Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3830303a3a2f33382d313238203d3e20323637323831.roa
File:                     323830343a346231303a3830303a3a2f33382d313238203d3e20323637323831.roa (raw, json)
Hash identifier:          5Aod6Pc9kwVvHrPpSpioldeXd1zyo26Nmf1zgJsWjcU=
Subject key identifier:   92:E3:B2:7A:7C:56:44:A8:F9:46:A2:C3:14:87:B6:07:6F:52:40:41
Certificate issuer:       /CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
Certificate serial:       571EE1B55A2A813C66DF7A97F5712F616B2CC062
Authority key identifier: E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3830303a3a2f33382d313238203d3e20323637323831.roa
Signing time:             Fri 24 May 2024 19:37:22 +0000
ROA not before:           Fri 24 May 2024 19:32:22 +0000
ROA not after:            Fri 23 May 2025 19:37:22 +0000
asID:                     267281
IP address blocks:        2804:4b10:800::/38 maxlen: 128

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 21:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1e:e1:b5:5a:2a:81:3c:66:df:7a:97:f5:71:2f:61:6b:2c:c0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
        Validity
            Not Before: May 24 19:32:22 2024 GMT
            Not After : May 23 19:37:22 2025 GMT
        Subject: CN=92E3B27A7C5644A8F946A2C31487B6076F524041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:47:2a:76:01:e7:c8:8b:1d:02:14:cf:74:
                    4f:23:3d:3a:79:dc:55:74:61:8f:6b:6e:8d:21:bb:
                    20:89:d0:19:02:80:0c:8c:07:5e:c5:4f:48:bb:78:
                    e0:fe:d5:61:56:2c:39:d3:0c:56:79:3b:67:ff:87:
                    dc:12:d9:ed:1b:b2:80:0b:a3:ec:18:ad:b4:45:99:
                    84:9d:4c:a2:e4:ed:67:c2:7a:17:71:10:8e:2e:92:
                    14:22:c1:b8:b5:82:f1:3f:bf:9b:37:10:a2:99:58:
                    fb:20:09:cd:6a:dd:e7:09:37:4c:4b:e1:61:5e:24:
                    2f:67:b8:79:d8:99:aa:32:a1:32:9c:a3:71:b4:9b:
                    dc:ad:f0:cf:85:d0:86:b0:27:65:65:a2:30:d1:0b:
                    88:59:0e:e6:b4:97:04:59:25:84:34:5c:87:90:0c:
                    d2:6a:5d:48:a9:3d:0d:d5:32:b6:77:91:d4:a4:a2:
                    03:89:fe:23:82:a4:e3:6a:41:a9:40:a7:8a:11:9d:
                    68:46:b8:aa:4b:f2:f2:cf:1c:6f:ed:ea:0e:fd:8a:
                    b6:78:83:0c:cf:30:fa:ff:98:73:0a:a8:b6:32:df:
                    c0:3f:1b:f5:4a:d7:ec:27:e3:61:20:5c:26:7e:7a:
                    7d:96:c1:d5:54:14:2d:d9:b9:56:5d:ae:21:b8:b5:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E3:B2:7A:7C:56:44:A8:F9:46:A2:C3:14:87:B6:07:6F:52:40:41
            X509v3 Authority Key Identifier:
                keyid:E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/E8B3AB514984BFB74981D1416FB52358A5A796BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3830303a3a2f33382d313238203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:b5:31:85:dc:c6:4a:d2:a9:65:be:52:51:89:0f:6c:fc:
         05:6a:22:47:50:63:15:96:90:11:4e:bf:fb:1b:be:fd:c4:08:
         f3:81:21:c7:37:41:23:78:c2:f3:aa:c8:d7:c4:39:5f:b7:dc:
         40:9d:aa:30:75:d2:3f:61:40:9d:80:dc:27:63:a8:cc:de:8c:
         6e:75:03:8b:c8:82:59:b8:85:57:57:20:82:35:c4:75:1d:c5:
         dc:9c:5f:fd:55:b6:c3:8e:ac:67:26:b9:fd:53:91:14:62:1c:
         7a:05:dc:d7:8d:55:e0:30:78:b8:eb:45:94:23:f2:9e:02:26:
         5d:bd:68:fd:d0:67:57:1c:4a:e5:37:4f:85:1c:e5:98:ac:ee:
         c4:74:7d:3f:60:ab:46:cb:c3:90:ce:1c:52:88:9e:73:0c:3f:
         f1:b3:84:48:ce:64:e5:c2:c9:a0:3e:ac:1a:44:5b:1c:43:0a:
         53:bc:b9:ec:a5:50:47:d3:ff:df:8a:07:f0:39:d0:4f:bd:69:
         5b:05:1b:65:75:c1:57:51:96:7e:46:de:1e:41:d6:77:9c:bd:
         83:6a:61:da:ac:d6:68:d3:7e:87:33:17:67:a6:05:27:56:83:
         1f:39:32:d7:4f:71:29:6f:da:b7:f1:7c:19:5d:40:54:2e:b8:
         0b:32:65:91
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVx7htVoqgTxm33qX9XEvYWsswGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThCM0FCNTE0OTg0QkZCNzQ5ODFEMTQxNkZCNTIzNThB
NUE3OTZCRTAeFw0yNDA1MjQxOTMyMjJaFw0yNTA1MjMxOTM3MjJaMDMxMTAvBgNV
BAMTKDkyRTNCMjdBN0M1NjQ0QThGOTQ2QTJDMzE0ODdCNjA3NkY1MjQwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5UcqdgHnyIsdAhTPdE8jPTp5
3FV0YY9rbo0huyCJ0BkCgAyMB17FT0i7eOD+1WFWLDnTDFZ5O2f/h9wS2e0bsoAL
o+wYrbRFmYSdTKLk7WfCehdxEI4ukhQiwbi1gvE/v5s3EKKZWPsgCc1q3ecJN0xL
4WFeJC9nuHnYmaoyoTKco3G0m9yt8M+F0IawJ2VlojDRC4hZDua0lwRZJYQ0XIeQ
DNJqXUipPQ3VMrZ3kdSkogOJ/iOCpONqQalAp4oRnWhGuKpL8vLPHG/t6g79irZ4
gwzPMPr/mHMKqLYy38A/G/VK1+wn42EgXCZ+en2WwdVUFC3ZuVZdriG4tdV3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkuOyenxWRKj5RqLDFIe2B29SQEEwHwYDVR0j
BBgwFoAU6LOrUUmEv7dJgdFBb7UjWKWnlr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3ZuZHh2NUs3TUR1R3lZS3NyRUJWa0xram9nNkx0a1VxV255NFlVTWY0
WnYvMC9FOEIzQUI1MTQ5ODRCRkI3NDk4MUQxNDE2RkI1MjM1OEE1QTc5NkJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QjNBQjUxNDk4NEJGQjc0
OTgxRDE0MTZGQjUyMzU4QTVBNzk2QkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN2bmR4djVLN01EdUd5WUtzckVCVmtMa2pvZzZMdGtVcVdueTRZVU1mNFp2LzAv
MzIzODMwMzQzYTM0NjIzMTMwM2EzODMwMzAzYTNhMmYzMzM4MmQzMTMyMzgyMDNk
M2UyMDMyMzYzNzMyMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigESxAIMA0GCSqGSIb3DQEBCwUA
A4IBAQBtm7UxhdzGStKpZb5SUYkPbPwFaiJHUGMVlpARTr/7G779xAjzgSHHN0Ej
eMLzqsjXxDlft9xAnaowddI/YUCdgNwnY6jM3oxudQOLyIJZuIVXVyCCNcR1HcXc
nF/9VbbDjqxnJrn9U5EUYhx6BdzXjVXgMHi460WUI/KeAiZdvWj90GdXHErlN0+F
HOWYrO7EdH0/YKtGy8OQzhxSiJ5zDD/xs4RIzmTlwsmgPqwaRFscQwpTvLnspVBH
0//figfwOdBPvWlbBRtldcFXUZZ+Rt4eQdZ3nL2DamHarNZo036HMxdnpgUnVoMf
OTLXT3Epb9q38XwZXUBULrgLMmWR
-----END CERTIFICATE-----
Generated at Wed Sep 25 23:37:07 2024 by rpki-client on console-fra.rpki-client.org