Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a343030303a3a2f33342d3334203d3e20323632343434.roa
File:                     323830343a6437383a343030303a3a2f33342d3334203d3e20323632343434.roa (raw, json)
Hash identifier:          m+RP4rc9pBLm5imBChwVNdArdCDdGTIwnO6lxrVMXqU=
Subject key identifier:   EF:1D:3D:B2:AE:3F:D5:5F:A1:97:C7:83:E4:42:80:E8:0C:5B:CB:64
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       08BDB868BBA9D7E79E05E1A00A29458E34D2D665
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a343030303a3a2f33342d3334203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:34 +0000
ROA not before:           Wed 07 Aug 2024 13:09:34 +0000
ROA not after:            Wed 06 Aug 2025 13:14:34 +0000
asID:                     262444
IP address blocks:        2804:d78:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bd:b8:68:bb:a9:d7:e7:9e:05:e1:a0:0a:29:45:8e:34:d2:d6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:34 2024 GMT
            Not After : Aug  6 13:14:34 2025 GMT
        Subject: CN=EF1D3DB2AE3FD55FA197C783E44280E80C5BCB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:d1:f4:de:26:10:37:25:c8:90:7b:57:9e:
                    83:b0:d2:df:b2:57:4b:66:14:de:7f:07:bf:d4:f6:
                    21:32:17:1b:89:97:be:ec:fc:c2:1a:39:66:58:35:
                    7a:2c:bc:52:78:71:ff:8d:d6:aa:c8:05:b0:d2:79:
                    05:ce:9b:b3:1c:d4:8f:b0:21:22:6c:a0:39:d4:ab:
                    b4:48:c0:98:ce:1e:81:ab:cd:6e:dc:b6:ae:3e:cd:
                    c0:74:df:cc:9e:51:9c:2c:60:19:7f:c4:e5:49:4a:
                    2d:c2:4e:32:54:4f:04:a0:56:e5:2e:91:8f:56:94:
                    37:1b:df:2c:85:83:31:94:f5:ad:95:36:80:20:0d:
                    24:b0:d8:8b:94:c3:51:8d:e6:2a:11:f7:fd:b6:be:
                    ad:8a:2a:d3:16:bf:ce:e0:88:4d:41:fa:b0:14:dd:
                    8b:c4:53:c8:7d:74:73:f8:26:6c:e8:1e:46:cd:6b:
                    48:4b:b6:5c:d1:b4:83:cd:d5:0f:11:58:e1:a8:a0:
                    92:bd:70:ce:4e:b7:d2:84:69:43:03:76:96:4d:be:
                    d0:f4:35:0a:2c:34:a1:51:70:ef:82:31:7b:69:99:
                    b2:0f:fc:90:94:ae:96:4e:cc:50:33:d6:8c:20:72:
                    d5:7b:8f:e9:78:09:c8:98:d0:9b:2e:a7:63:52:c1:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:3D:B2:AE:3F:D5:5F:A1:97:C7:83:E4:42:80:E8:0C:5B:CB:64
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a343030303a3a2f33342d3334203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d78:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:39:72:e4:91:84:ba:be:1a:7b:9a:6b:89:09:71:1d:d4:7c:
         3c:49:40:56:71:ed:69:c3:75:36:cf:48:7d:6e:e3:a0:df:b4:
         75:79:c3:74:eb:0a:7d:6d:d3:91:61:58:13:b1:fb:8b:9d:08:
         26:1a:2a:9f:b5:75:2a:35:57:c4:9c:c5:14:6e:3b:c8:26:b8:
         2a:4d:38:6e:e9:cd:1f:2c:6c:46:7c:7a:b1:e4:e9:07:30:05:
         d1:76:7c:e6:b8:a5:54:1e:d2:07:86:ef:a0:6f:43:59:c7:29:
         ee:3a:08:ac:f1:50:04:d8:68:a3:9b:2b:29:bb:aa:2c:50:67:
         db:da:a7:02:ad:a5:6f:66:d1:e7:cf:2a:dc:54:eb:f2:99:b4:
         57:22:5b:99:de:59:49:7f:fb:c8:47:09:b3:bc:e4:30:f7:a1:
         cd:dd:0f:3d:74:fa:cb:0d:50:2b:9e:d0:41:dc:b9:10:6d:eb:
         f6:16:90:bc:88:a6:b5:4c:1b:9e:d6:5d:cb:e8:6c:be:73:2a:
         a0:3f:6a:44:b7:75:4e:23:e0:5c:a8:29:22:57:f6:4b:e6:0a:
         d9:ab:99:4a:3b:6a:f5:7b:59:1c:83:3d:d1:80:b3:0e:d9:36:
         c7:9f:25:be:39:bd:f3:cd:a6:b9:fb:cf:3e:30:b8:cf:35:1a:
         cd:6b:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 20:49:34 2024 by rpki-client on console-fra.rpki-client.org