Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa
File:                     323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa (raw, json)
Hash identifier:          eQgDnNZUzZr2z93Y8YKFFf7vGzPvDCzL2T/9fRcdyUI=
Subject key identifier:   97:E5:F8:1B:25:F9:11:43:AD:0A:56:F7:B5:28:5D:A2:5E:9A:3E:AA
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       363FB78834C1E61DA9F838F95FC6129A883E92EB
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa
Signing time:             Mon 29 May 2023 13:45:51 +0000
ROA not before:           Mon 29 May 2023 13:40:51 +0000
ROA not after:            Mon 27 May 2024 13:45:51 +0000
asID:                     265241
IP address blocks:        2804:2cc0:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Sat 17 Feb 2024 21:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3f:b7:88:34:c1:e6:1d:a9:f8:38:f9:5f:c6:12:9a:88:3e:92:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: May 29 13:40:51 2023 GMT
            Not After : May 27 13:45:51 2024 GMT
        Subject: CN=97E5F81B25F91143AD0A56F7B5285DA25E9A3EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b7:0d:0e:08:14:bb:26:24:32:aa:ee:64:ca:
                    9b:15:e6:5a:33:8a:74:a5:99:b2:49:a4:ff:dd:5c:
                    d3:94:df:20:1c:bb:f2:64:ca:4f:ef:85:af:49:36:
                    96:aa:bb:7d:81:f5:c9:51:79:35:02:e3:aa:85:28:
                    ac:69:42:92:a1:cd:cb:e3:58:bf:79:2e:6d:ba:1f:
                    8e:23:2b:4f:66:a5:0e:19:20:d0:c7:09:e2:5c:d2:
                    e4:25:04:b2:ad:7e:10:1f:7f:e3:aa:f8:f0:0f:dc:
                    95:d5:7c:ea:a7:6c:40:7a:62:0c:63:d5:0a:b4:ab:
                    d4:0f:45:38:45:dd:1e:6d:20:96:af:da:9b:dd:8a:
                    b6:1d:bd:e8:b3:cb:ca:14:0a:a0:7a:22:23:0b:8e:
                    25:08:56:6e:f0:6f:27:32:c8:56:46:7d:69:bc:0d:
                    e5:7e:8a:b0:5d:8b:5c:3f:4b:81:24:29:da:c6:7d:
                    4a:97:fb:cb:8c:94:be:46:c8:b0:04:28:8b:e2:c0:
                    ee:a1:f3:05:d9:08:86:19:1c:e3:da:cc:d7:1b:e4:
                    e7:bb:4c:d7:b8:fe:3b:03:7d:b5:07:6a:b3:7d:3f:
                    6b:64:16:42:2d:06:af:c4:39:9a:b1:45:2f:3b:b1:
                    01:29:ba:bf:ea:ce:f1:30:74:14:d8:4a:41:ad:1c:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E5:F8:1B:25:F9:11:43:AD:0A:56:F7:B5:28:5D:A2:5E:9A:3E:AA
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:52:df:03:8b:d2:65:d9:cd:3d:b1:89:f3:e7:8f:52:14:93:
         0c:29:87:b9:1b:b5:7f:db:17:90:30:7a:f4:ca:ed:f8:5a:ff:
         a8:7e:4a:de:ff:7d:5d:7a:75:c4:10:b2:9d:ee:26:79:17:f0:
         cb:33:f5:f6:64:cf:cb:a8:fd:31:a1:fb:e5:cc:4e:7b:d3:1e:
         c7:cc:67:a5:1e:46:ca:32:b0:ae:42:b4:f9:f3:db:02:74:66:
         ce:f9:bb:e8:2a:d9:59:04:c9:17:91:b9:eb:14:86:77:53:af:
         4a:c9:bf:6e:80:d4:79:fc:90:1b:82:f7:23:c5:b2:52:4b:87:
         fe:2c:4d:04:bd:a1:ed:fb:9c:b4:e3:c6:bf:45:79:82:8f:07:
         19:7d:85:db:71:68:d8:8f:90:55:7e:1c:ee:12:5f:c0:ab:0d:
         12:ce:04:e7:a2:88:a9:11:01:bb:72:1c:5f:8a:cc:a4:09:10:
         60:13:8c:62:34:12:b7:90:d7:38:57:28:ab:c2:b1:a7:f9:0e:
         f0:2c:0a:72:93:35:56:62:b6:e9:55:d7:ca:52:26:28:0d:c3:
         a5:88:eb:47:f3:a1:2e:42:e4:3e:4c:6d:a1:a3:54:37:32:06:
         39:c8:6b:88:77:ab:be:db:96:a4:c0:7d:ee:41:20:c8:44:29:
         53:4f:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 17 23:38:17 2024 by rpki-client on console-ams.rpki-client.org