Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a383030303a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a323166343a383030303a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          jJnK0JRSfNizpcoZtgB7+AlnW26ruamj108Z10cFNkU=
Subject key identifier:   59:BC:0A:69:D8:04:EE:82:C7:18:22:33:35:B2:F6:48:59:06:32:36
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       12088E74B1549E2471B2DCB1A170C736DD81B413
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a383030303a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:27 +0000
ROA not before:           Wed 14 Aug 2024 12:03:27 +0000
ROA not after:            Wed 13 Aug 2025 12:08:27 +0000
asID:                     262773
IP address blocks:        2804:21f4:8000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:08:8e:74:b1:54:9e:24:71:b2:dc:b1:a1:70:c7:36:dd:81:b4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:27 2024 GMT
            Not After : Aug 13 12:08:27 2025 GMT
        Subject: CN=59BC0A69D804EE82C718223335B2F64859063236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:af:57:5a:d9:da:3d:80:8c:92:25:48:d4:
                    81:ef:a0:49:56:d8:28:4b:0d:ad:80:b1:61:73:2e:
                    10:7f:14:c6:15:5e:3f:9c:5a:a4:3b:47:81:8e:61:
                    72:9c:eb:1e:0a:b9:8c:82:78:28:80:43:fc:4b:79:
                    ad:ca:48:4d:19:ab:59:28:06:00:be:27:9f:f4:0b:
                    65:ab:4d:ec:24:57:4a:80:a5:42:de:29:c7:50:21:
                    68:b0:1c:0c:b2:30:8d:b5:85:21:03:53:49:cb:90:
                    63:83:d4:1a:15:8a:04:75:ac:53:48:4b:1d:cc:0e:
                    65:e9:47:c4:de:f5:b2:14:49:81:46:b8:ed:6c:e2:
                    04:ad:c9:f4:ad:0d:c5:cd:57:05:90:4b:2b:6c:61:
                    ae:67:fa:20:f4:38:ad:57:33:90:f9:33:77:fe:3e:
                    a2:67:1d:6f:6c:ff:60:3b:26:1b:10:7e:b4:30:4f:
                    37:30:8b:1a:86:95:a9:41:d4:4d:3b:5e:0f:da:71:
                    e5:18:ce:d7:31:04:64:86:30:c4:c0:8c:83:b0:5f:
                    90:06:f6:28:32:9d:2c:eb:51:a4:2c:b4:e6:3a:d2:
                    85:4b:47:a0:cf:9d:22:45:78:b4:77:47:7d:7a:12:
                    e4:06:e4:89:2e:ce:fb:a4:c3:d0:cb:f5:6c:7d:31:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BC:0A:69:D8:04:EE:82:C7:18:22:33:35:B2:F6:48:59:06:32:36
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a383030303a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f4:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:3a:8f:ac:38:e9:34:35:3e:84:fc:12:3b:4c:fd:28:5d:5c:
         6b:f4:41:e4:67:22:2f:85:64:f5:10:3e:b9:ae:7f:01:5d:91:
         6c:20:8c:13:7d:85:e7:23:67:b4:b5:7b:75:93:c4:0d:f2:8a:
         31:18:db:42:d6:4d:e3:b1:3a:4a:bf:e1:24:b9:ec:73:78:de:
         db:17:e0:e5:d5:8d:8e:ed:3a:4d:a2:ad:70:73:fc:7f:6d:0d:
         93:28:09:ab:1c:6e:a9:58:a1:ae:fb:cb:79:50:de:14:37:15:
         f0:03:c0:6a:34:54:12:61:a9:17:c6:b9:59:e6:bc:d7:59:7a:
         c1:4a:be:b7:30:e7:f7:23:9a:d7:e7:a0:c0:98:b5:c0:68:c6:
         a9:a1:9c:b3:47:dc:fd:a4:9c:e0:d9:5d:06:7b:82:46:73:d5:
         2a:85:6e:5a:fc:c5:fb:d8:1a:ee:27:d1:e6:b9:2f:98:25:98:
         a7:8a:a5:1c:13:e4:3c:45:5f:e4:ad:ba:af:90:07:9a:42:17:
         ee:bc:6c:f7:d2:50:7e:39:39:7c:a9:5a:5c:ee:4e:6b:24:80:
         4d:46:8f:57:80:82:12:f7:1e:34:c9:24:a5:d2:f5:69:19:30:
         57:4f:41:7c:5f:89:12:ca:83:4b:84:40:62:af:b7:3e:b6:6d:
         8e:0e:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org