Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33322d3332203d3e20323638383438.roa
File:                     323830343a356237633a3a2f33322d3332203d3e20323638383438.roa (raw, json)
Hash identifier:          KGxz9aH3BDwN4AHh0YPYSmWeiqjKadNQX0JuLgEBEC4=
Subject key identifier:   18:AD:5F:D7:D1:8B:A2:5B:5E:1C:D5:E2:0D:B6:8E:72:2B:46:53:B2
Certificate issuer:       /CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
Certificate serial:       4CEF337745751F0FD6DA5B4C2A8C476ADFA388FD
Authority key identifier: DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33322d3332203d3e20323638383438.roa
Signing time:             Wed 29 May 2024 15:49:56 +0000
ROA not before:           Wed 29 May 2024 15:44:56 +0000
ROA not after:            Wed 28 May 2025 15:49:56 +0000
asID:                     268848
IP address blocks:        2804:5b7c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 28 May 2025 15:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ef:33:77:45:75:1f:0f:d6:da:5b:4c:2a:8c:47:6a:df:a3:88:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
        Validity
            Not Before: May 29 15:44:56 2024 GMT
            Not After : May 28 15:49:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:82:22:c8:f1:6e:62:e4:2d:75:af:60:e4:
                    5c:72:ae:4e:e4:d3:4f:c2:6a:d8:a6:74:9d:e8:0d:
                    28:ef:fd:5a:33:38:76:9d:2e:df:fc:7e:e2:09:64:
                    17:1e:59:89:37:8f:1c:f5:fd:7d:e1:cf:8d:02:c2:
                    18:83:a8:55:ee:f9:5b:d2:1f:b1:b2:7c:f7:01:56:
                    6b:de:36:fd:57:95:47:c9:85:cf:06:a4:7b:fc:5f:
                    c2:e8:17:a7:99:74:57:ed:26:b9:3e:86:7f:28:28:
                    24:c4:1b:b5:e2:c9:7e:56:05:90:93:86:7e:9d:df:
                    39:85:2b:cd:d2:ee:3b:c2:36:27:a1:71:b5:b5:0e:
                    f5:6b:3b:02:77:84:9a:fb:b0:3e:be:58:19:57:f4:
                    33:2a:91:6a:88:f4:54:bc:6c:ed:9e:b5:9a:31:04:
                    73:80:9b:3b:78:b1:f3:51:aa:1a:a7:42:45:25:a5:
                    38:38:3c:97:32:74:e9:de:f7:de:17:5c:f3:06:f0:
                    e2:7c:4c:0c:d6:9b:32:30:bc:d6:ec:cd:f5:86:b1:
                    e1:f0:41:b4:7a:a8:02:5c:78:26:4e:65:a9:53:5d:
                    1e:80:8c:14:65:fe:1e:48:9b:9d:43:a1:e7:cf:5d:
                    a3:95:f4:fa:3f:cd:ef:22:33:3d:22:37:fb:af:5b:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AD:5F:D7:D1:8B:A2:5B:5E:1C:D5:E2:0D:B6:8E:72:2B:46:53:B2
            X509v3 Authority Key Identifier:
                keyid:DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33322d3332203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:3f:33:cc:e9:6b:47:d1:50:80:8c:7f:a9:1b:be:2c:24:6b:
         cc:07:3d:1c:92:74:e7:f5:c7:40:0c:72:dd:fb:13:4d:cb:cc:
         6d:98:b5:20:15:2e:4a:44:3d:a5:f3:59:4f:ed:a6:ae:47:49:
         15:f7:24:3d:ea:f1:37:0a:9f:54:df:63:0b:d5:b5:44:0e:20:
         97:39:65:42:24:8d:87:83:61:59:8c:88:e4:0f:e4:c6:ac:26:
         64:88:aa:79:95:70:0e:7e:99:0e:ed:3f:96:bc:69:8b:d9:c6:
         84:48:84:e5:c1:6f:02:41:bd:2d:ab:99:b5:c9:11:7b:66:69:
         7b:60:0d:b4:16:6f:52:95:6e:76:b4:f0:28:a6:2e:ee:2a:4b:
         b9:f8:57:07:da:6f:35:27:9d:e2:ae:6a:b1:73:94:94:86:b6:
         7c:04:88:6b:ed:c2:c5:33:c0:0e:91:7e:5c:42:9e:c8:4a:82:
         11:b3:06:c5:e5:ee:3f:a1:f0:54:49:9c:d0:5b:91:b7:53:bd:
         92:39:70:40:ac:59:8d:e6:18:bd:3d:71:cc:2b:d2:62:ec:6f:
         d5:a6:5d:f2:5e:fa:c1:53:41:4b:1d:3e:64:6b:a4:56:a0:8b:
         14:33:54:6a:ad:c1:b8:17:f8:46:4f:67:e4:88:1b:15:cb:59:
         11:8d:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----