Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/323830343a376437633a3a2f33322d3332203d3e20323731353634.roa
File:                     323830343a376437633a3a2f33322d3332203d3e20323731353634.roa (raw, json)
Hash identifier:          UkIO/2JIAfqr0vq8AYG0M9RMx6CdG+yOOQ+9zOr7NLA=
Subject key identifier:   CD:F4:AD:B4:59:26:CD:9F:82:8A:6E:DF:98:B9:01:D1:BE:D3:D6:F5
Certificate issuer:       /CN=F1DACCA6A12D21B00471FADDC409E740FDB5D640
Certificate serial:       0B71D138B8A791663338224148B21BAF28918FC6
Authority key identifier: F1:DA:CC:A6:A1:2D:21:B0:04:71:FA:DD:C4:09:E7:40:FD:B5:D6:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/323830343a376437633a3a2f33322d3332203d3e20323731353634.roa
Signing time:             Tue 02 Jan 2024 17:07:38 +0000
ROA not before:           Tue 02 Jan 2024 17:02:38 +0000
ROA not after:            Tue 31 Dec 2024 17:07:38 +0000
asID:                     271564
IP address blocks:        2804:7d7c::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:71:d1:38:b8:a7:91:66:33:38:22:41:48:b2:1b:af:28:91:8f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1DACCA6A12D21B00471FADDC409E740FDB5D640
        Validity
            Not Before: Jan  2 17:02:38 2024 GMT
            Not After : Dec 31 17:07:38 2024 GMT
        Subject: CN=CDF4ADB45926CD9F828A6EDF98B901D1BED3D6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:4a:d7:1e:0d:4f:69:a5:90:f5:ed:19:4e:
                    c5:90:4e:94:87:8c:06:b5:c0:22:cf:fd:bc:ff:b7:
                    3c:bb:c8:60:be:10:c0:3f:ce:4d:45:e1:5e:7d:6e:
                    10:1c:3b:0d:40:82:43:c5:bc:06:63:d0:84:cb:76:
                    0f:7a:93:da:33:57:92:14:52:53:c8:bb:ce:e7:2b:
                    b1:85:43:47:c1:48:02:83:5e:60:e7:38:85:12:de:
                    5f:e3:fb:8e:36:be:a1:ca:94:64:59:ac:bb:ea:a7:
                    af:ed:c5:be:8b:84:e2:c7:08:32:f1:ce:6d:60:13:
                    6f:b8:a9:4a:8d:8d:46:a9:28:9f:d0:0e:fc:1a:9e:
                    b3:b9:64:ed:45:a5:02:f7:b1:32:25:7b:57:8f:b1:
                    a8:7c:d5:c3:00:23:90:31:26:ce:51:9d:32:41:16:
                    c8:4c:15:27:38:4e:6c:5e:23:b2:77:d3:a6:97:fe:
                    be:b6:5d:7b:05:c5:20:23:c2:16:f2:de:d3:f6:e1:
                    12:6d:c0:5f:d3:d7:f1:cd:61:e7:f4:10:ec:39:43:
                    63:ed:9e:4c:02:63:00:42:b4:c4:fc:70:e1:52:e3:
                    6f:34:d3:ad:54:c2:82:4b:4f:50:ec:79:f8:bc:45:
                    de:33:dc:50:95:06:6b:fd:64:56:e9:b2:b0:3c:9e:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F4:AD:B4:59:26:CD:9F:82:8A:6E:DF:98:B9:01:D1:BE:D3:D6:F5
            X509v3 Authority Key Identifier:
                keyid:F1:DA:CC:A6:A1:2D:21:B0:04:71:FA:DD:C4:09:E7:40:FD:B5:D6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/323830343a376437633a3a2f33322d3332203d3e20323731353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:63:53:67:b2:22:e3:c8:8e:cd:1b:37:42:28:a5:d1:e4:
         18:dd:d8:12:51:6a:ec:42:56:8d:8a:be:61:ff:b0:57:6a:ca:
         ba:79:14:f2:7f:4e:db:b5:35:cb:58:c6:ed:03:16:c8:fd:b3:
         7e:29:b5:a5:25:2e:77:03:28:fa:54:00:01:de:b2:e0:48:b5:
         e6:25:02:95:bd:2f:61:3d:0a:c0:e9:62:c2:41:08:36:06:c7:
         9b:82:0e:00:5b:98:3a:4f:48:cc:ca:f2:b8:b2:c2:6a:ed:b6:
         fe:47:ce:5d:a6:bb:41:eb:90:33:83:cf:32:21:27:f2:60:e3:
         98:30:22:8e:dc:95:8b:60:bc:a1:cc:80:32:04:5b:d9:98:4d:
         0a:9d:e7:72:30:09:51:6e:1c:13:26:ca:f4:d2:ba:8e:a6:82:
         c0:5e:a2:43:2b:c3:4c:06:da:53:12:bf:13:68:55:6e:06:6d:
         73:69:76:28:fa:e8:bc:b2:c2:59:22:cb:60:7e:d0:31:de:9d:
         cf:b9:58:7f:23:12:7a:a3:3a:b0:51:fb:77:89:1c:e6:43:a3:
         fe:82:e3:dc:44:00:11:ac:f6:56:00:73:32:eb:aa:68:45:60:
         bd:a8:54:96:b3:cb:91:7b:86:a5:38:ef:6a:db:e2:6b:06:66:
         28:88:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 20:40:18 2024 by rpki-client on console.sobornost.net