Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a383030303a3a2f33332d3333203d3e20323732353333.roa
File:                     323830343a383261633a383030303a3a2f33332d3333203d3e20323732353333.roa (raw, json)
Hash identifier:          g5I+KnT47CNISlLkYUnoOxdics4PpWU5kMW20yt5Ymk=
Subject key identifier:   EE:AE:31:1D:78:E0:5D:FA:A3:BC:0F:29:38:40:8C:61:A6:97:74:1A
Certificate issuer:       /CN=CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22
Certificate serial:       1722FDA252452A6C4EB7247E857F54828FF457DC
Authority key identifier: CD:A3:48:A4:B2:FE:FD:9E:13:C7:F0:75:05:38:DD:EA:A5:87:DB:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a383030303a3a2f33332d3333203d3e20323732353333.roa
Signing time:             Fri 02 Aug 2024 15:58:19 +0000
ROA not before:           Fri 02 Aug 2024 15:53:19 +0000
ROA not after:            Fri 01 Aug 2025 15:58:19 +0000
asID:                     272533
IP address blocks:        2804:82ac:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 11:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:22:fd:a2:52:45:2a:6c:4e:b7:24:7e:85:7f:54:82:8f:f4:57:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22
        Validity
            Not Before: Aug  2 15:53:19 2024 GMT
            Not After : Aug  1 15:58:19 2025 GMT
        Subject: CN=EEAE311D78E05DFAA3BC0F2938408C61A697741A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bb:dd:32:7a:91:ff:63:62:e7:c1:6f:94:11:
                    e4:30:5d:7f:94:8f:5d:06:92:d1:55:17:bf:17:3e:
                    56:d3:c5:d4:f2:e4:eb:5b:2c:d4:b0:91:7a:b4:62:
                    83:55:83:3e:41:1e:1b:3c:f9:71:a9:0f:7f:c0:0c:
                    de:76:95:a5:ad:9e:70:cb:de:7b:12:f9:4e:f6:1c:
                    0f:5d:56:62:16:4b:77:dc:0b:34:11:bd:e5:f3:26:
                    7f:38:a4:21:1b:42:a7:13:2f:aa:f7:dc:ec:0f:68:
                    e2:d5:ff:8b:99:bf:77:dd:59:61:62:5f:2f:41:27:
                    c5:3b:5a:2d:7d:56:f5:95:ea:ab:b2:13:f1:2f:51:
                    18:87:76:ef:1f:dd:e9:88:20:1d:9f:50:d9:2d:1d:
                    1f:65:1c:fc:aa:21:57:5d:d6:b8:6b:ab:7a:e6:8e:
                    43:1c:fb:d5:cc:82:1f:f4:c7:40:94:48:ec:54:a5:
                    ec:b8:e6:05:89:82:04:b1:64:d9:ff:e9:13:5b:60:
                    35:c2:f0:f3:f8:3c:d2:42:d7:37:5f:c2:b9:f8:f1:
                    e7:18:0a:2e:fb:f3:24:e2:4b:a1:2b:f2:ea:7a:97:
                    41:9e:5c:86:65:35:d1:ae:d3:8e:71:af:c4:76:d6:
                    bb:e6:41:9a:1a:3b:47:30:6b:ad:03:34:6e:07:9b:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:31:1D:78:E0:5D:FA:A3:BC:0F:29:38:40:8C:61:A6:97:74:1A
            X509v3 Authority Key Identifier:
                keyid:CD:A3:48:A4:B2:FE:FD:9E:13:C7:F0:75:05:38:DD:EA:A5:87:DB:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a383030303a3a2f33332d3333203d3e20323732353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82ac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:4d:a4:de:78:7f:1b:80:2e:b0:b9:58:e4:59:f2:5e:a2:35:
         90:f3:bb:84:97:11:4a:8f:f2:82:e4:9c:90:24:0b:9f:18:70:
         32:28:cc:99:04:bf:29:58:84:60:d1:25:b5:c6:86:55:df:c7:
         fe:30:7c:52:b4:b6:c4:af:cb:2b:a3:2a:4a:27:69:fa:1f:b3:
         73:79:53:11:98:09:85:47:a5:1e:46:d5:fd:52:ab:28:cd:6a:
         ae:d9:09:55:44:02:1e:5b:71:1f:bc:38:fa:8e:35:67:02:c0:
         54:f6:f2:84:89:46:58:7f:04:e8:6a:14:9c:4b:69:fb:f5:9a:
         60:ca:ca:e2:4d:ee:2a:50:66:f5:ff:3a:c2:5d:eb:b3:8b:05:
         70:92:1f:a6:b7:cc:a3:f7:4c:34:7e:26:72:07:40:8a:f7:17:
         95:c4:06:36:c3:da:4c:4c:3b:e2:c7:de:97:78:f6:79:55:41:
         04:22:5d:57:c1:36:42:ad:03:82:ba:55:38:9e:da:d4:eb:6c:
         a7:5e:6b:6d:f6:10:07:90:db:80:3a:0f:12:62:10:6a:14:ea:
         e7:e0:39:ca:68:ec:21:37:78:7a:92:8f:28:30:80:17:fa:ea:
         45:d8:64:dd:f5:96:be:d9:bb:f8:7a:74:23:4a:aa:9e:6c:62:
         7b:67:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 13:37:27 2024 by rpki-client on console-fra.rpki-client.org