Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33332d3333203d3e20323632343337.roa
File:                     323830343a3437633a3a2f33332d3333203d3e20323632343337.roa (raw, json)
Hash identifier:          5sT4Uffhe/G91rvI4VMnqGUa3NhASMm7KFhr0SL3hjI=
Subject key identifier:   23:12:49:6E:3C:80:15:F0:22:75:2E:75:47:E4:36:EF:C2:30:1B:C5
Certificate issuer:       /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial:       357D09B5EEC2AA02EF2F67C8F79982AA665F4812
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33332d3333203d3e20323632343337.roa
Signing time:             Wed 24 Apr 2024 13:03:16 +0000
ROA not before:           Wed 24 Apr 2024 12:58:16 +0000
ROA not after:            Wed 23 Apr 2025 13:03:16 +0000
asID:                     262437
IP address blocks:        2804:47c::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 22 May 2024 11:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7d:09:b5:ee:c2:aa:02:ef:2f:67:c8:f7:99:82:aa:66:5f:48:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
        Validity
            Not Before: Apr 24 12:58:16 2024 GMT
            Not After : Apr 23 13:03:16 2025 GMT
        Subject: CN=2312496E3C8015F022752E7547E436EFC2301BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:35:90:64:5d:fb:9e:bd:56:89:93:95:da:
                    13:02:47:ec:74:06:b2:78:26:f4:0a:20:38:28:a2:
                    bb:06:6c:43:b8:e4:9c:08:05:67:ec:7b:b3:9c:1c:
                    e9:4a:12:02:e0:ff:43:3a:dd:36:3b:e6:21:5c:a6:
                    12:6b:c8:24:08:30:ec:db:1f:33:a8:78:c2:bc:3b:
                    80:58:dc:9a:fd:79:43:68:fb:a0:e2:5e:9f:58:2b:
                    a5:5e:f3:f4:68:c7:f8:47:6d:bc:e5:50:c1:d2:a8:
                    b3:e9:1b:7f:dc:2e:3c:7f:bc:a7:c0:39:63:f9:76:
                    f7:77:26:d3:c2:ce:f5:4f:f9:75:7b:4d:c8:6d:da:
                    54:b6:59:b9:2b:57:15:bd:d7:0d:6d:b9:f8:75:37:
                    13:47:f8:67:e9:29:60:98:73:82:9d:df:ab:25:e5:
                    77:f3:ca:28:e3:8a:79:48:fc:2a:cb:2c:d6:d5:80:
                    9f:73:f9:91:b0:d4:e6:4d:d3:af:33:e9:90:da:59:
                    1f:5b:9d:d2:b9:f9:1a:36:45:a0:d8:7a:ae:e9:67:
                    e7:37:ce:b7:40:c9:fb:76:94:b4:b6:90:3a:f7:52:
                    c7:7b:6f:8d:52:4f:e0:db:01:7d:33:f9:32:4c:89:
                    67:eb:1a:a7:f3:15:1b:5c:eb:ad:97:2f:71:77:45:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:12:49:6E:3C:80:15:F0:22:75:2E:75:47:E4:36:EF:C2:30:1B:C5
            X509v3 Authority Key Identifier:
                keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/323830343a3437633a3a2f33332d3333203d3e20323632343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c::/33

    Signature Algorithm: sha256WithRSAEncryption
         d3:48:6d:4d:55:bb:ac:6d:ee:1a:57:98:c9:0a:c6:35:24:c0:
         c0:4b:cc:72:3b:18:90:76:b3:f6:80:ed:b8:b5:52:31:f7:d7:
         b9:22:80:61:4d:63:03:02:ec:b5:21:da:28:5a:34:29:ae:c5:
         6a:3e:b4:e9:c9:7e:36:c4:e3:d3:09:5e:7c:23:21:77:cd:12:
         f7:24:88:22:08:0b:84:6c:c9:0b:08:18:56:8a:56:a8:db:1a:
         60:06:d9:45:ca:aa:02:1b:1a:cf:30:4a:bc:f2:e6:8d:99:07:
         2d:e8:51:f2:27:ac:19:ee:fa:2f:f8:8e:c8:60:fd:42:84:4b:
         b2:e1:8a:e2:59:32:43:75:c3:7d:ef:c3:1f:90:0a:c4:cc:ce:
         f9:69:1a:57:03:e5:57:8a:29:06:53:72:58:34:12:f9:3f:be:
         54:60:74:8d:e7:8e:7a:7c:a5:f2:67:21:33:92:82:c1:53:56:
         c8:cb:4a:77:62:8c:37:6b:3b:b7:24:a6:a8:b4:02:56:bb:ca:
         93:e7:d3:d3:1e:c3:ea:5b:82:75:b1:6a:98:e3:68:c3:bd:8f:
         c5:02:36:d0:ca:1c:2b:6c:c0:b0:58:bc:51:ee:9e:52:f6:30:
         51:82:fd:0c:99:bf:6f:69:74:66:82:a1:b8:ae:b4:58:8c:f0:
         86:58:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org