Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d313238203d3e20323638303835.roa
File:                     323830343a353763343a3a2f33322d313238203d3e20323638303835.roa (raw, json)
Hash identifier:          zOWeSMLQXBi8QkBBQozklMTEoleBeJWI/hTUDcKjrXk=
Subject key identifier:   BE:68:CE:F5:F3:7B:C0:D5:EF:DD:23:2F:2A:9B:BB:5D:35:54:97:76
Certificate issuer:       /CN=8810EFA89BF5E1688407C9B3F3EA38661B1782E8
Certificate serial:       5628177B1E4D90928595F7D85FF5D8C2DD00D088
Authority key identifier: 88:10:EF:A8:9B:F5:E1:68:84:07:C9:B3:F3:EA:38:66:1B:17:82:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d313238203d3e20323638303835.roa
Signing time:             Tue 31 Oct 2023 20:25:22 +0000
ROA not before:           Tue 31 Oct 2023 20:20:22 +0000
ROA not after:            Tue 29 Oct 2024 20:25:22 +0000
asID:                     268085
IP address blocks:        2804:57c4::/32 maxlen: 128

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 22:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:28:17:7b:1e:4d:90:92:85:95:f7:d8:5f:f5:d8:c2:dd:00:d0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810EFA89BF5E1688407C9B3F3EA38661B1782E8
        Validity
            Not Before: Oct 31 20:20:22 2023 GMT
            Not After : Oct 29 20:25:22 2024 GMT
        Subject: CN=BE68CEF5F37BC0D5EFDD232F2A9BBB5D35549776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:c2:5e:4d:d2:61:ab:28:27:3b:40:f4:b5:
                    75:52:70:54:20:ec:3a:73:f9:99:86:e6:b5:51:27:
                    67:3d:ab:cc:ac:aa:6c:18:14:d0:4a:6c:7c:a9:56:
                    e3:00:8e:36:c1:38:1b:8a:97:ab:20:2f:7c:70:87:
                    33:de:bd:e6:06:3c:33:11:3b:38:8e:42:fe:42:50:
                    85:5e:66:ea:75:a4:13:a7:b4:4a:89:84:37:ef:91:
                    bd:20:36:fd:8e:45:71:29:64:12:56:5e:b8:6a:ed:
                    15:a9:72:c1:0b:3a:26:e4:4e:bf:57:27:bc:80:21:
                    0e:66:2d:44:25:e9:f8:bd:bd:04:87:06:d0:62:95:
                    ab:23:67:09:52:b3:9c:68:66:79:ed:13:29:2c:66:
                    77:a5:47:8e:ad:46:33:f9:0a:de:46:c8:41:e0:d5:
                    12:45:6f:47:35:ce:9a:ee:b4:39:3a:bc:c4:e3:1a:
                    e3:83:67:01:dc:73:65:9c:41:51:58:ff:b8:a5:7b:
                    b4:7c:7e:b0:d3:9d:61:5c:4b:9c:5f:ab:97:aa:4d:
                    95:4f:42:3f:42:7f:71:46:56:5b:94:60:53:b6:d7:
                    29:ed:1d:54:0d:6b:d8:12:5a:67:c2:07:e0:07:44:
                    dd:49:3d:8a:f5:c9:22:9f:6e:08:e4:53:8b:55:6d:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:68:CE:F5:F3:7B:C0:D5:EF:DD:23:2F:2A:9B:BB:5D:35:54:97:76
            X509v3 Authority Key Identifier:
                keyid:88:10:EF:A8:9B:F5:E1:68:84:07:C9:B3:F3:EA:38:66:1B:17:82:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d313238203d3e20323638303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:e4:e5:1f:bb:c1:a8:78:30:50:c0:93:7c:27:e1:d7:8d:0c:
         75:c8:d8:39:5a:af:01:b7:d5:d1:cb:ad:ab:d9:78:e2:73:01:
         5c:00:1a:38:a9:bd:6e:4e:5a:95:ec:7c:33:1a:4c:15:6e:e3:
         ab:2d:e3:4b:39:45:64:12:34:e1:e3:b6:81:e7:19:b3:65:8e:
         94:c7:d9:53:d5:ea:6c:04:d5:b9:d9:31:4d:ee:06:17:07:d4:
         41:44:9d:39:8d:bf:11:c2:0b:4d:a8:77:bf:5e:36:af:9e:10:
         a4:a8:ca:69:f9:29:d1:21:09:c0:f5:58:04:72:c2:c8:46:d0:
         0d:cf:7c:57:b1:71:20:3b:01:2a:29:6b:7d:00:30:54:f5:30:
         60:4a:07:9f:93:5d:57:93:9f:29:97:4b:8b:18:87:17:2f:e3:
         da:98:69:f5:b7:5f:35:0d:c2:a4:f2:f3:14:83:5b:64:71:0b:
         b9:44:33:12:7c:1b:16:7a:0d:6f:7b:b3:27:c2:08:8a:2d:88:
         eb:ca:61:7e:43:ec:d9:74:b6:06:c0:9b:7a:d1:5c:ae:93:56:
         49:86:8a:2d:6a:85:f7:3f:a7:8d:f6:4f:ae:6c:e6:f0:f8:51:
         b2:43:a9:4e:34:17:50:a7:de:22:0f:8b:76:c7:86:c1:0c:30:
         6d:f6:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 01:36:22 2024 by rpki-client on console-ams.rpki-client.org