Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6130303a3a2f34342d3434203d3e20323637343230.roa
File:                     323830343a346433633a6130303a3a2f34342d3434203d3e20323637343230.roa (raw, json)
Hash identifier:          WKuV8wwfX2qzwTXi8KDcnZ+h086p0ca2TL6bArAhmS4=
Subject key identifier:   FC:BC:69:5A:89:CC:9C:CC:B8:26:27:5F:FE:BD:B2:3D:66:C7:D9:A9
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       4C8C0C9C8987F1A241A99083F2247CE9897718C1
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6130303a3a2f34342d3434203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:38 +0000
ROA not before:           Fri 05 Apr 2024 01:55:38 +0000
ROA not after:            Fri 04 Apr 2025 02:00:38 +0000
asID:                     267420
IP address blocks:        2804:4d3c:a00::/44 maxlen: 44

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8c:0c:9c:89:87:f1:a2:41:a9:90:83:f2:24:7c:e9:89:77:18:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:38 2024 GMT
            Not After : Apr  4 02:00:38 2025 GMT
        Subject: CN=FCBC695A89CC9CCCB826275FFEBDB23D66C7D9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:f9:32:cc:18:d8:5d:6a:13:84:d2:a0:20:
                    54:69:6f:cb:7e:92:37:55:bf:79:89:55:44:d1:51:
                    21:ef:2b:a7:0a:55:7a:e8:de:43:3b:35:3a:81:94:
                    06:fc:3b:6b:d3:35:a6:c8:d8:3f:60:fc:d6:22:92:
                    47:16:0b:13:de:1a:c6:dc:3a:2e:1b:12:f7:6c:2e:
                    c2:ae:3e:50:d8:21:96:07:60:db:70:44:ca:d9:28:
                    a6:a5:6c:8e:ec:74:2a:04:17:32:37:05:af:69:3f:
                    d7:e0:0f:87:e8:a0:1a:09:22:4f:34:8e:eb:7d:5f:
                    b3:ae:e2:8b:89:43:d8:67:ca:b0:fd:6d:80:37:8e:
                    9a:f2:b8:bf:6c:ef:06:70:dc:2d:e1:f1:61:ff:5f:
                    b5:c0:9d:de:ad:1a:bf:d2:a1:84:be:fe:44:65:8a:
                    a0:18:f1:f9:b0:ea:16:62:ff:d2:c6:45:26:ec:16:
                    1f:fa:c4:31:a3:a0:f9:b6:82:8e:f5:2e:69:fd:e0:
                    e6:f2:b8:91:d8:84:44:82:db:2c:8c:42:53:dc:1c:
                    56:ee:cc:1d:92:21:9a:f5:7e:15:cb:75:2b:45:e9:
                    cc:55:a8:5e:e9:8a:24:d8:a6:ff:dc:cf:3f:56:bd:
                    61:c6:72:6a:cb:c3:b3:5d:12:86:98:1a:b7:dd:ac:
                    7f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:69:5A:89:CC:9C:CC:B8:26:27:5F:FE:BD:B2:3D:66:C7:D9:A9
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6130303a3a2f34342d3434203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:83:f9:17:52:bd:34:39:7d:01:ab:8d:d5:37:b5:fc:12:57:
         10:ec:b8:a8:9b:dd:56:38:b1:cf:72:c8:a5:ef:1f:ae:23:b6:
         19:f7:70:ca:11:5d:a9:8d:d5:27:44:1e:d3:28:f5:38:f0:a6:
         f1:60:a0:b5:35:35:c2:f8:2d:44:c0:e7:7b:28:e7:af:82:23:
         f8:e0:76:55:e0:c5:e8:6d:d8:27:a8:9a:5a:be:26:58:3d:a0:
         20:d7:d0:02:8a:d5:31:24:69:40:4a:64:3e:8f:fe:f3:ff:1c:
         ae:69:b1:42:9d:a9:42:24:06:95:56:7f:68:0f:30:c2:24:39:
         51:a7:49:9b:3d:2c:2c:52:91:8b:7d:d3:cd:dd:9c:f7:a4:9d:
         e5:f8:a0:21:07:9b:f9:f0:34:ef:3f:ee:2a:d9:8b:01:e4:1e:
         a9:90:65:aa:0f:b7:6a:d6:53:51:4a:37:37:b7:3b:c5:17:a8:
         3d:57:67:80:c8:4c:5a:b6:af:34:17:46:f8:eb:52:d8:c0:8d:
         64:29:60:41:b9:93:4b:da:fc:77:8e:fb:80:1e:77:6c:1c:c4:
         00:94:0c:2c:48:30:28:02:7a:d0:1d:0a:34:2b:59:89:f4:20:
         a5:52:af:fd:19:49:17:23:78:70:b1:8e:26:f8:f2:3c:58:ef:
         20:a5:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org