Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3862383a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a3862383a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          aPMSrBJY4hGMY92V3Lqx8UdMCJHkPxVq8bIhv41PhFM=
Subject key identifier:   CE:B6:0B:E2:32:D6:5B:71:F9:38:79:CA:07:99:FF:08:FE:D5:08:EA
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       5CDBFB5D9C237880EB3C3F0E593E447513D1436C
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3862383a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:8b8::/45 maxlen: 45

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:db:fb:5d:9c:23:78:80:eb:3c:3f:0e:59:3e:44:75:13:d1:43:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=CEB60BE232D65B71F93879CA0799FF08FED508EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:66:2c:6d:b7:91:a0:b3:b1:45:40:a8:fc:
                    2f:f9:8b:6d:d7:8d:69:47:a1:5d:5e:7b:8e:46:f7:
                    c2:5f:ac:12:bb:c6:45:be:d2:d3:65:df:67:92:6a:
                    be:c0:b9:bf:85:9e:5d:57:b9:7b:08:f9:43:f2:d2:
                    b6:31:d5:86:c3:6a:99:04:bb:0f:0f:23:52:4c:4e:
                    98:2d:f2:c2:79:22:b8:3c:62:16:8b:c8:30:69:9e:
                    d5:f3:d8:b8:83:5a:ef:c7:55:5c:3d:9e:97:15:97:
                    f0:6c:b1:0d:ef:26:6b:93:02:22:55:53:e2:7e:56:
                    0d:51:ad:a2:ea:9d:a2:e2:50:3b:eb:27:93:8c:22:
                    6c:e7:eb:7a:52:e0:28:c1:5d:b0:5c:87:cd:91:08:
                    1a:9b:4a:22:1f:7b:3e:84:20:9a:c0:a4:1f:86:37:
                    d0:2f:20:49:a7:26:7d:ed:ae:c8:47:5d:48:4e:0e:
                    b2:f3:7a:d3:61:43:5d:0d:6d:97:16:a2:6d:0a:ee:
                    15:ef:36:58:35:5f:e9:1e:91:79:d0:f1:a3:f7:a3:
                    de:ba:11:04:65:95:03:f8:10:fb:7c:c1:fb:99:31:
                    25:38:5c:06:f6:d1:a7:f3:05:d2:38:bc:ab:95:a2:
                    6d:3e:95:08:a2:ca:9e:83:43:98:14:bc:35:41:fc:
                    1c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:0B:E2:32:D6:5B:71:F9:38:79:CA:07:99:FF:08:FE:D5:08:EA
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a3862383a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:8b8::/45

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:59:1f:73:60:7a:3a:12:90:32:3f:10:38:1a:90:02:78:
         cc:24:e5:82:a0:37:b3:fb:c3:34:a3:86:2e:a9:25:e4:e3:f2:
         d9:99:5f:c3:18:55:da:54:70:db:3c:37:f1:0b:ad:c8:e5:5f:
         99:d1:c1:35:44:15:a3:89:07:77:a7:67:69:df:b4:76:cd:50:
         ad:f5:62:b7:84:e8:0f:bd:da:b7:66:09:6a:e6:5a:6b:d3:b1:
         fd:54:f3:00:d2:08:d5:11:9f:01:5b:b6:f8:29:e4:ea:19:8b:
         73:5a:2f:66:34:fd:c6:03:8b:94:a3:ec:8b:ee:03:4d:c0:5c:
         76:dd:76:9a:eb:10:9c:6d:a0:fb:d0:ca:84:0d:0c:46:45:2e:
         84:e1:39:9b:fc:41:ad:9a:b9:00:b7:ca:03:91:47:ed:7b:f2:
         66:57:ee:25:45:6b:d4:44:97:a6:29:f8:6f:4b:1c:0e:31:29:
         af:22:10:2f:cf:cf:db:1a:eb:f7:95:c5:25:f8:bc:1b:94:29:
         97:f8:29:87:ac:87:de:dc:7d:bc:03:75:6f:ce:28:b7:c8:da:
         34:c8:91:fe:ef:56:7d:1b:85:88:ea:67:c2:b4:58:ef:6e:94:
         35:b5:ce:f1:ea:58:fa:cb:40:96:97:37:1a:ab:70:61:09:eb:
         c8:dc:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org