Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/323830343a313263303a3a2f33322d3335203d3e20323633343936.roa
File:                     323830343a313263303a3a2f33322d3335203d3e20323633343936.roa (raw, json)
Hash identifier:          AVaipanw8I55EWR2eXamXG9wL02aw4L7jeJ6+WNy3pQ=
Subject key identifier:   EB:0B:00:EF:40:D8:C4:84:0F:AD:C4:5C:45:41:12:D2:FB:95:23:80
Certificate issuer:       /CN=C8A88E2290299A468AE6EC1703931B7E1914CF8B
Certificate serial:       763E88B8A42D53940755C0720714D08452135760
Authority key identifier: C8:A8:8E:22:90:29:9A:46:8A:E6:EC:17:03:93:1B:7E:19:14:CF:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/323830343a313263303a3a2f33322d3335203d3e20323633343936.roa
Signing time:             Wed 24 Jan 2024 11:23:43 +0000
ROA not before:           Wed 24 Jan 2024 11:18:43 +0000
ROA not after:            Wed 22 Jan 2025 11:23:43 +0000
asID:                     263496
IP address blocks:        2804:12c0::/32 maxlen: 35

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 16:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3e:88:b8:a4:2d:53:94:07:55:c0:72:07:14:d0:84:52:13:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8A88E2290299A468AE6EC1703931B7E1914CF8B
        Validity
            Not Before: Jan 24 11:18:43 2024 GMT
            Not After : Jan 22 11:23:43 2025 GMT
        Subject: CN=EB0B00EF40D8C4840FADC45C454112D2FB952380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:e3:aa:25:03:cf:66:47:d4:2b:1b:7a:ae:
                    80:d2:cc:ed:2b:0c:77:b1:75:e5:b3:a9:99:c7:b9:
                    30:36:ae:9c:d4:64:f5:06:55:86:f0:2d:c4:ab:32:
                    c3:72:b5:c1:bc:82:ed:12:d6:4c:b1:89:c1:53:b6:
                    17:78:19:f3:88:dc:03:60:bd:48:3e:f4:9a:fd:4e:
                    62:82:b0:47:d0:bf:9a:be:ad:80:6b:19:4a:f2:5c:
                    35:88:a3:f8:ea:5a:d0:96:25:7f:a5:8c:9e:f4:c3:
                    0c:88:57:0b:3a:e0:92:62:11:07:f7:48:c1:e9:8f:
                    65:fc:2c:70:cf:77:7e:19:99:f3:42:14:41:1f:af:
                    ed:26:2a:f9:ed:97:88:ec:05:19:4a:7a:27:b4:23:
                    28:94:db:f1:ed:21:6c:a6:72:b8:f4:7e:95:3d:64:
                    e0:c8:ae:4b:13:a3:74:45:d1:15:01:cd:10:03:d8:
                    7b:3f:33:86:9f:8d:9d:36:54:8c:53:7d:4f:44:05:
                    73:4c:b9:be:ed:79:64:b3:a5:e8:6b:16:e4:8f:37:
                    ea:44:7f:05:80:98:bf:89:0b:25:98:e1:d2:8a:c2:
                    53:f6:2b:0c:a3:3f:70:87:ba:09:e1:30:0b:d6:ff:
                    cf:4a:0c:3f:fe:7d:d5:25:14:e9:1b:d0:78:b3:47:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0B:00:EF:40:D8:C4:84:0F:AD:C4:5C:45:41:12:D2:FB:95:23:80
            X509v3 Authority Key Identifier:
                keyid:C8:A8:8E:22:90:29:9A:46:8A:E6:EC:17:03:93:1B:7E:19:14:CF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/323830343a313263303a3a2f33322d3335203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:51:3b:cf:35:d0:ca:c8:e2:f7:d6:25:1e:9d:d1:ab:70:
         28:a4:53:11:27:27:fe:c8:e3:8a:e1:28:22:b3:cb:5e:77:ae:
         40:1d:13:27:da:55:b3:04:3c:0c:f8:8c:ea:a2:a5:e7:2f:fa:
         d5:20:c9:ce:7a:ef:64:be:82:df:9c:d3:c8:2f:4f:06:d2:79:
         d4:b6:e4:d0:7e:09:fe:fc:f4:f9:90:c7:63:22:82:19:f1:17:
         74:1c:cd:9d:b3:e2:b3:15:51:3a:6f:c6:f4:2e:81:bb:d1:66:
         f7:fe:1b:99:8b:68:66:95:01:9a:6f:87:ad:36:e3:40:49:6a:
         2a:f0:dd:40:b5:c5:85:ad:44:eb:17:06:02:8d:f8:6e:8d:f4:
         c6:51:06:cd:05:c5:67:0d:bf:fe:85:1b:e2:f4:12:a8:a2:38:
         ed:c9:e9:8e:a1:9b:8d:a4:46:dc:ba:68:9f:a3:7d:42:88:94:
         95:5e:a2:0b:43:e4:b2:11:5b:2f:fe:bc:85:8c:b7:44:60:6d:
         12:76:58:1f:cf:ff:9e:5b:bb:22:29:bb:92:aa:12:c6:38:1a:
         4d:e3:d5:4e:4a:e0:4d:88:0b:37:6e:a6:28:ed:37:70:95:a4:
         3b:0e:44:41:5e:72:cc:a1:60:ca:61:47:cd:7c:d3:70:0c:6d:
         11:b6:a1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 19:56:30 2024 by rpki-client on console-fra.rpki-client.org