Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6165303a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a6165303a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          WwVtNybzVcc6HVSE8rsy6uoCmSemPa9uNwfJCM6v3Iw=
Subject key identifier:   F2:90:E4:AD:0D:19:BC:6C:4B:FD:20:19:6A:60:35:4D:8F:F0:5C:C3
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       18ED3DEDA3B5C8C3F5EE52E7E131548CD427A25E
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6165303a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:ae0::/45 maxlen: 45

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ed:3d:ed:a3:b5:c8:c3:f5:ee:52:e7:e1:31:54:8c:d4:27:a2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=F290E4AD0D19BC6C4BFD20196A60354D8FF05CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:c6:9f:ad:eb:09:6d:c1:05:ac:14:7f:4b:
                    80:b2:06:65:06:9e:89:6e:c3:b4:a2:85:ca:fa:bc:
                    28:2f:09:d0:4a:43:b6:0c:a7:8e:cd:db:c2:49:bf:
                    8f:de:29:76:56:ee:b4:bb:37:e0:ff:47:b5:80:e0:
                    1e:b2:8c:db:32:7c:91:a3:13:10:df:9d:ba:59:f1:
                    23:5e:b7:01:be:a3:d0:49:55:4c:ca:61:6f:e5:10:
                    83:3a:57:56:43:25:b5:ba:9b:17:cd:3c:d9:c6:d1:
                    f8:16:7d:b2:2c:43:33:c7:23:2b:f4:a7:74:12:f9:
                    07:ca:35:13:b1:e2:6a:b2:74:bf:e1:8d:e9:e2:e1:
                    25:65:3b:3b:fc:e4:c3:1b:6d:ae:5b:c8:22:3c:cd:
                    99:7f:56:53:2f:32:87:d1:2c:3d:5c:ba:e1:d1:f7:
                    d7:12:fc:7f:bc:51:06:eb:41:f8:94:2f:7c:19:ee:
                    24:07:4c:56:8d:cf:e5:da:64:09:2c:ac:f6:6b:9b:
                    81:be:7b:94:12:42:1a:7b:d2:2e:06:a9:a0:c1:64:
                    ea:10:5a:9e:d9:46:73:ae:fa:bb:3e:c7:19:66:b4:
                    38:0e:30:c1:5e:cc:f3:0f:c0:f2:45:0d:9d:0d:bd:
                    a0:c9:d7:b6:3c:8b:5c:ac:21:f1:00:88:88:fe:3d:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:90:E4:AD:0D:19:BC:6C:4B:FD:20:19:6A:60:35:4D:8F:F0:5C:C3
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a6165303a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:ae0::/45

    Signature Algorithm: sha256WithRSAEncryption
         55:93:12:3b:b2:69:ef:b8:71:7c:0d:aa:93:36:eb:87:fe:55:
         af:89:2a:15:22:e0:ec:43:3b:0d:20:e9:6c:9d:db:d1:50:62:
         8d:0b:23:86:be:db:11:aa:8e:33:5c:a6:6e:6f:5f:2e:81:08:
         60:1b:4f:44:2f:b7:34:f7:04:9e:18:90:3a:af:92:75:2a:d9:
         e4:5e:04:ec:b8:52:25:a5:b1:b8:e3:f2:f0:a5:d6:0a:98:c8:
         ba:fa:48:77:35:ca:11:35:cf:fb:ae:4c:ff:03:f1:7c:6b:ec:
         82:4f:4f:41:a0:1d:b4:a5:87:4c:4d:4a:97:98:67:18:8c:00:
         ff:be:ad:12:80:88:ce:b3:51:04:c4:8b:c3:21:bd:88:f6:e1:
         ad:a9:a2:2e:83:01:94:91:57:90:51:ac:12:0c:e9:58:79:15:
         d7:11:65:d1:d9:b5:00:11:db:96:3c:cd:e8:8b:dc:12:d2:3a:
         dd:4c:83:43:73:03:8c:32:f1:f0:9f:0c:e8:aa:61:ca:41:c6:
         a9:2f:80:41:c5:3c:c1:54:96:85:69:b7:53:96:2f:3a:69:07:
         a8:ba:22:69:c7:27:95:fc:13:d2:3e:ae:75:5b:a8:61:81:8b:
         82:a2:29:fb:47:2f:2e:37:1a:ba:b9:a3:fd:88:d6:6e:3d:b7:
         81:d5:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org