Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3333203d3e20323638323232.roa
File:                     323830343a346464343a3a2f33322d3333203d3e20323638323232.roa (raw, json)
Hash identifier:          sOTZNFKQbGL/X75k+5dNrVKw2ypZ9yn0SGv7j9ppyYA=
Subject key identifier:   6F:7C:CB:CF:27:86:BD:12:03:4F:A8:0E:BE:B3:09:DC:7E:CB:79:5D
Certificate issuer:       /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial:       38A96B0A3FBD25D549748DD7DFC6DC0E284C293C
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3333203d3e20323638323232.roa
Signing time:             Mon 20 May 2024 19:04:13 +0000
ROA not before:           Mon 20 May 2024 18:59:13 +0000
ROA not after:            Mon 19 May 2025 19:04:13 +0000
asID:                     268222
IP address blocks:        2804:4dd4::/32 maxlen: 33

Validation:               Failed, certificate revoked on Tue 21 May 2024 12:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a9:6b:0a:3f:bd:25:d5:49:74:8d:d7:df:c6:dc:0e:28:4c:29:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
        Validity
            Not Before: May 20 18:59:13 2024 GMT
            Not After : May 19 19:04:13 2025 GMT
        Subject: CN=6F7CCBCF2786BD12034FA80EBEB309DC7ECB795D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:bd:af:44:1d:01:32:55:64:6b:7f:75:f4:
                    a0:20:99:22:d6:2c:22:3f:65:53:12:1d:37:b7:9b:
                    35:af:75:73:31:9f:d1:be:e8:ee:49:92:af:c8:d2:
                    b5:8f:69:da:81:d7:4d:78:82:95:ec:c5:9a:41:ba:
                    12:53:fb:37:76:32:00:e8:94:a8:73:2c:4d:a7:b4:
                    66:54:35:01:a7:04:28:e4:d5:19:e5:01:58:6d:e5:
                    8e:09:29:d8:88:42:40:3a:e7:d4:74:df:68:0a:d5:
                    69:5c:60:6b:11:04:c3:2a:e3:df:79:8a:bc:82:6a:
                    8e:c7:d3:a7:bb:84:44:40:c7:1d:ce:6f:32:bb:8c:
                    ca:de:b9:29:00:04:3c:4f:ae:14:05:0e:52:7c:03:
                    48:da:65:92:19:4f:3d:26:21:8f:ad:9b:7c:60:7a:
                    8f:ef:85:76:a3:01:b1:83:12:de:a9:64:6d:db:6f:
                    a6:28:48:77:0c:e1:78:17:2a:ae:df:9b:76:de:87:
                    01:c2:ec:46:22:5f:19:69:f6:23:79:39:33:e1:0d:
                    fe:c4:c6:ab:27:73:16:22:b7:42:b1:0d:64:76:4b:
                    49:42:4e:8b:2d:71:ba:2f:49:8f:79:67:46:55:d0:
                    ad:50:9d:94:4b:e3:be:4a:74:5e:b9:b5:c4:bb:3e:
                    f0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:CB:CF:27:86:BD:12:03:4F:A8:0E:BE:B3:09:DC:7E:CB:79:5D
            X509v3 Authority Key Identifier:
                keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3333203d3e20323638323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:c0:3f:b6:37:7f:84:33:f6:20:ab:48:7f:c9:18:00:c8:92:
         e7:e4:f7:2c:5c:19:98:a8:5d:e9:ad:23:9b:cf:c2:5d:88:54:
         77:2b:82:de:75:e6:0a:62:9f:71:b2:80:de:f1:4b:5b:b6:7b:
         42:62:a6:be:bb:27:90:ef:5d:90:97:8e:f9:5b:f2:5c:ca:c5:
         af:b1:9a:f9:08:c5:8e:2f:e9:0b:3a:e6:72:c6:71:5b:a1:92:
         62:27:5b:29:8e:59:c6:0b:15:d5:b1:91:a6:8e:43:d8:fe:2a:
         2d:98:d9:cd:ac:ac:fc:18:97:98:0a:51:3b:d2:a9:68:7b:eb:
         90:02:2d:c4:74:16:6d:e5:ae:b5:47:05:30:4a:98:4b:0d:5c:
         17:f2:7e:c4:b8:f1:d5:43:5e:d3:1d:d2:de:4e:e9:c1:09:95:
         1b:66:71:48:76:4d:78:c3:b6:f5:bf:87:6a:b7:a4:cf:49:bd:
         41:0c:a6:c4:16:a1:19:10:7c:a7:34:bc:97:cc:58:48:b1:ea:
         ad:6e:60:59:3a:17:0b:b7:72:72:a0:65:e8:a9:47:b5:b8:c2:
         96:f5:2f:96:b7:42:78:aa:ae:80:f1:89:11:f6:1a:05:ef:51:
         09:5f:f7:ad:16:b7:70:6c:cf:fc:08:20:75:0c:51:0f:39:e9:
         3f:e3:41:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOKlrCj+9JdVJdI3X38bcDihMKTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC
NUY4RTU3MDAeFw0yNDA1MjAxODU5MTNaFw0yNTA1MTkxOTA0MTNaMDMxMTAvBgNV
BAMTKDZGN0NDQkNGMjc4NkJEMTIwMzRGQTgwRUJFQjMwOURDN0VDQjc5NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ172vRB0BMlVka3919KAgmSLW
LCI/ZVMSHTe3mzWvdXMxn9G+6O5Jkq/I0rWPadqB1014gpXsxZpBuhJT+zd2MgDo
lKhzLE2ntGZUNQGnBCjk1RnlAVht5Y4JKdiIQkA659R032gK1WlcYGsRBMMq4995
iryCao7H06e7hERAxx3ObzK7jMreuSkABDxPrhQFDlJ8A0jaZZIZTz0mIY+tm3xg
eo/vhXajAbGDEt6pZG3bb6YoSHcM4XgXKq7fm3behwHC7EYiXxlp9iN5OTPhDf7E
xqsncxYit0KxDWR2S0lCTostcbovSY95Z0ZV0K1QnZRL475KdF65tcS7PvBNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUb3zLzyeGvRIDT6gOvrMJ3H7LeV0wHwYDVR0j
BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq
UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5
RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4RXpIaG5BWmVhZHpSOGtZZlZzR21WWnRmWEtWcEdRUmROWWRUN1hEalJLLzAv
MzIzODMwMzQzYTM0NjQ2NDM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM4
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARN1DANBgkqhkiG9w0BAQsFAAOCAQEAq8A/tjd/
hDP2IKtIf8kYAMiS5+T3LFwZmKhd6a0jm8/CXYhUdyuC3nXmCmKfcbKA3vFLW7Z7
QmKmvrsnkO9dkJeO+VvyXMrFr7Ga+QjFji/pCzrmcsZxW6GSYidbKY5ZxgsV1bGR
po5D2P4qLZjZzays/BiXmApRO9KpaHvrkAItxHQWbeWutUcFMEqYSw1cF/J+xLjx
1UNe0x3S3k7pwQmVG2ZxSHZNeMO29b+Harekz0m9QQymxBahGRB8pzS8l8xYSLHq
rW5gWToXC7dycqBl6KlHtbjClvUvlrdCeKqugPGJEfYaBe9RCV/3rRa3cGzP/Agg
dQxRDznpP+NBaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org