Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/323830343a353761343a666530303a3a2f34302d3438203d3e20323638303737.roa
File:                     323830343a353761343a666530303a3a2f34302d3438203d3e20323638303737.roa (raw, json)
Hash identifier:          22qtbKoqo1wgbhmnhAMDNugTPZ6iR/ZfjO4djhQEuRk=
Subject key identifier:   2F:2F:54:0D:C1:5A:C7:41:CA:E3:57:B3:B5:C9:84:66:F6:AA:E3:B9
Certificate issuer:       /CN=EEAED5639DA591A226FB7469252567652499ADA3
Certificate serial:       3A319139E1F96C27462594BA57395DC0AB2B15EB
Authority key identifier: EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/323830343a353761343a666530303a3a2f34302d3438203d3e20323638303737.roa
Signing time:             Fri 06 Dec 2024 16:20:08 +0000
ROA not before:           Fri 06 Dec 2024 16:15:08 +0000
ROA not after:            Fri 05 Dec 2025 16:20:08 +0000
asID:                     268077
IP address blocks:        2804:57a4:fe00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 06 Dec 2024 16:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:31:91:39:e1:f9:6c:27:46:25:94:ba:57:39:5d:c0:ab:2b:15:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAED5639DA591A226FB7469252567652499ADA3
        Validity
            Not Before: Dec  6 16:15:08 2024 GMT
            Not After : Dec  5 16:20:08 2025 GMT
        Subject: CN=2F2F540DC15AC741CAE357B3B5C98466F6AAE3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:27:30:59:9f:e6:9f:a2:c2:ce:f6:bc:70:
                    35:5c:48:22:30:e6:05:c4:7b:e5:3e:73:23:f0:c2:
                    6c:70:8c:6e:47:f7:98:22:f7:67:26:76:4e:00:55:
                    16:92:57:33:14:b4:01:1c:93:9a:03:3b:d0:a3:94:
                    6d:fd:df:31:d6:ad:b7:0e:ba:16:5c:47:b2:b1:3e:
                    90:d9:31:11:37:a8:42:b0:5a:50:c6:de:a8:e0:8c:
                    16:92:a8:c0:52:ae:9d:1d:70:2a:fb:8a:67:53:36:
                    4d:d6:20:8b:3e:8b:0e:b8:26:23:ed:b3:de:14:a5:
                    84:4a:3d:0b:1b:f0:6c:69:c2:d8:b0:6a:fb:20:d3:
                    63:38:e7:8f:ef:6c:67:97:24:51:e1:a6:f8:4d:a9:
                    ee:2d:49:e8:a2:a9:a5:56:11:db:9b:27:c2:43:78:
                    53:81:f2:d7:e0:e3:c7:bb:22:2d:1b:4a:38:82:70:
                    01:10:86:87:85:dd:b3:e7:17:ad:cc:39:e0:10:2b:
                    bd:59:ed:ed:ca:86:31:2b:59:8e:0c:10:2a:d6:98:
                    08:f4:20:20:3b:8f:d6:c2:38:00:9d:41:2d:56:9d:
                    14:88:8f:69:31:44:f9:f3:9a:05:02:bc:4f:cf:18:
                    2d:b6:fa:f0:e6:87:d0:07:3d:39:61:0a:ca:2b:5a:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2F:54:0D:C1:5A:C7:41:CA:E3:57:B3:B5:C9:84:66:F6:AA:E3:B9
            X509v3 Authority Key Identifier:
                keyid:EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/323830343a353761343a666530303a3a2f34302d3438203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57a4:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:bc:a1:b2:33:e5:e4:d1:4e:3e:1f:36:a0:15:cd:3b:83:e9:
         9c:cf:e6:f9:a2:86:06:29:06:5c:81:66:d3:b7:9b:77:bd:4e:
         4b:5e:af:55:df:44:38:30:89:f3:6b:6d:a9:4b:78:2a:96:b2:
         33:3a:64:32:da:b9:bc:17:34:79:d2:6d:50:a4:38:63:e5:9e:
         e9:ae:ce:67:b0:e3:d3:e8:a2:71:e6:b5:d1:13:15:77:01:ff:
         7d:7e:1a:6a:f9:11:b4:39:be:a6:3e:a8:1e:55:da:ee:09:cb:
         27:07:5a:c9:9e:fd:d7:c6:85:f8:96:05:d5:e1:68:48:17:43:
         2e:c8:cb:cb:05:96:32:d0:d0:9a:96:47:ac:1c:00:a9:20:f0:
         a8:4c:09:45:20:c2:6d:fc:82:52:e0:9a:12:40:b3:88:b4:3d:
         3b:ca:c0:c4:ab:55:fb:63:91:df:7d:c0:5d:c2:39:b2:7c:70:
         97:0a:60:88:bd:2d:3d:0a:19:01:31:11:c5:0e:f2:c9:4f:52:
         54:5d:95:1a:07:4f:5d:ab:72:bf:06:38:54:ef:1e:ee:1b:ab:
         16:e9:25:bf:52:ab:10:a7:0f:64:3e:cf:37:07:da:ac:11:2a:
         07:90:6e:fb:09:9b:e9:51:b9:b0:b9:c2:10:79:6f:8d:71:2d:
         26:54:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 6 19:26:11 2024 by rpki-client on console.sobornost.net