Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d3332203d3e20323635343336.roa
File:                     323830343a333431633a3a2f33322d3332203d3e20323635343336.roa (raw, json)
Hash identifier:          dKAwNZGDxXC54K8XA0pxh09UduXZKLvtwig0jjBx2io=
Subject key identifier:   82:D0:B6:47:B2:47:9B:B2:85:AC:83:24:59:F7:62:79:08:E2:BF:35
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       14E5E750582921DE381AB6E0DEE487548AC7C2BF
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d3332203d3e20323635343336.roa
Signing time:             Wed 24 Apr 2024 17:06:25 +0000
ROA not before:           Wed 24 Apr 2024 17:01:25 +0000
ROA not after:            Wed 23 Apr 2025 17:06:25 +0000
asID:                     265436
IP address blocks:        2804:341c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e5:e7:50:58:29:21:de:38:1a:b6:e0:de:e4:87:54:8a:c7:c2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Apr 24 17:01:25 2024 GMT
            Not After : Apr 23 17:06:25 2025 GMT
        Subject: CN=82D0B647B2479BB285AC832459F7627908E2BF35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:90:6c:3d:62:46:8d:c4:64:39:d9:9f:54:
                    1d:f0:d9:56:d1:15:a8:c2:0d:77:40:77:32:65:b1:
                    21:ac:30:aa:1f:fa:f2:37:aa:2c:dc:a9:39:08:16:
                    23:b7:8c:69:3c:ad:16:4d:1e:7a:cf:1d:9c:a5:7b:
                    dd:4c:a8:a0:25:a6:65:9a:a3:9a:bf:8c:5a:bd:da:
                    59:ef:f7:96:c4:f1:22:b4:f0:11:eb:21:6d:83:a2:
                    0f:4d:ff:62:92:69:3b:5f:75:6f:51:c7:b9:16:2b:
                    6a:9b:86:27:a2:4c:19:17:1b:14:a0:b6:94:8a:d1:
                    ae:66:a2:9a:97:31:07:b3:9c:55:09:b3:0c:34:a9:
                    8f:c1:b3:71:a6:35:bf:eb:30:f1:12:82:ef:82:8f:
                    a8:c2:5c:98:65:c6:e7:30:a9:21:f1:37:20:76:32:
                    7c:11:69:b5:c5:ec:98:d6:7f:f2:aa:de:dd:68:1b:
                    88:0f:19:3c:a6:ad:31:dc:2b:84:00:67:34:c7:e7:
                    33:c4:6f:49:fc:27:98:c1:3c:28:9c:7c:cb:4c:ee:
                    c0:77:b4:40:f3:d0:7f:27:60:17:5e:2b:26:db:97:
                    d0:4c:11:f3:39:5b:ef:64:9b:c2:ca:8a:27:72:48:
                    c2:a8:26:bf:f0:d4:96:4e:89:12:7e:81:38:c7:3f:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:B6:47:B2:47:9B:B2:85:AC:83:24:59:F7:62:79:08:E2:BF:35
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d3332203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:341c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:71:8b:46:f7:72:5b:07:79:47:cd:6a:42:4c:4d:f9:a7:28:
         eb:52:d1:d9:49:52:30:2e:ea:07:5d:6c:6f:7f:7f:56:05:54:
         d0:75:18:1c:3d:e5:5d:e3:0f:21:9c:91:6b:10:66:07:bf:91:
         68:94:0a:79:af:61:0d:ce:1c:98:79:c1:3a:de:60:ba:34:35:
         46:5b:9e:14:fa:e5:64:af:43:2b:f3:0b:ef:29:16:51:a5:60:
         03:21:c6:26:19:cf:f4:fa:4f:f7:1a:54:a0:90:d6:79:a2:42:
         db:c7:92:ed:10:dd:0f:1e:08:75:84:71:2d:8e:89:14:75:42:
         d5:26:b8:77:a1:89:b5:3e:e1:1a:f2:ca:f6:4e:1c:38:b9:52:
         b6:3b:fd:f0:aa:0c:8d:2c:ac:e4:5a:26:d7:73:08:73:d8:c1:
         02:0c:4d:8a:e2:9a:ff:b7:a3:15:50:80:51:5d:d0:e5:be:49:
         e2:ad:a0:79:03:ff:f8:d8:05:1c:c3:34:b2:88:db:ad:45:5c:
         13:e3:6a:26:3d:d1:ef:f6:4b:7d:3a:fc:05:eb:c7:1e:7b:3c:
         5b:30:b3:c5:bc:b2:42:e2:05:69:08:bf:0f:dd:ae:10:3d:ac:
         b2:52:8a:e2:fe:c1:f9:20:f0:5b:15:59:f0:98:39:0e:9e:7f:
         fc:b3:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org