Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/323830343a353431343a3a2f33322d3332203d3e20323638363237.roa
File:                     323830343a353431343a3a2f33322d3332203d3e20323638363237.roa (raw, json)
Hash identifier:          LhZd1WxZKxjBB3GgX02+WsZqYimbktnRAoJc7Gjy45c=
Subject key identifier:   41:4C:52:FC:2F:B4:FC:34:F4:CF:FC:13:39:47:99:E7:94:BE:07:A2
Certificate issuer:       /CN=B1DDEB2AE17570AD2AFA8F646F3982491AE32A38
Certificate serial:       6B1A85CE3BA5703B0C3391A70FBB348A917C1368
Authority key identifier: B1:DD:EB:2A:E1:75:70:AD:2A:FA:8F:64:6F:39:82:49:1A:E3:2A:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/323830343a353431343a3a2f33322d3332203d3e20323638363237.roa
Signing time:             Tue 26 Dec 2023 14:00:00 +0000
ROA not before:           Tue 26 Dec 2023 13:55:00 +0000
ROA not after:            Tue 24 Dec 2024 14:00:00 +0000
asID:                     268627
IP address blocks:        2804:5414::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 24 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1a:85:ce:3b:a5:70:3b:0c:33:91:a7:0f:bb:34:8a:91:7c:13:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DDEB2AE17570AD2AFA8F646F3982491AE32A38
        Validity
            Not Before: Dec 26 13:55:00 2023 GMT
            Not After : Dec 24 14:00:00 2024 GMT
        Subject: CN=414C52FC2FB4FC34F4CFFC13394799E794BE07A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:a1:5d:69:24:3a:3f:7c:13:52:18:8d:79:
                    7b:24:a1:41:e6:43:b7:4a:ac:8a:94:08:43:83:39:
                    f1:75:8b:79:13:d2:d7:4c:d0:77:fd:6d:5b:81:aa:
                    0a:6b:b9:41:c0:54:61:e4:3d:d1:a9:b8:d6:67:55:
                    7b:f8:61:82:84:9b:00:43:bd:af:b3:c2:54:31:90:
                    52:9e:e7:39:9c:4c:a4:20:5d:d1:f5:17:b9:53:1a:
                    45:f4:25:17:43:97:33:d6:3c:d8:c3:50:76:5f:a1:
                    66:de:6b:97:8f:f1:8f:be:80:f2:0d:fe:7a:ff:42:
                    39:98:a2:80:82:ba:6c:64:d2:22:10:a2:d5:25:11:
                    ff:47:fd:af:3e:02:47:01:0d:95:09:d9:4b:f2:5a:
                    73:9c:d4:bd:62:4c:68:cd:b9:ed:be:6b:d4:ec:02:
                    fd:a9:01:6a:f5:e6:38:a4:9a:39:2d:25:51:76:e7:
                    5f:3d:02:73:cd:ef:3d:7a:2b:be:b9:4b:a1:47:01:
                    83:44:1d:4c:82:65:d3:42:6c:96:06:d2:07:e6:15:
                    1c:07:1d:2e:a9:1e:2d:8d:5a:44:c6:8d:dd:d8:a2:
                    a7:fb:96:2c:ea:a0:17:7b:f6:56:19:3e:92:68:38:
                    e5:9e:dc:6b:2f:ad:52:bd:c5:23:0c:19:d7:c8:81:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4C:52:FC:2F:B4:FC:34:F4:CF:FC:13:39:47:99:E7:94:BE:07:A2
            X509v3 Authority Key Identifier:
                keyid:B1:DD:EB:2A:E1:75:70:AD:2A:FA:8F:64:6F:39:82:49:1A:E3:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DDEB2AE17570AD2AFA8F646F3982491AE32A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/323830343a353431343a3a2f33322d3332203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5414::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:92:43:f2:56:8d:37:f1:32:9b:59:ac:ae:b3:5a:93:3a:43:
         55:e8:d7:03:c7:01:eb:64:d5:de:c6:36:1a:c1:24:41:5f:a5:
         7d:7a:ac:04:d4:76:6a:5f:a8:3a:77:58:bf:ae:fa:a4:27:cf:
         c7:3f:c0:49:60:e2:ff:ef:06:10:02:ca:2a:14:b3:37:4b:a7:
         fa:c0:aa:ae:e5:94:33:a5:8b:c2:c0:6f:a7:b9:45:d7:32:b1:
         82:3f:d9:e2:08:6f:72:0f:f4:1f:04:30:50:b7:b2:27:b6:05:
         f6:1e:16:3f:d3:58:64:95:90:6a:d7:2f:9c:79:78:92:65:8f:
         c3:ed:df:7c:25:d1:c3:85:c8:f0:37:ce:50:a8:1c:d6:04:e5:
         33:e3:70:a0:ad:e7:40:04:d0:f2:c6:83:c4:bf:cc:47:a9:41:
         bb:ee:60:4a:ab:58:3a:42:97:76:b9:ea:7d:a6:bb:a3:9a:ce:
         9d:20:6f:ed:61:f1:1e:4c:ee:f5:bd:e5:a4:59:af:bb:08:ba:
         27:4e:7f:ea:10:64:ef:37:ac:3b:41:50:f9:f6:b8:b6:42:0c:
         5f:14:d9:7b:9c:2b:be:b7:6b:cb:83:2a:3b:c8:e5:d0:05:4c:
         f5:93:26:4e:a7:ff:b8:63:1b:2f:56:1d:e2:fd:b8:3b:4d:aa:
         95:77:f1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 01:13:06 2024 by rpki-client on console.sobornost.net