c:3f:6c:08:c6:23:27:03:f6:dc:67:52:
         f8:28:00:15:03:42:52:9c:f4:ed:1c:18:92:57:9f:10:50:a3:
         6f:68:48:89:2b:ef:d7:d5:02:46:7a:78:57:d2:b9:b4:1f:7e:
         30:59:8d:c2:e6:d0:17:94:1a:13:46:12:6d:06:6f:be:39:03:
         e7:7f:3f:f9:5f:63:f7:13:d7:b5:de:9a:db:63:09:6d:d6:f2:
         69:15:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org