Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/323830343a376162343a3a2f33322d3334203d3e20323731333837.roa
File:                     323830343a376162343a3a2f33322d3334203d3e20323731333837.roa (raw, json)
Hash identifier:          bLHfgKYr/YMoOYVEhIK5hw1W/FYKB/mpYTpG+kXI8jw=
Subject key identifier:   0B:C2:7C:B6:C7:CC:4E:C1:9F:F0:D3:10:1E:31:48:41:58:AD:0D:47
Certificate issuer:       /CN=CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB
Certificate serial:       40C04FE476AE3BFCA23DCB5B79C78F956890553F
Authority key identifier: CE:EA:8A:82:DF:D1:65:7B:45:EA:51:8E:D6:EE:D9:1D:63:C8:C6:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/323830343a376162343a3a2f33322d3334203d3e20323731333837.roa
Signing time:             Thu 04 Apr 2024 09:07:25 +0000
ROA not before:           Thu 04 Apr 2024 09:02:25 +0000
ROA not after:            Thu 03 Apr 2025 09:07:25 +0000
asID:                     271387
IP address blocks:        2804:7ab4::/32 maxlen: 34

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 19:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c0:4f:e4:76:ae:3b:fc:a2:3d:cb:5b:79:c7:8f:95:68:90:55:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB
        Validity
            Not Before: Apr  4 09:02:25 2024 GMT
            Not After : Apr  3 09:07:25 2025 GMT
        Subject: CN=0BC27CB6C7CC4EC19FF0D3101E31484158AD0D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:b8:3f:6e:b5:f8:64:19:57:71:63:7a:9e:
                    bf:7a:93:c0:64:1f:e7:b8:e9:5d:2c:81:ce:2d:ae:
                    0d:0b:10:a9:f7:c3:d8:1e:05:1d:af:7f:9a:99:08:
                    2c:c6:bd:86:af:1a:f3:35:66:b4:c3:47:48:28:80:
                    6d:2c:ae:07:59:ec:9f:a2:06:fd:dd:43:fc:dd:7b:
                    47:97:d7:d4:89:c0:26:86:55:f9:cb:fd:ce:7a:91:
                    51:5d:9f:36:05:c7:8b:a2:60:43:cd:6b:3a:87:a7:
                    a0:56:93:58:51:cd:ef:ee:7b:44:02:4c:9e:b0:af:
                    d2:2f:3f:82:9b:dd:33:a3:98:4c:f6:27:0b:3d:ba:
                    31:8d:db:55:4a:1a:9f:0e:42:a7:eb:d2:d0:60:79:
                    c2:3f:00:ed:0b:3b:0f:5e:9b:42:17:cf:6e:f9:e0:
                    12:6e:ea:e2:31:98:32:3e:ec:b1:3c:84:9f:96:d8:
                    ff:82:e5:a7:06:a4:87:22:c5:70:76:99:1c:21:05:
                    31:c4:5b:6f:e9:bc:c7:9d:ba:e7:b1:34:7a:35:4e:
                    83:86:d2:93:1e:65:30:e1:9b:db:9f:31:3e:47:df:
                    88:09:70:90:a6:4a:0d:e0:9d:52:04:e5:77:ce:c4:
                    ca:c0:8b:84:74:ae:a2:35:8e:70:00:05:42:6b:87:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:7C:B6:C7:CC:4E:C1:9F:F0:D3:10:1E:31:48:41:58:AD:0D:47
            X509v3 Authority Key Identifier:
                keyid:CE:EA:8A:82:DF:D1:65:7B:45:EA:51:8E:D6:EE:D9:1D:63:C8:C6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/323830343a376162343a3a2f33322d3334203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:0e:eb:2b:ee:5d:fd:73:96:42:34:4c:26:b3:00:5f:53:df:
         02:a4:57:f7:5a:12:19:1f:05:b2:4d:3d:f2:69:e8:57:70:85:
         53:ac:fd:5b:f1:19:c9:72:95:db:1c:cc:74:14:0c:7c:55:2f:
         5f:56:68:7b:a7:80:b0:bc:0c:7e:0b:52:74:8d:35:6b:48:21:
         03:2f:2c:00:98:24:fb:f3:40:09:60:bd:a6:6a:f7:c4:f8:35:
         5d:59:28:d1:4b:dc:49:67:95:1e:70:3e:46:4f:06:3b:cc:06:
         07:fd:8e:08:c3:47:0a:a3:c6:d8:d9:7d:89:8b:77:db:52:4a:
         22:b5:48:81:93:28:23:f7:66:fe:0e:12:1c:f1:65:19:3c:18:
         53:e7:9b:44:3f:fd:11:66:cf:86:cb:12:e3:92:28:88:1b:ca:
         7a:b4:a1:80:96:99:f0:23:b2:32:c1:76:66:43:1c:89:0e:32:
         aa:78:a2:79:ed:d7:27:c8:d7:97:77:1a:a8:f0:65:01:13:2b:
         8c:c9:72:2c:f6:2b:2a:3a:79:e8:61:d4:d8:fc:ad:d9:85:23:
         39:73:1a:7c:ce:5f:ab:e6:7c:4a:fd:32:7e:f4:0a:2c:6a:48:
         94:0a:bc:51:69:71:ae:8c:15:e4:d0:ff:a9:a7:ba:e5:66:e4:
         78:13:7d:2d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQMBP5HauO/yiPctbecePlWiQVT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFQThBODJERkQxNjU3QjQ1RUE1MThFRDZFRUQ5MUQ2
M0M4QzZCQjAeFw0yNDA0MDQwOTAyMjVaFw0yNTA0MDMwOTA3MjVaMDMxMTAvBgNV
BAMTKDBCQzI3Q0I2QzdDQzRFQzE5RkYwRDMxMDFFMzE0ODQxNThBRDBENDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTarg/brX4ZBlXcWN6nr96k8Bk
H+e46V0sgc4trg0LEKn3w9geBR2vf5qZCCzGvYavGvM1ZrTDR0gogG0srgdZ7J+i
Bv3dQ/zde0eX19SJwCaGVfnL/c56kVFdnzYFx4uiYEPNazqHp6BWk1hRze/ue0QC
TJ6wr9IvP4Kb3TOjmEz2Jws9ujGN21VKGp8OQqfr0tBgecI/AO0LOw9em0IXz275
4BJu6uIxmDI+7LE8hJ+W2P+C5acGpIcixXB2mRwhBTHEW2/pvMeduuexNHo1ToOG
0pMeZTDhm9ufMT5H34gJcJCmSg3gnVIE5XfOxMrAi4R0rqI1jnAABUJrhwiLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUC8J8tsfMTsGf8NMQHjFIQVitDUcwHwYDVR0j
BBgwFoAUzuqKgt/RZXtF6lGO1u7ZHWPIxrswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhv
dEovMS9DRUVBOEE4MkRGRDE2NTdCNDVFQTUxOEVENkVFRDkxRDYzQzhDNkJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFRUE4QTgyREZEMTY1N0I0
NUVBNTE4RUQ2RUVEOTFENjNDOEM2QkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaa1dNQnFvc21aYndRUXJNUkg3bnNZOEg3VGgzQ1pCcmp0NzRySGJIb3RKLzEv
MzIzODMwMzQzYTM3NjE2MjM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMx
MzMzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR6tDANBgkqhkiG9w0BAQsFAAOCAQEAag7rK+5d
/XOWQjRMJrMAX1PfAqRX91oSGR8Fsk098mnoV3CFU6z9W/EZyXKV2xzMdBQMfFUv
X1Zoe6eAsLwMfgtSdI01a0ghAy8sAJgk+/NACWC9pmr3xPg1XVko0UvcSWeVHnA+
Rk8GO8wGB/2OCMNHCqPG2Nl9iYt321JKIrVIgZMoI/dm/g4SHPFlGTwYU+ebRD/9
EWbPhssS45IoiBvKerShgJaZ8COyMsF2ZkMciQ4yqniiee3XJ8jXl3caqPBlARMr
jMlyLPYrKjp56GHU2Pyt2YUjOXMafM5fq+Z8Sv0yfvQKLGpIlAq8UWlxrowV5ND/
qae65WbkeBN9LQ==
-----END CERTIFICATE-----
Generated at Tue Jul 2 20:14:17 2024 by rpki-client on console-ams.rpki-client.org