Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/323830343a313732633a3a2f33332d3333203d3e20323633313239.roa
File:                     323830343a313732633a3a2f33332d3333203d3e20323633313239.roa (raw, json)
Hash identifier:          g/yxQo14Knqc9R83U9IRyGSQ+9jO1RujRXpI++0HrZs=
Subject key identifier:   A0:D6:FB:18:80:23:D3:7C:0D:0B:D3:F2:36:35:D9:4E:48:26:C3:F1
Certificate issuer:       /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Certificate serial:       141A0D088957C87A99759ACCBA27F2A29675F29A
Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/323830343a313732633a3a2f33332d3333203d3e20323633313239.roa
Signing time:             Thu 25 Apr 2024 13:11:40 +0000
ROA not before:           Thu 25 Apr 2024 13:06:40 +0000
ROA not after:            Thu 24 Apr 2025 13:11:40 +0000
asID:                     263129
IP address blocks:        2804:172c::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1a:0d:08:89:57:c8:7a:99:75:9a:cc:ba:27:f2:a2:96:75:f2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
        Validity
            Not Before: Apr 25 13:06:40 2024 GMT
            Not After : Apr 24 13:11:40 2025 GMT
        Subject: CN=A0D6FB188023D37C0D0BD3F23635D94E4826C3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:5c:7d:3c:c4:0d:ae:19:a1:d5:ca:dc:6c:
                    ec:91:fb:68:b2:88:70:9f:ac:6b:40:07:9e:31:0b:
                    9e:04:44:28:64:dc:46:c9:37:46:90:5e:e5:00:e7:
                    f3:0b:d0:0d:db:a4:3a:71:3e:53:94:d2:ae:ec:84:
                    fd:6e:f9:b0:84:b9:b4:80:70:45:55:01:7d:9e:84:
                    cc:85:e2:15:0a:bc:25:09:75:bb:d1:8f:f2:a1:cb:
                    a4:8a:47:9f:80:53:2f:8a:57:40:f7:55:b3:b4:24:
                    84:87:bd:cd:9a:4e:60:a2:04:53:09:38:59:39:30:
                    e1:91:f9:3f:fe:67:90:f7:c5:c5:d6:74:35:2b:6a:
                    5e:77:fd:51:77:c0:cf:22:9c:79:8a:75:a9:82:42:
                    21:f6:aa:c7:62:11:62:a3:c4:12:33:aa:0a:08:a3:
                    24:bd:0e:04:fa:dc:22:fd:95:2c:16:3e:38:b1:c5:
                    0f:b8:7b:36:ca:8b:e2:e2:5c:88:09:8c:64:5d:c8:
                    99:a2:31:11:9f:99:a2:19:19:bd:2c:8f:ae:dd:bb:
                    b5:c1:87:f4:d7:f8:b8:1f:e3:6e:30:20:dd:b0:ac:
                    65:4e:ee:c4:8a:64:0b:29:2d:fe:ee:8a:1c:9a:33:
                    1e:e8:4f:e4:88:81:a4:58:a6:34:c6:da:84:5f:66:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:FB:18:80:23:D3:7C:0D:0B:D3:F2:36:35:D9:4E:48:26:C3:F1
            X509v3 Authority Key Identifier:
                keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/323830343a313732633a3a2f33332d3333203d3e20323633313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:172c::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:ef:82:17:ac:aa:3b:fa:8c:03:01:9e:54:0a:32:d1:f3:
         3c:d7:4d:64:52:3c:23:47:46:88:7a:80:7f:c8:83:40:ed:64:
         9f:8b:3a:1e:8f:37:a8:da:34:7f:b5:ab:1d:69:a6:19:e1:ec:
         58:0d:74:64:3a:3b:00:a0:7c:ce:79:02:cb:46:ab:10:6e:78:
         21:af:28:63:a7:38:3b:76:6c:d0:a9:53:09:d2:6c:df:94:80:
         19:e1:24:e6:5d:3d:31:25:aa:5d:6c:71:1b:6d:0a:91:d0:29:
         c0:29:69:06:f9:d6:74:85:c3:23:aa:18:82:e5:c1:37:73:62:
         6a:63:32:42:3a:ea:f0:ab:4d:98:72:fd:a9:a4:7a:b6:4a:b9:
         6a:15:89:30:0d:54:cb:67:5d:14:da:84:7b:18:34:bd:ae:bb:
         3a:ab:05:eb:5e:55:0b:3d:a8:86:9f:76:2a:eb:d3:27:66:01:
         f5:96:83:80:1e:01:a6:b7:35:b9:30:f2:f1:69:97:7a:84:b1:
         25:db:ec:7b:ac:f1:38:c0:63:56:7c:08:87:bb:b3:88:87:c9:
         b2:c3:5e:a6:0c:18:ae:fe:fa:ca:24:3d:d2:4f:9a:07:c2:c0:
         03:77:94:f0:86:6e:c6:b5:16:01:3a:b3:d9:c8:67:a4:b8:8f:
         d8:bd:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org