Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a383030303a3a2f33332d3333203d3e20323634393030.roa
File:                     323830343a326639343a383030303a3a2f33332d3333203d3e20323634393030.roa (raw, json)
Hash identifier:          VghkboGKFA0jbn3g+rgoYzXbDfSensXmbakLnJzaeqg=
Subject key identifier:   AF:E7:E8:C3:A4:52:9A:4A:61:1E:3D:18:E1:4C:9D:3D:9C:B2:4B:26
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       2D70B67605908804776509ADD2E0F6B1832CA31F
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a383030303a3a2f33332d3333203d3e20323634393030.roa
Signing time:             Thu 18 Apr 2024 13:12:06 +0000
ROA not before:           Thu 18 Apr 2024 13:07:06 +0000
ROA not after:            Thu 17 Apr 2025 13:12:06 +0000
asID:                     264900
IP address blocks:        2804:2f94:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:70:b6:76:05:90:88:04:77:65:09:ad:d2:e0:f6:b1:83:2c:a3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: Apr 18 13:07:06 2024 GMT
            Not After : Apr 17 13:12:06 2025 GMT
        Subject: CN=AFE7E8C3A4529A4A611E3D18E14C9D3D9CB24B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:1b:3b:d4:02:99:eb:a8:12:e8:9f:84:90:
                    9b:48:a2:af:0e:4c:f3:0d:77:18:e0:cf:05:b1:b8:
                    42:8f:42:0f:69:35:b0:df:3f:20:0b:37:b8:49:42:
                    8a:53:a2:f7:73:5a:68:ac:d1:31:6b:07:da:b9:1a:
                    e8:fb:f1:5b:93:37:24:78:69:2b:6c:c2:e3:2d:6f:
                    4d:1c:f0:54:cf:69:68:06:eb:35:56:93:be:e5:18:
                    92:cf:34:4b:57:96:69:71:75:99:95:a1:7b:0b:28:
                    3a:89:9b:0c:78:e2:67:24:e1:76:f2:76:a4:a9:f4:
                    c2:f6:12:30:d0:40:01:c8:94:27:81:65:e4:66:f7:
                    0b:f7:e8:af:c7:c3:bb:61:46:a4:a5:31:d4:24:85:
                    e9:d6:f6:6a:32:a4:2c:e9:83:44:ac:8e:b6:9c:7f:
                    4a:fb:ae:36:b1:7f:18:45:63:60:5c:df:bc:f5:2b:
                    f0:97:b2:72:43:1c:d3:cf:24:e5:3e:30:4a:46:e5:
                    5c:4a:8f:5b:fb:73:50:e5:b0:92:33:3a:68:87:f8:
                    f0:97:32:59:0c:89:70:9a:e0:d5:19:3b:40:c3:5b:
                    85:11:6c:0e:f6:36:9a:e0:08:53:5d:be:40:ac:43:
                    9a:9d:5b:c6:ed:80:f4:f8:c6:d9:0f:66:a6:cc:57:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E7:E8:C3:A4:52:9A:4A:61:1E:3D:18:E1:4C:9D:3D:9C:B2:4B:26
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a383030303a3a2f33332d3333203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f94:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:69:64:de:2b:81:88:ff:57:65:06:5b:fd:b4:68:05:c9:ae:
         3e:2b:b5:27:7e:9b:5e:c6:3c:48:5e:f3:77:51:cd:97:4e:64:
         25:1c:45:ea:71:e1:e0:6c:d9:a9:a7:52:79:9a:5e:22:de:d9:
         cf:cc:42:06:82:41:3c:49:e7:13:ef:a0:3e:9a:30:4f:81:31:
         36:0c:ca:bf:a8:96:73:07:33:df:8f:ff:63:88:15:ea:4d:34:
         73:de:74:3e:4c:ae:88:7c:75:01:5e:81:11:fc:03:9e:b9:fa:
         e0:50:d2:f4:c0:23:f0:78:10:bc:d5:17:5d:b2:b5:76:68:cc:
         2c:ee:a8:19:5b:34:31:65:f2:84:99:9c:43:24:ba:5a:38:fc:
         98:8e:08:1c:bd:1a:f0:5c:05:a2:c8:eb:5d:ea:30:66:74:6f:
         49:7c:67:77:c5:65:3c:19:ff:d4:7e:53:b9:8d:b0:3b:da:4e:
         da:44:59:c0:d3:12:2a:71:33:f3:47:8b:4d:c1:2b:b1:a6:5f:
         e2:b5:ad:32:f6:05:22:7b:dc:ac:e0:b9:c0:a7:88:20:b9:04:
         2f:8e:e9:e1:ee:d8:c7:36:65:28:da:f3:b1:47:e5:59:db:99:
         2f:36:33:0b:bb:3f:2e:db:a6:33:22:f7:14:60:8b:a6:49:23:
         0c:d6:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org