Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a663230303a3a2f34302d3430203d3e20323637353330.roa
File:                     323830343a343264343a663230303a3a2f34302d3430203d3e20323637353330.roa (raw, json)
Hash identifier:          y5vX3BsnRnZYmg3MMMmyNiJ+FZA5mZ0BZrHdqC9GWwM=
Subject key identifier:   C5:5E:8A:7E:B8:01:6A:C0:48:21:EA:93:4F:16:6B:DB:4E:8C:FE:5B
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       21DB773E0C891D6C9DD07964EDC1ACB85F48EB2A
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a663230303a3a2f34302d3430203d3e20323637353330.roa
Signing time:             Wed 24 Apr 2024 12:13:54 +0000
ROA not before:           Wed 24 Apr 2024 12:08:54 +0000
ROA not after:            Wed 23 Apr 2025 12:13:54 +0000
asID:                     267530
IP address blocks:        2804:42d4:f200::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:db:77:3e:0c:89:1d:6c:9d:d0:79:64:ed:c1:ac:b8:5f:48:eb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Apr 24 12:08:54 2024 GMT
            Not After : Apr 23 12:13:54 2025 GMT
        Subject: CN=C55E8A7EB8016AC04821EA934F166BDB4E8CFE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:a7:7f:9b:05:4b:16:b7:67:16:27:5c:73:
                    f1:d3:df:18:bd:12:38:43:68:9f:c4:15:b1:6d:18:
                    9f:a5:c4:58:ab:55:b1:c8:09:f3:12:03:76:d4:c2:
                    92:27:ee:2d:ff:01:58:1e:91:7a:71:f7:3c:3c:ae:
                    8c:5e:25:ac:32:0a:31:0d:38:a7:0a:75:93:da:3e:
                    b4:37:e5:cd:5e:88:bc:1f:f5:5d:78:8e:31:5e:7d:
                    04:9f:78:64:c2:20:72:14:27:24:38:20:0d:99:9c:
                    34:c9:46:87:2d:ff:d3:28:f0:8d:15:9e:90:7a:2d:
                    a1:19:dd:5b:b8:14:41:64:66:e2:1b:d1:d9:7d:9a:
                    2f:1e:35:0a:14:35:b5:13:34:3a:5e:4c:f8:e8:f6:
                    39:e4:aa:86:65:56:3f:d4:fc:90:c1:4f:5c:3a:ab:
                    db:83:f3:bb:15:d3:d6:fc:32:cb:89:d6:de:ad:6f:
                    a1:6c:e4:82:5a:e0:99:a0:04:17:87:dd:df:f7:7a:
                    c1:ec:9e:b0:e9:a6:bc:43:41:1c:9f:5b:3d:50:c3:
                    06:ec:c0:50:10:20:51:ad:08:ce:f7:68:b2:59:26:
                    f2:55:ab:86:a7:43:f0:60:86:65:3d:45:53:1e:cc:
                    5a:42:10:88:0b:e6:65:c8:f7:1b:77:ae:88:32:1a:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5E:8A:7E:B8:01:6A:C0:48:21:EA:93:4F:16:6B:DB:4E:8C:FE:5B
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a663230303a3a2f34302d3430203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42d4:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:57:2e:5d:ba:c4:a7:39:dc:04:66:13:7c:7c:7e:c8:4b:
         72:91:8b:fc:f8:be:a7:e6:5c:bc:3b:d2:44:1e:dd:09:76:15:
         61:37:6e:4b:f1:b8:6a:da:7d:93:38:45:1a:38:35:64:22:26:
         bb:75:cd:4d:6f:60:f7:25:e4:68:2c:1f:02:c2:6e:fb:4b:32:
         83:a5:1a:f0:b0:d9:0c:47:7d:47:4f:f5:1a:91:ba:ac:9b:09:
         46:ac:a3:20:24:69:30:bc:df:c4:fb:fb:bc:78:aa:5a:4a:b4:
         04:9a:ca:15:47:9c:0a:02:18:f6:3f:61:d8:9a:2d:cb:70:ed:
         66:d4:ed:9f:a3:6a:f2:a1:55:e9:76:19:e1:a9:25:6a:9e:2b:
         33:ef:cb:8e:a2:d1:45:92:48:33:6f:22:63:eb:21:fd:4a:a1:
         9e:2b:fb:be:f5:a7:2f:cc:5a:e4:dd:e5:fa:27:cb:75:55:3c:
         fd:0e:58:58:40:b0:43:f0:35:fd:ef:19:e2:d2:3b:b6:14:20:
         b4:e6:eb:c7:7e:ee:90:0c:c4:87:10:92:92:64:9a:63:18:96:
         c6:9a:94:84:19:1a:7b:bd:58:00:a1:fd:40:ae:80:86:e1:a8:
         3d:71:0b:0e:9a:eb:30:c0:e8:3e:5f:5c:7c:3b:62:15:df:6e:
         43:fa:99:0d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIdt3PgyJHWyd0Hlk7cGsuF9I6yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM0QUIxNjY2RDc1QjNCRUFCQTc4MTcyQURCMzgzOUZF
NTk3QTQzODAeFw0yNDA0MjQxMjA4NTRaFw0yNTA0MjMxMjEzNTRaMDMxMTAvBgNV
BAMTKEM1NUU4QTdFQjgwMTZBQzA0ODIxRUE5MzRGMTY2QkRCNEU4Q0ZFNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvW6d/mwVLFrdnFidcc/HT3xi9
EjhDaJ/EFbFtGJ+lxFirVbHICfMSA3bUwpIn7i3/AVgekXpx9zw8roxeJawyCjEN
OKcKdZPaPrQ35c1eiLwf9V14jjFefQSfeGTCIHIUJyQ4IA2ZnDTJRoct/9Mo8I0V
npB6LaEZ3Vu4FEFkZuIb0dl9mi8eNQoUNbUTNDpeTPjo9jnkqoZlVj/U/JDBT1w6
q9uD87sV09b8MsuJ1t6tb6Fs5IJa4JmgBBeH3d/3esHsnrDpprxDQRyfWz1Qwwbs
wFAQIFGtCM73aLJZJvJVq4anQ/BghmU9RVMezFpCEIgL5mXI9xt3rogyGpcPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUxV6KfrgBasBIIeqTTxZr206M/lswHwYDVR0j
BBgwFoAU7EqxZm11s76rp4FyrbODn+WXpDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNThCQ0d2czZVQjZvNWoyaTE3MTJQNzhtVDIyWUxFUFZnakVuNUU0Mndr
ZFAvMC9FQzRBQjE2NjZENzVCM0JFQUJBNzgxNzJBREIzODM5RkU1OTdBNDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDNEFCMTY2NkQ3NUIzQkVB
QkE3ODE3MkFEQjM4MzlGRTU5N0E0MzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU4QkNHdnM2VUI2bzVqMmkxNzEyUDc4bVQyMllMRVBWZ2pFbjVFNDJ3a2RQLzAv
MzIzODMwMzQzYTM0MzI2NDM0M2E2NjMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEQtTyMA0GCSqGSIb3DQEBCwUA
A4IBAQAIpFcuXbrEpzncBGYTfHx+yEtykYv8+L6n5ly8O9JEHt0JdhVhN25L8bhq
2n2TOEUaODVkIia7dc1Nb2D3JeRoLB8Cwm77SzKDpRrwsNkMR31HT/UakbqsmwlG
rKMgJGkwvN/E+/u8eKpaSrQEmsoVR5wKAhj2P2HYmi3LcO1m1O2fo2ryoVXpdhnh
qSVqnisz78uOotFFkkgzbyJj6yH9SqGeK/u+9acvzFrk3eX6J8t1VTz9DlhYQLBD
8DX97xni0ju2FCC05uvHfu6QDMSHEJKSZJpjGJbGmpSEGRp7vVgAof1AroCG4ag9
cQsOmuswwOg+X1x8O2IV325D+pkN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org