Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f34322d3432203d3e20323634323834.roa
File:                     323830343a323538303a343030303a3a2f34322d3432203d3e20323634323834.roa (raw, json)
Hash identifier:          b6Ppdo9Z3vH5BAgT47BOyq4MCpOhQuSuVd4U/L6QHv0=
Subject key identifier:   BB:77:3D:0B:17:09:69:52:A9:D8:42:79:70:83:8F:A1:9C:D1:84:9E
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       27BE57D560E6E31A3CF5227CBF4800BB52FB0F6F
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f34322d3432203d3e20323634323834.roa
Signing time:             Fri 17 May 2024 14:33:57 +0000
ROA not before:           Fri 17 May 2024 14:28:57 +0000
ROA not after:            Fri 16 May 2025 14:33:57 +0000
asID:                     264284
IP address blocks:        2804:2580:4000::/42 maxlen: 42

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 11:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:be:57:d5:60:e6:e3:1a:3c:f5:22:7c:bf:48:00:bb:52:fb:0f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: May 17 14:28:57 2024 GMT
            Not After : May 16 14:33:57 2025 GMT
        Subject: CN=BB773D0B17096952A9D8427970838FA19CD1849E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:54:f1:fb:89:06:ed:19:45:50:b3:54:eb:
                    8a:db:33:61:5c:42:28:76:b9:c9:b9:2e:ac:cf:ee:
                    b9:7a:88:d7:c0:a4:c3:c6:9b:64:46:66:2c:25:b7:
                    81:aa:55:3e:d1:89:82:33:05:63:e8:3b:e0:39:50:
                    13:32:ec:b8:b9:db:4f:e1:a1:ee:62:67:39:a7:38:
                    cf:e1:57:fc:2c:10:c3:7b:14:15:83:95:c6:55:f2:
                    ba:81:a6:b9:e5:fa:62:0a:61:50:7d:44:37:56:10:
                    5b:55:1d:da:bd:5d:80:7b:ab:21:03:7d:a1:18:ba:
                    c5:15:e2:d0:14:2c:84:5b:8c:e8:13:ce:ab:64:77:
                    35:92:6d:4b:54:15:9c:3f:21:be:f4:7a:86:b7:04:
                    b7:2d:2d:02:bb:3d:ac:49:8f:c7:1a:62:d4:8e:b7:
                    c1:2c:2b:9a:7c:8b:90:a2:00:ad:fd:29:0e:c1:6e:
                    04:9e:96:84:71:04:da:b7:57:52:25:9a:73:ea:f2:
                    2d:7a:90:1b:bb:6b:a3:d5:1d:31:92:22:3c:98:c2:
                    69:7d:b4:45:44:18:ef:5c:62:0c:c7:0b:11:90:f6:
                    cf:e4:e6:14:9f:ee:e6:65:e8:21:78:09:79:0e:65:
                    65:d3:19:37:c3:fb:66:b0:fa:a8:1a:68:ae:51:d1:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:3D:0B:17:09:69:52:A9:D8:42:79:70:83:8F:A1:9C:D1:84:9E
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f34322d3432203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2580:4000::/42

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:90:a3:b2:6f:39:0e:0c:0a:57:ad:a1:b6:69:f4:5e:1d:
         1c:ab:34:c5:c2:ca:a4:7f:ea:d1:a6:a3:ed:59:2d:b7:1d:fd:
         92:5c:2b:77:67:6b:4e:5a:59:63:27:7b:92:29:e8:35:28:41:
         c9:dd:0e:c1:fd:8e:8b:8d:7b:46:16:1c:bd:12:f0:f8:31:46:
         2f:cf:97:3a:b8:59:fa:97:8d:f6:bc:7c:ee:12:83:3e:04:59:
         43:b1:e5:50:ee:25:70:3b:d2:91:4f:44:b8:38:a0:f3:2e:00:
         46:14:81:a7:a8:d6:5e:37:6c:0e:14:5a:57:71:8b:cc:a8:28:
         49:de:43:3d:b2:b4:86:40:64:cc:91:eb:3b:bc:eb:e2:06:5a:
         f6:5a:d1:ed:54:01:57:ce:8e:36:19:5e:99:af:29:0e:76:6d:
         2b:b7:94:f1:be:8a:52:88:bd:37:fe:65:81:dc:f6:b5:10:46:
         29:1f:6d:5c:0c:a7:e9:3f:fb:8c:62:94:cf:7d:b2:b9:a5:4b:
         5c:73:7c:67:e4:29:8e:3c:10:e9:7b:5b:69:fb:42:3c:5d:44:
         8e:18:d0:17:f8:43:e7:98:c5:62:5b:fb:2a:eb:a6:04:f0:77:
         85:ab:66:13:30:40:4f:39:99:97:7f:77:ec:7c:9f:4a:5f:8e:
         2a:b5:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org