Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a383030303a3a2f33332d3333203d3e20323633363034.roa
File:                     323830343a6663633a383030303a3a2f33332d3333203d3e20323633363034.roa (raw, json)
Hash identifier:          7Mzv+d2mZuxyIOokHwBqkdmVK9JWMOaI3LqExWukywI=
Subject key identifier:   6E:8F:EF:7E:F0:A7:07:20:EB:87:D7:CC:1E:01:0B:F5:C0:97:3C:AE
Certificate issuer:       /CN=A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E
Certificate serial:       1067F1794EC44EA10180EBE361EF25B15DC399DE
Authority key identifier: A9:C0:D4:0A:28:14:EB:36:F3:DD:48:E1:6F:27:C5:CF:F4:1E:FA:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a383030303a3a2f33332d3333203d3e20323633363034.roa
Signing time:             Thu 04 Apr 2024 02:33:37 +0000
ROA not before:           Thu 04 Apr 2024 02:28:37 +0000
ROA not after:            Thu 03 Apr 2025 02:33:37 +0000
asID:                     263604
IP address blocks:        2804:fcc:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 14:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:67:f1:79:4e:c4:4e:a1:01:80:eb:e3:61:ef:25:b1:5d:c3:99:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E
        Validity
            Not Before: Apr  4 02:28:37 2024 GMT
            Not After : Apr  3 02:33:37 2025 GMT
        Subject: CN=6E8FEF7EF0A70720EB87D7CC1E010BF5C0973CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2c:1a:34:8b:54:8a:02:a5:65:ca:0c:e8:6b:
                    4f:15:90:a0:4c:62:2e:12:37:9c:f4:f0:45:a8:75:
                    e3:89:ae:46:cb:01:3c:0f:38:82:d7:0c:10:ec:e1:
                    ef:78:9a:af:bc:ae:d1:16:ff:51:91:77:aa:7d:a6:
                    f1:98:3e:fd:5b:c0:6d:f0:09:90:2e:9e:42:23:db:
                    90:f1:f6:94:97:49:21:44:66:9f:34:13:bd:98:f1:
                    d7:65:c1:c8:1f:60:c1:c1:2d:8f:55:48:e5:da:ad:
                    9a:23:24:02:6e:64:40:2e:b9:32:38:89:dc:01:cd:
                    9f:72:24:a0:68:a7:bf:81:73:02:a1:3d:6a:0f:e4:
                    54:95:4a:8f:29:b0:5a:01:d5:4a:de:0a:3e:11:2a:
                    06:3d:f8:92:c1:47:bc:0d:56:a8:e9:33:aa:ee:6c:
                    5d:3f:27:9d:64:65:b4:ea:a0:47:21:d6:6e:ff:a5:
                    6a:b3:82:50:76:43:2d:f9:30:20:52:f1:7d:e4:d2:
                    1d:5f:6e:67:64:30:b9:27:90:fa:87:bd:a1:fa:41:
                    1f:32:eb:1c:fe:f8:61:21:72:fa:23:ce:55:cf:e6:
                    2b:33:9c:54:55:4b:a9:f3:0a:81:0f:dc:26:76:c8:
                    0f:89:4e:49:66:16:c1:c9:c6:09:e9:f7:e7:7d:59:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:EF:7E:F0:A7:07:20:EB:87:D7:CC:1E:01:0B:F5:C0:97:3C:AE
            X509v3 Authority Key Identifier:
                keyid:A9:C0:D4:0A:28:14:EB:36:F3:DD:48:E1:6F:27:C5:CF:F4:1E:FA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a383030303a3a2f33332d3333203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:78:e4:9a:e4:ff:85:d4:99:08:73:b2:17:39:fe:83:4a:
         3d:73:c9:b7:2a:70:ee:7c:1e:e5:23:9e:55:02:36:d4:4f:ad:
         6d:7b:99:7d:9d:5a:72:9e:2f:0c:93:12:0f:e7:15:59:f5:9b:
         a9:68:11:2e:dd:02:c0:db:0c:ec:a7:6c:85:91:6a:88:c3:4a:
         63:98:c4:8e:bd:87:ae:8e:6d:60:a0:d4:7c:de:aa:cb:bd:0f:
         fb:62:b0:10:23:78:68:1b:10:1c:1e:0d:b2:66:b4:b2:ab:ab:
         c2:23:a0:af:34:e7:d0:c0:74:79:eb:15:1d:a5:6f:52:c6:66:
         05:76:5e:f5:97:ff:3f:81:d6:15:7e:7c:4f:e4:fc:34:76:f4:
         e3:03:bd:66:a4:0e:81:ab:bf:8a:77:cf:2b:d1:9e:2c:20:cb:
         cd:16:31:83:9d:2c:53:02:ba:a7:20:77:bb:00:b2:fd:e3:e0:
         20:9c:7f:60:da:7e:d0:44:c2:93:64:d8:de:49:37:1b:2d:f4:
         50:0a:98:c8:a8:5d:93:b3:6a:87:0a:c9:7c:53:65:70:08:81:
         19:db:77:61:2a:ae:f8:b1:1b:91:3a:96:21:cb:dc:6a:28:f1:
         3c:07:6b:cd:c6:18:a4:24:47:a4:89:43:8a:28:d8:92:62:6b:
         f0:cc:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----