Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33332d3333203d3e20323635343336.roa
File:                     323830343a333431633a3a2f33332d3333203d3e20323635343336.roa (raw, json)
Hash identifier:          gfEnWPrg44lic+giKDiqvWmZ2KRSQZV/khsM3D38SMo=
Subject key identifier:   A6:C2:F1:3D:8C:E8:0F:17:C1:7E:86:D6:78:51:7B:31:23:DC:D1:87
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       2649258CE3D937FF4C8878C85EFECF839B015E26
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33332d3333203d3e20323635343336.roa
Signing time:             Wed 24 Apr 2024 17:06:27 +0000
ROA not before:           Wed 24 Apr 2024 17:01:27 +0000
ROA not after:            Wed 23 Apr 2025 17:06:27 +0000
asID:                     265436
IP address blocks:        2804:341c::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:49:25:8c:e3:d9:37:ff:4c:88:78:c8:5e:fe:cf:83:9b:01:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Apr 24 17:01:27 2024 GMT
            Not After : Apr 23 17:06:27 2025 GMT
        Subject: CN=A6C2F13D8CE80F17C17E86D678517B3123DCD187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:88:87:da:dc:1f:cf:f1:f8:78:24:7f:36:
                    0b:23:69:11:ab:ce:26:a8:30:c5:d3:0b:be:52:a5:
                    72:0f:71:f8:e2:37:27:e4:16:0b:79:04:b8:1f:27:
                    51:68:61:02:17:7e:56:28:37:40:26:0c:82:9c:58:
                    ea:cb:a6:b0:ac:f4:09:2f:b8:0b:bc:73:38:b3:6c:
                    7a:2f:d6:bd:a4:d3:11:e0:9a:e3:70:ed:05:81:6e:
                    89:e5:bf:27:5a:dc:2c:58:12:8f:76:de:c1:38:66:
                    57:15:85:7a:75:70:33:c9:34:6c:ad:9e:51:be:97:
                    d5:77:b9:4d:b7:7c:43:f9:82:91:f9:5f:ea:61:c6:
                    ae:0f:d8:63:18:02:6f:5d:42:9b:5a:0a:3d:5a:21:
                    7a:bf:96:97:82:2c:ce:85:62:f7:6f:b4:3f:32:02:
                    63:77:9f:cf:e4:a0:91:61:72:a3:a4:0b:5f:d8:6d:
                    9c:f3:96:32:30:f5:60:18:61:48:a3:da:0a:ee:26:
                    3c:76:17:59:63:16:66:ec:31:3c:22:26:d0:13:bb:
                    11:45:11:3a:53:57:24:96:05:b7:5a:6e:cc:69:f7:
                    a8:87:b7:0c:d6:89:8f:b0:4a:02:f9:80:1f:d4:8a:
                    3b:2d:23:97:03:cd:5d:ef:a9:2a:cd:2a:b1:77:35:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C2:F1:3D:8C:E8:0F:17:C1:7E:86:D6:78:51:7B:31:23:DC:D1:87
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33332d3333203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:341c::/33

    Signature Algorithm: sha256WithRSAEncryption
         1a:39:31:15:90:51:b8:67:0b:16:a8:bf:ff:c3:d5:ea:63:73:
         67:e3:53:d0:00:50:0f:93:2f:0d:91:f3:42:c9:37:b8:fb:35:
         61:cb:40:44:14:28:0d:10:f9:23:2c:14:8f:26:17:dc:14:04:
         17:aa:c1:7a:12:7a:8f:8b:0d:14:73:53:e0:cc:c3:5b:25:0c:
         2c:f5:f3:da:00:b6:9d:c3:0c:1f:6f:fd:cc:15:41:49:11:4f:
         23:be:e5:46:e8:d3:ea:02:95:d9:fd:ee:29:77:67:ae:b8:34:
         ff:f5:c0:7a:d8:d5:53:5c:b2:94:90:95:03:5f:db:06:a4:d0:
         25:3d:bf:20:6b:8f:fb:84:20:12:3f:df:7f:83:b5:bb:7a:91:
         20:ab:f6:86:98:cb:82:d0:16:24:03:fa:7e:cc:7a:f6:1d:0e:
         7e:0c:2f:65:65:8f:84:7a:9d:3c:3e:f3:c0:42:e0:5c:9a:3e:
         9b:de:b1:23:64:bb:1b:a2:03:53:36:e2:11:98:d0:84:26:e1:
         39:17:26:72:d8:05:70:d6:e6:03:15:96:7d:d5:eb:cd:93:80:
         d2:43:53:1f:96:39:1b:3f:55:dc:cf:e7:9c:0c:dd:dc:0b:e6:
         95:8d:6f:fc:37:f1:4e:ae:17:85:e4:6b:f6:ce:ae:68:de:aa:
         f0:cf:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org