Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343930.roa
File:                     323830343a386634343a3a2f33322d313238203d3e20323733343930.roa (raw, json)
Hash identifier:          VXPe2sCkr0IkTRlH2gnnHHlCABrkf9C5KlK1dkNM7dU=
Subject key identifier:   AF:44:91:A8:B0:74:F7:3A:0F:94:B6:19:7B:C7:6F:40:DC:6A:34:4A
Certificate issuer:       /CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
Certificate serial:       7231D4CF98C2991E0186CDCE10B27C23E59309F3
Authority key identifier: BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343930.roa
Signing time:             Thu 16 May 2024 14:57:30 +0000
ROA not before:           Thu 16 May 2024 14:52:30 +0000
ROA not after:            Thu 15 May 2025 14:57:30 +0000
asID:                     273490
IP address blocks:        2804:8f44::/32 maxlen: 128

Validation:               Failed, certificate revoked on Tue 28 May 2024 18:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:31:d4:cf:98:c2:99:1e:01:86:cd:ce:10:b2:7c:23:e5:93:09:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
        Validity
            Not Before: May 16 14:52:30 2024 GMT
            Not After : May 15 14:57:30 2025 GMT
        Subject: CN=AF4491A8B074F73A0F94B6197BC76F40DC6A344A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c0:39:e3:d8:40:ef:46:7d:41:ee:47:44:04:
                    c7:3d:24:c2:64:3c:c0:61:74:1c:46:b3:64:c9:99:
                    c3:d2:0f:7a:f1:28:bd:94:97:ce:a6:34:4e:26:66:
                    f2:54:73:22:d7:ad:c4:61:e7:51:f7:18:fe:9c:f7:
                    9a:1f:94:42:d8:fa:15:51:be:e2:e6:4d:e2:b8:bb:
                    cc:31:d5:77:83:bd:27:ad:36:04:81:17:a8:b7:3b:
                    dc:4b:a3:15:9b:8d:b8:73:00:0c:e7:37:f7:0a:f4:
                    2a:66:4b:2d:c5:aa:be:49:71:c8:13:ed:5f:d7:fe:
                    6c:ce:b9:c8:4e:c7:bb:9e:31:1d:7e:bc:f1:42:00:
                    92:b9:b7:87:f6:85:d4:40:55:eb:e3:51:a8:d9:40:
                    52:f0:30:1a:4d:a9:c7:28:c6:2e:2a:df:3e:b0:34:
                    e0:7a:64:49:1d:2b:8f:ea:87:3f:17:5b:ab:af:2e:
                    a8:69:7f:eb:3a:6b:0f:16:61:43:53:62:0d:ed:25:
                    ab:d4:d3:ad:a5:8c:93:20:24:8a:9b:d2:72:9e:bd:
                    bd:76:5f:65:2d:87:59:47:62:22:13:fb:b1:ff:f8:
                    45:f5:ae:05:93:03:ed:af:d9:b8:07:7c:3b:a6:f1:
                    23:79:09:e1:40:44:3f:12:b4:95:c2:73:ec:03:2e:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:44:91:A8:B0:74:F7:3A:0F:94:B6:19:7B:C7:6F:40:DC:6A:34:4A
            X509v3 Authority Key Identifier:
                keyid:BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/323830343a386634343a3a2f33322d313238203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f44::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:e9:9c:5b:4e:c7:ac:d3:73:96:5e:28:60:b4:e0:dd:e8:
         69:b0:91:65:0f:ba:92:29:99:6a:68:b4:1e:56:f9:6d:9b:fb:
         fc:cd:e8:8c:a4:c4:70:5e:75:85:dd:81:c4:96:dd:0d:89:ce:
         d2:49:be:12:92:e0:a2:cd:4b:cb:d8:c2:a5:9b:00:55:42:32:
         b4:d2:11:f8:61:34:ae:64:2f:1b:30:4d:5e:4e:6a:d7:cb:93:
         c7:bc:6d:c8:9f:bf:ea:7a:f4:73:a8:c0:66:2e:05:66:9e:d6:
         21:fe:a6:e0:09:09:da:9d:c4:96:92:35:89:f9:3d:f3:cf:b9:
         fc:ea:d9:b6:9e:39:a5:82:4f:f6:45:f2:01:5c:ff:3f:6d:0e:
         dd:88:f8:a4:fd:23:88:27:75:17:c3:9b:b1:78:fc:a9:30:20:
         51:43:f6:a4:15:57:ec:ba:43:95:62:b2:8e:d7:b1:68:21:ed:
         91:24:21:28:c9:ed:4d:64:85:0a:d7:3d:d0:4d:f4:4c:8a:a0:
         00:e2:60:45:be:82:14:4f:2e:70:aa:2f:7b:17:d0:76:ec:5d:
         7d:e3:d8:4f:3a:5b:e7:76:81:b4:55:8e:bb:37:e5:83:78:ee:
         e8:c0:9c:61:39:11:58:90:7d:f3:01:80:80:38:ab:32:33:1b:
         df:66:ff:67
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUcjHUz5jCmR4Bhs3OELJ8I+WTCfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRFMURBMkVFMTJFNzYyM0NENTg2OTZDRkMzMkExRDY4
OTgwRjRGNDAeFw0yNDA1MTYxNDUyMzBaFw0yNTA1MTUxNDU3MzBaMDMxMTAvBgNV
BAMTKEFGNDQ5MUE4QjA3NEY3M0EwRjk0QjYxOTdCQzc2RjQwREM2QTM0NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxwDnj2EDvRn1B7kdEBMc9JMJk
PMBhdBxGs2TJmcPSD3rxKL2Ul86mNE4mZvJUcyLXrcRh51H3GP6c95oflELY+hVR
vuLmTeK4u8wx1XeDvSetNgSBF6i3O9xLoxWbjbhzAAznN/cK9CpmSy3Fqr5JccgT
7V/X/mzOuchOx7ueMR1+vPFCAJK5t4f2hdRAVevjUajZQFLwMBpNqccoxi4q3z6w
NOB6ZEkdK4/qhz8XW6uvLqhpf+s6aw8WYUNTYg3tJavU062ljJMgJIqb0nKevb12
X2Uth1lHYiIT+7H/+EX1rgWTA+2v2bgHfDum8SN5CeFARD8StJXCc+wDLpRbAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUr0SRqLB09zoPlLYZe8dvQNxqNEowHwYDVR0j
BBgwFoAUveHaLuEudiPNWGls/DKh1omA9PQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkxEQ0JXZDgzbU5HWTlDcTVwRWRVSm00a1lyY0VDdUFRUzFTcEF4VDdy
ZDEvMC9CREUxREEyRUUxMkU3NjIzQ0Q1ODY5NkNGQzMyQTFENjg5ODBGNEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTFEQTJFRTEyRTc2MjND
RDU4Njk2Q0ZDMzJBMUQ2ODk4MEY0RjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMRENCV2Q4M21OR1k5Q3E1cEVkVUptNGtZcmNFQ3VBUVMxU3BBeFQ3cmQxLzAv
MzIzODMwMzQzYTM4NjYzNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI9EMA0GCSqGSIb3DQEBCwUAA4IBAQAf0Omc
W07HrNNzll4oYLTg3ehpsJFlD7qSKZlqaLQeVvltm/v8zeiMpMRwXnWF3YHElt0N
ic7SSb4SkuCizUvL2MKlmwBVQjK00hH4YTSuZC8bME1eTmrXy5PHvG3In7/qevRz
qMBmLgVmntYh/qbgCQnancSWkjWJ+T3zz7n86tm2njmlgk/2RfIBXP8/bQ7diPik
/SOIJ3UXw5uxePypMCBRQ/akFVfsukOVYrKO17FoIe2RJCEoye1NZIUK1z3QTfRM
iqAA4mBFvoIUTy5wqi97F9B27F1949hPOlvndoG0VY67N+WDeO7owJxhORFYkH3z
AYCAOKsyMxvfZv9n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org