Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33332d3333203d3e20323638383438.roa
File:                     323830343a356237633a3a2f33332d3333203d3e20323638383438.roa (raw, json)
Hash identifier:          xIPjgAtLZ7to18xQ+C724geChwMoWUW6kuUCFh9Wl7Q=
Subject key identifier:   C2:0F:F6:30:C1:55:40:23:04:BF:86:47:A7:DA:88:7B:E0:AF:BC:C3
Certificate issuer:       /CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
Certificate serial:       170A3999CA85293C642EFB8FA9F7F50D06208ED6
Authority key identifier: DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33332d3333203d3e20323638383438.roa
Signing time:             Wed 29 May 2024 15:49:55 +0000
ROA not before:           Wed 29 May 2024 15:44:55 +0000
ROA not after:            Wed 28 May 2025 15:49:55 +0000
asID:                     268848
IP address blocks:        2804:5b7c::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 28 May 2025 15:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0a:39:99:ca:85:29:3c:64:2e:fb:8f:a9:f7:f5:0d:06:20:8e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
        Validity
            Not Before: May 29 15:44:55 2024 GMT
            Not After : May 28 15:49:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:24:ef:54:61:f7:55:88:07:1f:6a:44:fb:cd:
                    7f:d8:5f:4d:d1:27:02:03:ce:86:4a:fb:23:8a:c1:
                    2c:0e:a3:9c:42:49:42:7f:c0:69:e7:8a:d2:fe:c2:
                    bb:04:c2:30:d4:69:2b:76:c0:b0:03:88:0e:80:2a:
                    cb:c1:1b:27:b0:a1:2c:34:89:a4:c3:64:97:ff:fc:
                    dc:a0:a0:19:31:3c:a2:1d:70:8f:f1:4c:72:a2:cc:
                    e3:b1:dd:ca:81:c7:fd:6f:e5:94:53:67:35:bf:ef:
                    d1:82:b8:d5:b3:01:4c:60:4f:d2:9e:cb:95:ad:7b:
                    e5:48:5f:87:ad:44:07:05:8d:59:29:3e:e7:12:6e:
                    55:6b:6e:07:64:b3:54:c4:bf:90:f3:47:fc:2e:f8:
                    10:c3:37:74:03:43:44:20:f1:cc:62:ca:7b:7a:d7:
                    dd:2b:71:83:d8:89:7d:af:17:a3:91:88:3e:d7:0d:
                    62:80:62:c5:da:aa:b1:42:f3:85:6e:c9:a8:e0:96:
                    6b:65:af:16:87:ab:f5:f4:45:8e:3c:77:77:fa:4e:
                    d5:55:64:9d:1a:bc:ff:71:0e:ca:fb:b2:7d:58:3b:
                    a4:c4:c5:b1:40:18:00:0b:90:6a:ab:37:97:af:33:
                    18:9a:a6:a7:2b:d8:dc:3a:6d:c5:06:4d:d4:fc:01:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0F:F6:30:C1:55:40:23:04:BF:86:47:A7:DA:88:7B:E0:AF:BC:C3
            X509v3 Authority Key Identifier:
                keyid:DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33332d3333203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:2c:5d:a9:40:b9:35:81:13:66:4e:eb:3f:56:35:d2:1b:
         9a:1d:b8:1b:cf:f8:5c:e3:ab:34:a8:22:e3:97:0d:59:46:2a:
         99:b1:7d:83:77:a4:23:ad:db:49:7f:a2:80:44:89:6d:6d:88:
         fd:af:43:6a:7a:a1:07:89:f0:c0:24:58:b8:1d:66:a0:e9:ed:
         cb:10:dc:d8:f9:64:53:40:c7:7e:1c:bc:1e:04:7c:10:60:82:
         95:cc:c9:c5:b8:33:f2:22:dc:fb:a4:11:16:dc:3d:4f:64:e4:
         76:dd:9d:bf:41:a7:8e:fb:07:d7:91:43:67:6e:59:ec:43:7a:
         10:5e:1c:bb:8e:5d:49:7b:99:57:60:d2:9c:95:63:19:0b:01:
         36:61:39:44:30:d9:1d:eb:56:f9:c4:6e:02:57:d5:93:85:a0:
         a2:ce:e5:f5:44:c7:ff:68:1b:0a:85:06:6d:e7:2b:04:97:c5:
         25:b3:a6:9b:98:54:3b:4b:f1:8e:01:c3:e7:58:5a:ac:52:6e:
         b0:83:97:7d:59:5d:10:3e:3a:42:45:2c:bc:ac:3e:3d:9a:db:
         88:0f:d6:32:0b:6f:b1:92:a7:57:c8:3c:db:21:0b:34:ad:62:
         a8:d0:21:39:7d:38:37:e8:a9:4b:2c:cc:62:c0:3a:51:7a:0e:
         e8:3e:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----