Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a343030303a3a2f33342d3334203d3e20323638333230.roa
File:                     323830343a346635343a343030303a3a2f33342d3334203d3e20323638333230.roa (raw, json)
Hash identifier:          M5LmAMbdRY2jDfLuwX4h9tHaMJMO3obhn7ZGz+WMZd0=
Subject key identifier:   D0:3F:6B:B9:15:D9:9A:73:EE:39:17:84:5C:AC:64:36:02:1D:85:8D
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       1EF4BF05BBF9E7703AC2631DCA57DBF5D8DEFC25
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a343030303a3a2f33342d3334203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:02:28 +0000
ROA not before:           Thu 03 Aug 2023 16:57:28 +0000
ROA not after:            Thu 01 Aug 2024 17:02:28 +0000
asID:                     268320
IP address blocks:        2804:4f54:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 15:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f4:bf:05:bb:f9:e7:70:3a:c2:63:1d:ca:57:db:f5:d8:de:fc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:57:28 2023 GMT
            Not After : Aug  1 17:02:28 2024 GMT
        Subject: CN=D03F6BB915D99A73EE3917845CAC6436021D858D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:13:b8:e9:1f:3f:b3:54:0c:2e:d1:17:9d:7a:
                    89:f2:57:99:08:17:53:56:38:f0:41:33:3e:a6:6d:
                    5b:5c:52:d3:73:29:4e:aa:79:e4:e1:60:34:35:96:
                    37:46:b6:07:3a:e9:6d:a8:0a:b0:6b:b7:4c:61:cb:
                    3f:02:a8:11:df:de:dd:04:88:d3:d3:08:e2:47:8b:
                    54:12:90:cb:21:78:4a:de:01:2f:0c:c4:2a:3b:2a:
                    96:34:49:2c:3c:e1:a9:1c:97:3b:4e:e2:a4:f7:f2:
                    97:68:d5:8f:a0:af:49:36:53:4c:56:0b:3b:10:5f:
                    54:73:9b:43:c3:46:55:eb:63:28:16:ca:69:88:28:
                    00:a2:10:72:07:21:f7:02:5f:78:63:dc:ae:c8:cd:
                    b2:66:0d:a1:4d:15:1c:2d:bd:55:3c:e1:71:e7:99:
                    f7:c1:a9:4d:2f:f0:ea:31:42:9f:30:e8:5e:d3:92:
                    25:37:ed:30:da:8d:59:97:d8:21:90:d6:9d:b4:65:
                    e9:ff:ce:ac:87:22:81:30:9c:f9:ea:9b:58:0c:34:
                    d6:68:98:7a:b9:41:d8:0c:ad:cc:b6:62:c1:56:18:
                    d8:a5:ad:89:67:71:ea:00:db:89:a9:2b:f0:53:48:
                    c1:b5:52:64:35:1a:fd:36:83:5f:08:d1:1e:da:12:
                    ac:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:6B:B9:15:D9:9A:73:EE:39:17:84:5C:AC:64:36:02:1D:85:8D
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a343030303a3a2f33342d3334203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f54:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:d8:8f:fd:66:47:61:35:c7:20:59:8e:71:82:15:ca:e8:9c:
         20:6f:e3:fa:5e:cd:9b:9e:15:a8:b9:82:a1:ca:7c:cc:ae:60:
         9c:66:31:83:89:0e:fe:49:d9:21:41:0a:da:e1:9d:b4:08:54:
         3a:b4:43:4a:fb:3a:ef:19:2b:76:10:88:05:26:b5:c4:62:48:
         da:4a:7b:52:88:1e:e8:63:56:ea:e3:5c:ab:04:9d:a4:62:d8:
         69:28:d0:c7:10:9e:f5:9b:cf:84:ad:50:2f:04:55:f0:4d:41:
         d9:ff:a0:66:40:c5:fd:52:c8:79:76:6d:6e:70:50:c0:53:22:
         7c:9a:f4:0a:9e:1d:8a:f5:ce:a3:dc:29:b4:0b:9d:dd:8f:1c:
         3b:e2:67:9c:48:64:36:a7:77:f1:f9:ad:56:c5:ff:b8:5b:1a:
         ba:f6:62:0e:bd:de:bb:0d:07:6d:31:3e:fd:2a:f7:58:52:d9:
         b0:ff:87:54:cc:b2:03:a5:68:e9:a4:8d:23:7b:72:10:d3:15:
         b8:9e:da:ff:38:b3:1e:1e:f5:10:fb:48:57:3b:d2:1c:d0:6d:
         8e:8c:8b:24:42:53:87:48:1c:4a:25:18:a5:f0:11:61:8c:5f:
         3b:02:bf:95:ba:10:99:97:6b:bf:4a:9f:45:fd:c6:c0:10:53:
         15:09:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:25 2024 by rpki-client on console-fra.rpki-client.org