Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a653030303a3a2f33352d3335203d3e20323637353830.roa
File:                     323830343a343361303a653030303a3a2f33352d3335203d3e20323637353830.roa (raw, json)
Hash identifier:          tXPyZ0J23+bCdsKZtwjdRNrhLJSGs/MxKABVatIXPJk=
Subject key identifier:   B2:B9:F2:40:80:5D:AA:86:4C:16:A8:53:FE:74:D0:30:C4:58:3D:8C
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       208A73C0984AAC722FAD3273513EA4DCDEBBC383
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a653030303a3a2f33352d3335203d3e20323637353830.roa
Signing time:             Tue 05 Mar 2024 23:17:21 +0000
ROA not before:           Tue 05 Mar 2024 23:12:21 +0000
ROA not after:            Tue 04 Mar 2025 23:17:21 +0000
asID:                     267580
IP address blocks:        2804:43a0:e000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 16:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8a:73:c0:98:4a:ac:72:2f:ad:32:73:51:3e:a4:dc:de:bb:c3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  5 23:12:21 2024 GMT
            Not After : Mar  4 23:17:21 2025 GMT
        Subject: CN=B2B9F240805DAA864C16A853FE74D030C4583D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:d4:56:dc:26:c5:62:48:3d:17:d0:da:ad:
                    60:e0:8e:cc:cf:e7:92:ef:34:fb:90:90:b4:d2:01:
                    30:8c:c1:87:fa:e8:e3:c6:bc:11:78:76:02:59:9d:
                    6b:bb:c9:4a:5d:4a:59:df:50:b6:36:22:36:a1:6d:
                    62:2b:d6:64:a2:63:95:0c:e6:d9:d1:00:52:0d:a9:
                    f8:ac:44:1e:20:a4:eb:09:58:29:6d:2f:b1:92:9d:
                    ca:47:86:91:08:7c:04:4b:a8:50:f3:7d:be:b5:29:
                    87:a8:58:37:11:ca:61:c1:e8:f7:f6:a6:1e:58:7c:
                    8d:b7:a3:38:8c:70:a4:d8:01:02:a6:d7:00:04:bb:
                    81:b6:18:93:e8:ae:f8:1e:2a:37:b0:0c:dc:53:53:
                    b6:0f:8a:a7:7b:98:eb:d9:55:7c:be:d3:65:bf:8d:
                    23:45:34:23:8c:c2:03:92:6b:b4:93:f3:c0:e6:f8:
                    f0:7c:68:90:8a:fb:18:e0:50:50:ad:ca:cb:0d:d3:
                    82:fb:6f:5d:55:47:f6:66:90:da:69:e4:02:81:05:
                    ff:d9:82:42:20:a4:f0:95:e4:a4:d4:ec:9e:0d:49:
                    42:ae:a4:f0:32:d6:56:26:87:95:ba:2c:35:e1:e0:
                    e8:f7:c0:67:ee:32:1e:41:29:53:1e:42:4c:e7:bb:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B9:F2:40:80:5D:AA:86:4C:16:A8:53:FE:74:D0:30:C4:58:3D:8C
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/323830343a343361303a653030303a3a2f33352d3335203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43a0:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:ff:99:fd:52:d9:00:6d:60:e3:a1:14:3f:d0:26:2e:8f:
         32:3b:95:82:13:6d:8f:1a:6c:8e:d0:bf:7f:09:19:83:1f:36:
         8e:96:92:e2:59:e5:2c:95:b4:22:db:e8:35:49:fb:e6:c0:5f:
         d9:f7:44:92:94:09:4b:58:a3:66:af:ae:f2:29:ff:10:e0:64:
         6b:ec:1f:0e:7c:f5:1a:56:bc:c3:cc:f5:18:49:67:1b:11:00:
         8b:f5:ee:19:bb:51:d6:cb:47:99:a4:00:ed:0f:87:6f:1d:ec:
         ed:0a:5f:49:93:d9:17:df:d0:61:ca:60:ae:ba:ed:fb:6b:c2:
         d2:a1:ea:e3:9d:b0:b5:b8:14:aa:45:6a:06:22:e0:71:38:62:
         33:c9:61:e0:dc:e7:73:4c:36:d1:b1:51:2a:64:bb:9d:9a:f2:
         27:4d:c4:23:5a:98:68:c9:8f:66:80:f6:8e:4f:57:9e:92:20:
         44:ce:f9:80:6a:08:50:8c:bd:8c:af:38:8f:9c:bf:57:6d:00:
         5f:49:0b:08:9c:70:2e:73:36:c1:96:a4:42:7a:a3:25:3f:ec:
         6b:21:9c:60:42:02:88:54:84:7e:a9:fd:b5:1f:94:ad:bf:41:
         22:b5:01:ee:33:f1:a5:23:95:09:db:7c:69:08:7d:f5:04:d2:
         fc:aa:33:08
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIIpzwJhKrHIvrTJzUT6k3N67w4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNERjcxQzI3MzM2RjRDODY5QTg0OThDMjNGMTczNEVF
RTMxQUExNTAeFw0yNDAzMDUyMzEyMjFaFw0yNTAzMDQyMzE3MjFaMDMxMTAvBgNV
BAMTKEIyQjlGMjQwODA1REFBODY0QzE2QTg1M0ZFNzREMDMwQzQ1ODNEOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7tRW3CbFYkg9F9DarWDgjszP
55LvNPuQkLTSATCMwYf66OPGvBF4dgJZnWu7yUpdSlnfULY2IjahbWIr1mSiY5UM
5tnRAFINqfisRB4gpOsJWCltL7GSncpHhpEIfARLqFDzfb61KYeoWDcRymHB6Pf2
ph5YfI23oziMcKTYAQKm1wAEu4G2GJPorvgeKjewDNxTU7YPiqd7mOvZVXy+02W/
jSNFNCOMwgOSa7ST88Dm+PB8aJCK+xjgUFCtyssN04L7b11VR/ZmkNpp5AKBBf/Z
gkIgpPCV5KTU7J4NSUKupPAy1lYmh5W6LDXh4Oj3wGfuMh5BKVMeQkznu1F7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsrnyQIBdqoZMFqhT/nTQMMRYPYwwHwYDVR0j
BBgwFoAU899xwnM29MhpqEmMI/FzTu4xqhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTVWc29jQ2hkYUV0NDFma01aS3N2djVqMVZEeWhyWldtejVGV0c3aEdY
eXkvMC9GM0RGNzFDMjczMzZGNEM4NjlBODQ5OEMyM0YxNzM0RUVFMzFBQTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzREY3MUMyNzMzNkY0Qzg2
OUE4NDk4QzIzRjE3MzRFRUUzMUFBMTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U1VnNvY0NoZGFFdDQxZmtNWktzdnY1ajFWRHloclpXbXo1RldHN2hHWHl5LzAv
MzIzODMwMzQzYTM0MzM2MTMwM2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNzM1MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEQ6DgMA0GCSqGSIb3DQEBCwUA
A4IBAQAyu/+Z/VLZAG1g46EUP9AmLo8yO5WCE22PGmyO0L9/CRmDHzaOlpLiWeUs
lbQi2+g1SfvmwF/Z90SSlAlLWKNmr67yKf8Q4GRr7B8OfPUaVrzDzPUYSWcbEQCL
9e4Zu1HWy0eZpADtD4dvHeztCl9Jk9kX39BhymCuuu37a8LSoerjnbC1uBSqRWoG
IuBxOGIzyWHg3OdzTDbRsVEqZLudmvInTcQjWphoyY9mgPaOT1eekiBEzvmAaghQ
jL2MrziPnL9XbQBfSQsInHAuczbBlqRCeqMlP+xrIZxgQgKIVIR+qf21H5Stv0Ei
tQHuM/GlI5UJ23xpCH31BNL8qjMI
-----END CERTIFICATE-----
Generated at Thu Mar 7 19:25:56 2024 by rpki-client on console-fra.rpki-client.org