Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a363030303a3a2f34302d3430203d3e20323634343931.roa
File:                     323830343a323037343a363030303a3a2f34302d3430203d3e20323634343931.roa (raw, json)
Hash identifier:          hHQf85XKpRTO4Yu8DT2LVft7cO4ww85lKaiepVN87J4=
Subject key identifier:   44:11:3C:6D:34:2F:61:91:47:33:56:2C:25:9C:E7:62:F1:E5:7D:20
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       0B217E691D1B57AEF3DC7758C4669ABBB2F94002
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a363030303a3a2f34302d3430203d3e20323634343931.roa
Signing time:             Tue 10 Oct 2023 03:11:25 +0000
ROA not before:           Tue 10 Oct 2023 03:06:25 +0000
ROA not after:            Tue 08 Oct 2024 03:11:25 +0000
asID:                     264491
IP address blocks:        2804:2074:6000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:21:7e:69:1d:1b:57:ae:f3:dc:77:58:c4:66:9a:bb:b2:f9:40:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:25 2023 GMT
            Not After : Oct  8 03:11:25 2024 GMT
        Subject: CN=44113C6D342F61914733562C259CE762F1E57D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:82:d4:3e:71:13:52:3a:54:07:1c:8c:3a:
                    42:d1:52:12:86:6f:4b:be:e3:72:0c:3f:4b:42:53:
                    1e:3c:6c:fc:fa:60:32:46:db:1a:71:0b:fa:93:bc:
                    61:7d:4f:71:06:01:fc:b7:19:c6:91:1a:60:e3:d7:
                    05:23:0d:12:28:32:c7:4c:f1:e8:a9:ca:59:60:91:
                    cd:2e:26:c5:76:eb:3b:76:91:a8:17:be:40:cd:6d:
                    0f:32:3b:35:06:68:5f:85:4f:58:39:a5:54:48:e8:
                    9b:89:0a:bb:78:26:c2:62:d3:11:46:18:57:11:81:
                    78:9c:2f:42:d4:71:ba:07:3e:dd:73:c2:c6:0f:6d:
                    77:c0:25:8a:e2:6d:f2:b9:55:37:dc:b3:9e:dd:dd:
                    68:b2:60:19:e9:47:91:66:f2:5b:8d:85:f6:3e:6a:
                    f8:cb:d3:3a:da:f4:cc:d2:4e:40:dc:00:a3:07:1a:
                    31:93:17:75:93:d4:79:3a:4a:c7:bd:81:cd:a1:0b:
                    f0:64:b0:53:28:b4:de:41:22:b9:5f:6e:b7:c7:74:
                    88:8f:11:b5:d2:de:10:13:6f:e3:a6:41:7c:e3:7c:
                    fa:5c:e8:2d:ed:68:ce:83:8e:b7:e1:21:54:be:93:
                    40:14:5d:42:e9:49:f6:53:57:ff:70:cb:0e:cc:4d:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:11:3C:6D:34:2F:61:91:47:33:56:2C:25:9C:E7:62:F1:E5:7D:20
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a363030303a3a2f34302d3430203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:53:e2:36:4d:42:cc:2e:ad:e2:59:64:25:7e:fd:d1:b0:4c:
         a0:ce:58:da:ee:00:71:72:36:8c:18:39:db:14:91:9a:ee:7d:
         62:09:95:6c:a3:4a:8f:73:74:59:45:ac:8a:22:71:31:05:2b:
         fb:a0:da:e8:65:90:80:67:36:de:e3:cc:41:d2:69:9d:9b:1d:
         ea:e3:7a:d2:1f:1a:91:a5:07:75:4a:c1:bb:6f:b9:31:99:a5:
         51:76:2f:91:10:ca:25:ff:70:a3:c3:66:30:ad:0e:dd:b4:b5:
         2a:be:36:5c:cd:5e:65:72:2b:b1:6d:f4:7d:df:82:0c:44:1f:
         49:7e:27:31:d3:13:2b:b9:02:51:68:9f:29:56:6d:04:a6:e2:
         09:06:8d:ca:34:be:f3:47:c6:be:e3:81:d4:4b:9c:31:be:78:
         67:ce:6a:21:4a:13:82:25:3c:fd:91:62:1a:f5:01:29:09:6f:
         12:78:33:c4:6f:c0:9a:a7:90:b1:1a:97:52:f2:0d:d5:7a:e2:
         8d:59:12:75:6e:a1:a3:8e:be:e1:59:91:d7:ce:6a:48:32:b5:
         2b:6c:5c:65:40:89:78:76:77:9c:b2:e5:fa:e9:a5:84:e5:c7:
         b2:e1:0a:7c:37:e8:4e:b1:ab:48:08:44:d2:ea:03:67:44:7b:
         82:32:9d:3e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCyF+aR0bV67z3HdYxGaau7L5QAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDRTNGQzYwMDZGRDhGNDcyRTgwOTEyRjhDNUE5MTNB
NUJCQTdCMTAeFw0yMzEwMTAwMzA2MjVaFw0yNDEwMDgwMzExMjVaMDMxMTAvBgNV
BAMTKDQ0MTEzQzZEMzQyRjYxOTE0NzMzNTYyQzI1OUNFNzYyRjFFNTdEMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflILUPnETUjpUBxyMOkLRUhKG
b0u+43IMP0tCUx48bPz6YDJG2xpxC/qTvGF9T3EGAfy3GcaRGmDj1wUjDRIoMsdM
8eipyllgkc0uJsV26zt2kagXvkDNbQ8yOzUGaF+FT1g5pVRI6JuJCrt4JsJi0xFG
GFcRgXicL0LUcboHPt1zwsYPbXfAJYribfK5VTfcs57d3WiyYBnpR5Fm8luNhfY+
avjL0zra9MzSTkDcAKMHGjGTF3WT1Hk6Sse9gc2hC/BksFMotN5BIrlfbrfHdIiP
EbXS3hATb+OmQXzjfPpc6C3taM6DjrfhIVS+k0AUXULpSfZTV/9wyw7MTcfPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURBE8bTQvYZFHM1YsJZznYvHlfSAwHwYDVR0j
BBgwFoAUQM4/xgBv2PRy6AkS+MWpE6W7p7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC80MENFM0ZDNjAwNkZEOEY0NzJFODA5MTJGOEM1QTkxM0E1QkJBN0IxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwQ0UzRkM2MDA2RkQ4RjQ3
MkU4MDkxMkY4QzVBOTEzQTVCQkE3QjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzIzODMwMzQzYTMyMzAzNzM0M2EzNjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDM0MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIHRgMA0GCSqGSIb3DQEBCwUA
A4IBAQB1U+I2TULMLq3iWWQlfv3RsEygzlja7gBxcjaMGDnbFJGa7n1iCZVso0qP
c3RZRayKInExBSv7oNroZZCAZzbe48xB0mmdmx3q43rSHxqRpQd1SsG7b7kxmaVR
di+REMol/3Cjw2YwrQ7dtLUqvjZczV5lciuxbfR934IMRB9Jficx0xMruQJRaJ8p
Vm0EpuIJBo3KNL7zR8a+44HUS5wxvnhnzmohShOCJTz9kWIa9QEpCW8SeDPEb8Ca
p5CxGpdS8g3VeuKNWRJ1bqGjjr7hWZHXzmpIMrUrbFxlQIl4dnecsuX66aWE5cey
4Qp8N+hOsatICETS6gNnRHuCMp0+
-----END CERTIFICATE-----
Generated at Wed Oct 11 12:51:09 2023 by rpki-client on console-fra.rpki-client.org