Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a383030303a3a2f33332d3333203d3e20323635343336.roa
File:                     323830343a333431633a383030303a3a2f33332d3333203d3e20323635343336.roa (raw, json)
Hash identifier:          O5voc+uhNKob0zICo53OYpjpLk1TQJNncDL/Lmd4du8=
Subject key identifier:   F1:F6:AE:94:B9:B7:C4:77:04:8F:21:26:F6:5E:FB:75:6D:C7:0B:CA
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       48C7978DFBB9E734289DB6E265AE79BF6FD3DD5C
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a383030303a3a2f33332d3333203d3e20323635343336.roa
Signing time:             Wed 24 Apr 2024 17:06:29 +0000
ROA not before:           Wed 24 Apr 2024 17:01:29 +0000
ROA not after:            Wed 23 Apr 2025 17:06:29 +0000
asID:                     265436
IP address blocks:        2804:341c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c7:97:8d:fb:b9:e7:34:28:9d:b6:e2:65:ae:79:bf:6f:d3:dd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Apr 24 17:01:29 2024 GMT
            Not After : Apr 23 17:06:29 2025 GMT
        Subject: CN=F1F6AE94B9B7C477048F2126F65EFB756DC70BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:37:b5:b0:be:bd:4f:a4:05:fe:68:e4:91:
                    29:c0:2d:d2:b8:52:da:83:9d:be:70:bb:74:1d:dc:
                    36:64:c2:7e:7e:23:31:e0:af:34:16:d1:aa:0f:7c:
                    73:a2:88:f9:53:49:c0:da:31:1e:6f:f0:7d:6e:21:
                    8d:dd:04:be:43:5d:22:fe:a5:8b:bb:16:9c:d8:a7:
                    6e:06:b3:f6:49:0e:b3:4a:1f:c6:18:0d:4e:6b:57:
                    7a:1f:07:c4:1f:53:7d:10:fe:1d:1e:46:a7:09:20:
                    44:68:c3:61:d4:bb:50:b6:e6:46:f1:8c:e9:12:7b:
                    43:a5:7f:a9:fc:38:de:3f:62:9a:16:11:c2:90:af:
                    93:58:b1:4e:d8:d5:e2:80:ed:cc:8e:c9:d0:c0:79:
                    d9:f5:22:35:95:a7:e5:55:17:81:1f:83:84:db:81:
                    bd:c3:08:c3:f6:91:d2:d4:00:fa:9f:0c:0d:34:fe:
                    a3:09:23:27:e7:90:cd:9b:e3:ac:f6:41:77:aa:d8:
                    46:8f:0c:8c:49:a0:25:c0:65:1c:f3:b4:8d:d5:69:
                    b7:49:41:73:35:91:e1:15:0d:46:dc:e5:e8:4c:7b:
                    ea:ae:a7:fe:8e:9d:78:d6:9d:18:97:03:17:09:20:
                    54:20:ef:26:96:20:df:3f:9a:1b:29:20:c5:ad:4b:
                    f7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:AE:94:B9:B7:C4:77:04:8F:21:26:F6:5E:FB:75:6D:C7:0B:CA
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a383030303a3a2f33332d3333203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:341c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:b1:f2:02:f5:4f:a8:6b:a3:db:f6:53:36:bc:67:0d:8b:
         6a:27:a0:a5:69:81:ab:9f:a2:d5:2b:40:d0:c2:07:3b:60:24:
         48:eb:be:74:22:ee:59:43:3a:9c:d0:5d:7a:46:d3:1b:71:68:
         38:fc:bb:34:51:bd:fa:76:18:85:14:cc:28:6b:53:7a:f8:1d:
         eb:29:61:1a:1b:7f:8b:01:52:43:c0:39:69:1f:be:c5:d8:af:
         de:3e:f9:51:a7:fc:53:71:6f:ed:8b:37:9a:9b:df:7b:0b:ae:
         c1:1a:5c:cf:ca:6f:64:81:27:45:bb:bf:1a:0c:32:5b:34:c8:
         72:5c:f1:19:62:d2:3f:ee:4b:32:ff:ae:6b:e1:c9:18:82:32:
         94:42:87:49:9e:b7:98:43:9d:85:7d:83:78:3a:ba:1c:03:f6:
         78:cc:1d:99:af:70:15:94:ef:d5:b9:70:11:d3:7f:44:61:2c:
         2a:25:bc:bd:80:ee:01:c1:96:f2:c0:a8:69:78:d2:d5:c8:d0:
         48:d0:86:51:9a:4c:97:5f:ed:9d:bf:15:3e:ba:8a:4b:bb:87:
         54:1c:5c:8c:c3:a3:29:14:1f:4c:d9:9a:c8:ce:22:c0:36:58:
         07:2c:00:a0:c4:30:74:da:70:1b:19:9d:0f:c0:82:b2:6d:d6:
         4a:3b:fb:68
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSMeXjfu55zQonbbiZa55v2/T3VwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC
Qzg1OThFMTAeFw0yNDA0MjQxNzAxMjlaFw0yNTA0MjMxNzA2MjlaMDMxMTAvBgNV
BAMTKEYxRjZBRTk0QjlCN0M0NzcwNDhGMjEyNkY2NUVGQjc1NkRDNzBCQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoje1sL69T6QF/mjkkSnALdK4
UtqDnb5wu3Qd3DZkwn5+IzHgrzQW0aoPfHOiiPlTScDaMR5v8H1uIY3dBL5DXSL+
pYu7FpzYp24Gs/ZJDrNKH8YYDU5rV3ofB8QfU30Q/h0eRqcJIERow2HUu1C25kbx
jOkSe0Olf6n8ON4/YpoWEcKQr5NYsU7Y1eKA7cyOydDAedn1IjWVp+VVF4Efg4Tb
gb3DCMP2kdLUAPqfDA00/qMJIyfnkM2b46z2QXeq2EaPDIxJoCXAZRzztI3VabdJ
QXM1keEVDUbc5ehMe+qup/6OnXjWnRiXAxcJIFQg7yaWIN8/mhspIMWtS/cFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU8faulLm3xHcEjyEm9l77dW3HC8owHwYDVR0j
BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0
OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC
RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhZ1lrSkZ0M3VyWnBtRGZQQkRMb3VvUlZEVXlob0RoVEg4and1M1B6NDkzLzAv
MzIzODMwMzQzYTMzMzQzMTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTM0MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENByAMA0GCSqGSIb3DQEBCwUA
A4IBAQCdHrHyAvVPqGuj2/ZTNrxnDYtqJ6ClaYGrn6LVK0DQwgc7YCRI6750Iu5Z
Qzqc0F16RtMbcWg4/Ls0Ub36dhiFFMwoa1N6+B3rKWEaG3+LAVJDwDlpH77F2K/e
PvlRp/xTcW/tizeam997C67BGlzPym9kgSdFu78aDDJbNMhyXPEZYtI/7ksy/65r
4ckYgjKUQodJnreYQ52FfYN4OrocA/Z4zB2Zr3AVlO/VuXAR039EYSwqJby9gO4B
wZbywKhpeNLVyNBI0IZRmkyXX+2dvxU+uopLu4dUHFyMw6MpFB9M2ZrIziLANlgH
LACgxDB02nAbGZ0PwIKybdZKO/to
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org