Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/323830343a376530343a3a2f33342d3334203d3e20323731353937.roa
File:                     323830343a376530343a3a2f33342d3334203d3e20323731353937.roa (raw, json)
Hash identifier:          LRpC/dQrNF3xCLyOvi2CKaSiC8Lij5V9hW1hPjUwLno=
Subject key identifier:   25:12:A5:5B:C0:11:0B:AA:27:E7:EE:7D:00:07:B3:F4:F1:38:FD:6C
Certificate issuer:       /CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Certificate serial:       78A9CEEA3B6436DC478E21928342C2A167FB6922
Authority key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/323830343a376530343a3a2f33342d3334203d3e20323731353937.roa
Signing time:             Thu 04 Apr 2024 18:47:57 +0000
ROA not before:           Thu 04 Apr 2024 18:42:57 +0000
ROA not after:            Thu 03 Apr 2025 18:47:57 +0000
asID:                     271597
IP address blocks:        2804:7e04::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 02:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a9:ce:ea:3b:64:36:dc:47:8e:21:92:83:42:c2:a1:67:fb:69:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
        Validity
            Not Before: Apr  4 18:42:57 2024 GMT
            Not After : Apr  3 18:47:57 2025 GMT
        Subject: CN=2512A55BC0110BAA27E7EE7D0007B3F4F138FD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:cc:52:4d:45:22:63:92:fa:1b:de:5c:be:
                    85:37:75:56:84:b7:31:d6:e3:fe:93:24:f0:6a:1a:
                    24:fa:57:47:19:9c:ba:34:7a:6c:a3:72:90:37:46:
                    74:74:10:27:e4:ac:6d:cd:e1:aa:1a:4d:f3:c5:bf:
                    72:db:1b:7e:aa:78:e5:1d:02:f8:1f:b8:9a:5f:60:
                    ad:9d:00:54:35:61:84:df:8f:86:21:3f:7b:9e:5b:
                    a6:94:59:ad:2d:37:78:2f:10:66:71:ee:1a:5b:b3:
                    a6:97:ed:2f:0a:ad:ab:a1:4d:77:a6:48:dd:00:5c:
                    4d:3b:ae:00:ab:99:d4:81:67:fb:9f:99:1f:49:23:
                    10:1a:34:47:87:e4:86:0a:dd:15:3b:7d:95:d5:40:
                    94:fe:c8:73:96:67:12:36:5c:f0:e5:3c:62:e9:5e:
                    20:5a:79:ac:f5:90:7f:30:d6:32:ab:24:3e:ff:f9:
                    99:2a:68:58:21:7c:d0:5d:38:2b:69:24:67:c2:a7:
                    fb:17:5e:67:7c:63:94:2f:27:64:2f:fe:9e:86:41:
                    52:f5:17:23:51:01:a5:4e:9d:96:66:e6:db:57:69:
                    44:93:2e:c2:99:ec:ec:19:c3:28:b3:ea:d6:3c:51:
                    10:ea:5a:59:49:c3:72:50:09:d8:a3:36:19:8a:18:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:A5:5B:C0:11:0B:AA:27:E7:EE:7D:00:07:B3:F4:F1:38:FD:6C
            X509v3 Authority Key Identifier:
                keyid:B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/323830343a376530343a3a2f33342d3334203d3e20323731353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e04::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:58:02:4a:18:33:ca:bd:04:dc:99:a5:e7:86:ea:6b:f8:
         4b:10:fc:8a:03:18:49:75:fe:67:7d:9d:17:09:c1:49:1e:e7:
         ff:f8:82:af:4b:18:29:07:ef:8c:09:54:b6:33:11:65:ff:a4:
         a2:5d:d7:17:9a:7a:00:3c:01:ac:51:0d:b0:88:09:04:dc:fe:
         d9:78:ff:bc:6a:9e:97:12:0b:c4:7d:14:61:85:b3:3d:e3:f7:
         4b:62:d4:57:d9:df:08:db:c5:01:8f:ca:dc:8d:6d:b3:c9:df:
         90:65:3b:20:0b:ca:a7:04:a1:f6:18:2d:c5:2d:2a:19:2b:a0:
         0b:92:5f:36:ba:3e:6a:f9:fe:67:00:43:c3:20:ac:1d:85:7d:
         3b:c3:c0:91:25:72:2e:ba:f6:5c:a9:d8:17:44:23:bb:9e:19:
         6e:ee:bf:b1:33:6f:f0:f1:1d:38:dd:47:ad:e0:2f:64:99:09:
         9f:41:0b:dd:1c:3e:78:98:2f:7c:f9:ad:a9:6c:de:32:40:78:
         0a:67:91:43:0e:d3:37:b9:ef:c2:1d:77:e6:c6:13:55:17:55:
         38:65:4a:12:0d:67:d3:ba:02:e9:39:84:33:73:99:e0:1c:e5:
         d1:de:26:57:2b:f0:cd:cd:b0:e6:dd:49:6d:82:29:8a:fd:5e:
         e0:3a:9f:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeKnO6jtkNtxHjiGSg0LCoWf7aSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5MURGMjIwQkM2MkRCNkE1MjVDOUE0RDZBMDlGNzYy
RjgwNkQ0NTAeFw0yNDA0MDQxODQyNTdaFw0yNTA0MDMxODQ3NTdaMDMxMTAvBgNV
BAMTKDI1MTJBNTVCQzAxMTBCQUEyN0U3RUU3RDAwMDdCM0Y0RjEzOEZENkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyisxSTUUiY5L6G95cvoU3dVaE
tzHW4/6TJPBqGiT6V0cZnLo0emyjcpA3RnR0ECfkrG3N4aoaTfPFv3LbG36qeOUd
AvgfuJpfYK2dAFQ1YYTfj4YhP3ueW6aUWa0tN3gvEGZx7hpbs6aX7S8KrauhTXem
SN0AXE07rgCrmdSBZ/ufmR9JIxAaNEeH5IYK3RU7fZXVQJT+yHOWZxI2XPDlPGLp
XiBaeaz1kH8w1jKrJD7/+ZkqaFghfNBdOCtpJGfCp/sXXmd8Y5QvJ2Qv/p6GQVL1
FyNRAaVOnZZm5ttXaUSTLsKZ7OwZwyiz6tY8URDqWllJw3JQCdijNhmKGDmZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJRKlW8ARC6on5+59AAez9PE4/WwwHwYDVR0j
BBgwFoAUsZHfIgvGLbalJcmk1qCfdi+AbUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkd3N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdM
eHUvMS9CMTkxREYyMjBCQzYyREI2QTUyNUM5QTRENkEwOUY3NjJGODA2RDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxOTFERjIyMEJDNjJEQjZB
NTI1QzlBNEQ2QTA5Rjc2MkY4MDZENDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZHdzdmTTNwaWtNNmFUUUpnTFk5Qlg1eTJDdmp3eHdEZ1IzcFFMVFlXTHh1LzEv
MzIzODMwMzQzYTM3NjUzMDM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMx
MzUzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR+BAAwDQYJKoZIhvcNAQELBQADggEBADRrWAJK
GDPKvQTcmaXnhupr+EsQ/IoDGEl1/md9nRcJwUke5//4gq9LGCkH74wJVLYzEWX/
pKJd1xeaegA8AaxRDbCICQTc/tl4/7xqnpcSC8R9FGGFsz3j90ti1FfZ3wjbxQGP
ytyNbbPJ35BlOyALyqcEofYYLcUtKhkroAuSXza6Pmr5/mcAQ8MgrB2FfTvDwJEl
ci669lyp2BdEI7ueGW7uv7Ezb/DxHTjdR63gL2SZCZ9BC90cPniYL3z5rals3jJA
eApnkUMO0ze578Idd+bGE1UXVThlShINZ9O6Auk5hDNzmeAc5dHeJlcr8M3NsObd
SW2CKYr9XuA6nzQ=
-----END CERTIFICATE-----
Generated at Thu Jun 27 07:00:50 2024 by rpki-client on console-fra.rpki-client.org