Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6164383a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a6164383a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          wRME39RUHgGo72JhznG/shkQTpEXIfuQVaLZ68HqenI=
Subject key identifier:   35:83:B7:3F:15:FC:A1:17:B3:93:F0:68:F8:FA:DB:14:13:34:AD:11
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       40525ACECB95F796861AF799CD9E597896647A6D
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6164383a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:ad8::/45 maxlen: 45

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:52:5a:ce:cb:95:f7:96:86:1a:f7:99:cd:9e:59:78:96:64:7a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=3583B73F15FCA117B393F068F8FADB141334AD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:da:76:cd:7f:c4:35:51:0d:ef:81:47:6b:
                    2e:cc:ec:b4:34:c3:c1:81:c5:ba:a7:ac:6e:35:d7:
                    3c:fa:c9:2a:e4:6f:81:05:76:aa:60:ce:bd:7f:55:
                    90:05:38:ed:e1:07:af:c5:63:ea:47:f9:d6:94:1f:
                    53:57:da:d6:ba:37:77:83:57:97:0f:d0:7c:bb:bc:
                    d9:11:63:2f:b9:e2:01:cb:62:d9:52:60:62:51:8e:
                    2c:95:28:73:63:92:ae:68:e5:c6:46:48:85:ad:e1:
                    15:c2:b5:41:31:c7:c8:f1:9f:ad:13:10:a0:d3:05:
                    b0:29:d3:e2:66:f1:ad:e3:e3:4a:bb:4b:44:1f:bb:
                    12:f9:a6:a7:3a:c2:24:14:6a:df:14:1c:e6:c1:69:
                    f8:2a:01:9d:ea:f6:c2:0e:3e:28:38:10:f6:eb:df:
                    c0:78:9b:fb:90:50:b2:70:78:d4:d6:42:16:bb:d8:
                    e2:fc:98:5a:48:7d:5e:15:66:06:f2:20:ce:0e:97:
                    e7:d6:85:77:f5:32:06:6b:98:81:31:8c:3c:50:d2:
                    e0:8b:e4:40:fc:0f:5b:eb:40:ce:72:16:3d:63:b8:
                    b2:08:2a:12:ff:d7:47:bd:90:40:1d:52:34:ac:a5:
                    7e:3b:c8:fb:2d:9b:c0:a6:81:c2:1a:be:bc:58:34:
                    2f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:83:B7:3F:15:FC:A1:17:B3:93:F0:68:F8:FA:DB:14:13:34:AD:11
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6164383a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:ad8::/45

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:47:dc:49:f5:a0:7d:07:4a:04:d5:6f:ba:9f:07:12:a8:
         90:b9:d4:78:43:05:0e:58:af:6f:09:ce:6d:8e:5c:e7:6e:84:
         28:2d:88:7d:6a:29:0b:7b:7a:d2:ea:8f:75:fd:ab:86:22:0c:
         8b:6c:34:83:89:5e:76:9f:fa:e1:08:58:ca:30:88:af:c0:6c:
         5e:6e:f9:8b:4b:4a:a9:df:74:8d:d4:99:4b:fb:93:cf:27:4f:
         ab:38:50:3e:16:95:5f:ff:47:a5:8c:7c:47:3f:cc:2f:eb:8e:
         5f:4a:3a:88:2c:49:72:ba:c0:38:63:3e:68:06:76:eb:d7:03:
         33:ed:4a:94:17:5b:d9:92:5c:2c:11:36:5a:d7:f3:8e:93:c5:
         9b:2d:fc:46:f1:5b:96:41:c9:f0:5f:53:87:03:f8:37:b1:7d:
         89:fd:04:e9:8d:22:86:ed:1e:8f:a0:43:79:36:35:4b:9d:3f:
         33:2d:c7:ba:40:17:45:f5:88:92:8c:30:fc:44:f1:16:7c:25:
         72:e4:cb:46:42:51:62:2f:e7:bc:e2:47:32:e0:55:f1:8d:f1:
         e4:d4:40:77:bf:90:11:c2:55:6e:cd:5b:3d:5f:6a:da:39:1c:
         4b:e4:a8:62:1a:d4:08:a1:f2:8a:2a:0a:0d:f2:ab:e6:f8:bd:
         0b:7b:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org