Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a383030303a3a2f33332d3333203d3e20323632343434.roa
File:                     323830343a6437383a383030303a3a2f33332d3333203d3e20323632343434.roa (raw, json)
Hash identifier:          7BAovI7EFzs66cMGVx/UJI/YJjHKn4H3zTpM7R5tXK0=
Subject key identifier:   26:E3:30:BB:0B:AD:0F:56:16:21:73:12:85:F1:E7:58:AB:C2:C2:8B
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       665899C64766E459F7AFC1623E3441426B4E2466
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a383030303a3a2f33332d3333203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:40 +0000
ROA not before:           Wed 07 Aug 2024 13:09:40 +0000
ROA not after:            Wed 06 Aug 2025 13:14:40 +0000
asID:                     262444
IP address blocks:        2804:d78:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:58:99:c6:47:66:e4:59:f7:af:c1:62:3e:34:41:42:6b:4e:24:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:40 2024 GMT
            Not After : Aug  6 13:14:40 2025 GMT
        Subject: CN=26E330BB0BAD0F561621731285F1E758ABC2C28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:05:07:10:4c:bf:a9:34:02:5c:0c:3e:91:
                    0b:6c:da:ba:7d:09:b5:3a:00:27:1c:3d:fe:09:69:
                    75:11:01:44:e5:ba:ed:b0:88:d6:8f:5c:c9:81:ca:
                    7e:93:f6:cd:c3:48:08:7c:bb:5c:7e:54:92:29:bc:
                    3a:01:0c:26:a1:ed:39:84:e7:e6:9c:45:a7:71:1c:
                    44:9f:8f:59:9a:90:24:1f:5c:4f:35:ef:01:eb:27:
                    6f:50:77:71:a5:ce:f2:49:42:3a:42:ff:c4:14:6b:
                    d8:63:42:c3:3c:ff:30:a1:4c:86:f6:8b:b3:e3:13:
                    02:8e:9d:86:88:2e:95:be:44:35:11:da:ca:eb:3e:
                    27:7d:5d:ea:61:c3:52:91:cb:94:db:bb:12:d7:62:
                    e2:2b:a7:be:f8:f3:ca:61:df:df:a1:4d:a6:a3:81:
                    ce:87:40:c2:3d:2a:83:bd:81:6d:0b:cb:bc:4b:b3:
                    03:15:d0:1b:98:90:bf:76:ba:44:78:74:14:78:c8:
                    06:f6:5e:78:1b:06:56:36:fe:71:26:d5:d3:b3:a3:
                    4e:5d:4f:4d:41:8d:89:e4:af:0b:65:f7:67:28:13:
                    bd:23:85:45:06:4c:46:7b:60:5e:08:c8:1c:86:1c:
                    c0:f9:a2:5f:7d:59:84:c0:34:da:70:99:1e:81:bd:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E3:30:BB:0B:AD:0F:56:16:21:73:12:85:F1:E7:58:AB:C2:C2:8B
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/323830343a6437383a383030303a3a2f33332d3333203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:05:a0:9d:95:72:c2:55:e3:62:16:9b:fe:26:2e:a1:47:0a:
         a5:f6:61:3e:8a:99:ec:29:06:ba:d5:92:bb:e6:fb:0b:8c:0e:
         9b:3c:8e:20:ea:b9:13:05:cd:05:3f:5f:e0:83:04:21:65:2f:
         18:eb:7f:63:50:b9:4f:fd:1d:ec:83:bd:80:75:0e:b1:fc:eb:
         6f:8f:ab:de:51:6a:52:8b:4f:2e:7d:79:0a:48:29:d2:0b:64:
         5a:43:24:ff:7f:7a:11:3c:6d:c6:af:97:bc:1f:27:16:52:0a:
         7b:40:aa:0f:47:df:70:8e:43:6a:9e:d0:1c:f2:83:ef:e5:1c:
         08:f5:99:95:17:4d:4f:8f:09:ae:f0:5e:d4:a3:55:5a:1a:3f:
         80:d2:d0:7a:7d:a9:98:a0:14:7a:87:8c:4c:92:c6:4a:89:94:
         87:a0:ec:16:1f:f7:db:dc:0a:5d:37:6b:59:6e:a6:ee:72:78:
         93:46:14:d6:62:d3:f6:66:e1:13:f0:0d:3c:51:fc:6f:cc:60:
         cb:a3:1d:85:49:96:03:82:8f:ef:63:5e:f1:06:78:81:7a:75:
         4e:9b:d9:d6:66:c3:25:b5:b5:af:8e:d0:b7:3b:7a:67:7b:f7:
         a0:03:69:2c:7b:b6:a8:5b:6b:b8:58:4e:a1:6a:72:ae:2f:98:
         9f:50:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org