Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33332d3333203d3e20323636323638.roa
File:                     323830343a336435343a3a2f33332d3333203d3e20323636323638.roa (raw, json)
Hash identifier:          JKAEVfxjIfSg/zpm+/dcsrDhpyFH468oJndym89FN0o=
Subject key identifier:   9D:DE:F3:3E:87:48:03:C2:94:43:F1:57:F7:FC:73:DC:83:1E:6A:16
Certificate issuer:       /CN=C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D
Certificate serial:       245AE171541608BEB4BFF1FDF8FDD44955E7CC17
Authority key identifier: C2:BD:84:A4:FC:DD:5A:DA:BE:29:3A:26:CC:9C:E9:BA:27:D4:63:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33332d3333203d3e20323636323638.roa
Signing time:             Wed 20 Nov 2024 12:51:47 +0000
ROA not before:           Wed 20 Nov 2024 12:46:47 +0000
ROA not after:            Wed 19 Nov 2025 12:51:47 +0000
asID:                     266268
IP address blocks:        2804:3d54::/33 maxlen: 33

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 01:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5a:e1:71:54:16:08:be:b4:bf:f1:fd:f8:fd:d4:49:55:e7:cc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D
        Validity
            Not Before: Nov 20 12:46:47 2024 GMT
            Not After : Nov 19 12:51:47 2025 GMT
        Subject: CN=9DDEF33E874803C29443F157F7FC73DC831E6A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2f:ea:a5:47:4d:b6:fe:21:aa:34:c2:a2:cf:
                    5f:b7:c3:af:ad:ee:73:db:73:80:fc:44:58:4f:d3:
                    96:cf:a2:c0:15:88:af:1b:a3:03:90:ab:eb:08:82:
                    6c:99:7a:29:8d:a8:5a:08:3c:b1:e1:86:52:2e:0d:
                    31:b8:83:7d:a7:20:5e:3d:c5:1a:5f:c3:73:e9:3d:
                    0c:96:93:72:ee:1a:29:d1:0b:8e:6d:56:23:fa:4b:
                    4a:82:6f:ac:8a:a5:fc:b0:4b:05:ae:79:9d:be:41:
                    b3:32:2c:a5:e2:f9:af:a5:1a:19:c2:5f:da:41:54:
                    fa:68:3f:02:92:90:9d:51:1b:59:a7:4e:90:47:5d:
                    a1:00:c7:83:e6:33:32:6a:b3:4e:54:50:99:19:16:
                    6b:ed:08:60:bb:f4:58:91:7a:43:d3:99:39:02:a5:
                    7f:37:b0:86:39:4d:4c:93:87:8f:ff:ee:70:77:f5:
                    d2:02:2d:39:61:94:f3:da:62:18:c5:4b:a3:ff:75:
                    65:35:09:4e:33:af:d1:4b:03:e3:c3:bf:ae:79:b3:
                    b6:55:1c:32:f9:86:d8:7e:65:cc:74:9d:b9:33:e6:
                    e7:b7:09:53:3f:0a:68:df:3c:77:1e:8e:15:38:0b:
                    eb:47:81:d8:89:29:d0:86:45:ee:8a:8c:62:dc:91:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DE:F3:3E:87:48:03:C2:94:43:F1:57:F7:FC:73:DC:83:1E:6A:16
            X509v3 Authority Key Identifier:
                keyid:C2:BD:84:A4:FC:DD:5A:DA:BE:29:3A:26:CC:9C:E9:BA:27:D4:63:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33332d3333203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54::/33

    Signature Algorithm: sha256WithRSAEncryption
         4d:87:34:45:5c:eb:16:80:94:de:fe:d1:f7:bf:18:b6:62:13:
         f5:2e:57:31:c4:d7:4a:70:bb:9f:c6:27:e6:b7:93:f9:0e:7d:
         76:25:c6:3a:35:96:da:76:70:18:80:e4:1c:97:90:cb:97:84:
         25:4b:f9:28:84:56:c8:4b:c9:ab:13:20:c7:ce:e3:93:48:db:
         45:e8:f6:56:f4:6c:9e:c3:08:ea:53:76:64:4e:67:7c:ca:ef:
         60:b0:87:6f:07:17:6d:77:98:5a:c9:e1:7f:df:88:69:34:c8:
         aa:53:72:5f:e1:ee:ca:c5:0e:ce:85:0d:5d:f5:4c:22:5b:16:
         51:f0:a1:e3:ae:cf:02:ea:bf:34:23:6f:f2:42:6d:7a:90:3f:
         40:c0:fe:b9:af:17:68:9b:0c:e5:00:e6:2a:89:99:10:ac:3a:
         7d:09:08:65:55:92:fb:02:c3:de:bb:0c:d9:84:48:7a:db:4a:
         05:9f:34:d6:d2:86:6d:6b:b5:06:e1:7d:1b:6e:29:51:8d:fe:
         4f:f4:07:74:9f:43:59:61:1e:0e:61:55:73:d0:93:ed:fb:1f:
         83:52:4b:b7:8d:6c:49:b1:92:95:38:bc:b5:8f:4d:03:a9:89:
         a2:b9:11:b4:c9:0b:fe:50:15:89:0e:aa:c9:65:d7:5d:10:a1:
         16:db:e6:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJFrhcVQWCL60v/H9+P3USVXnzBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCRDg0QTRGQ0RENUFEQUJFMjkzQTI2Q0M5Q0U5QkEy
N0Q0NjMzRDAeFw0yNDExMjAxMjQ2NDdaFw0yNTExMTkxMjUxNDdaMDMxMTAvBgNV
BAMTKDlEREVGMzNFODc0ODAzQzI5NDQzRjE1N0Y3RkM3M0RDODMxRTZBMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqL+qlR022/iGqNMKiz1+3w6+t
7nPbc4D8RFhP05bPosAViK8bowOQq+sIgmyZeimNqFoIPLHhhlIuDTG4g32nIF49
xRpfw3PpPQyWk3LuGinRC45tViP6S0qCb6yKpfywSwWueZ2+QbMyLKXi+a+lGhnC
X9pBVPpoPwKSkJ1RG1mnTpBHXaEAx4PmMzJqs05UUJkZFmvtCGC79FiRekPTmTkC
pX83sIY5TUyTh4//7nB39dICLTlhlPPaYhjFS6P/dWU1CU4zr9FLA+PDv655s7ZV
HDL5hth+Zcx0nbkz5ue3CVM/CmjfPHcejhU4C+tHgdiJKdCGRe6KjGLckUvDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnd7zPodIA8KUQ/FX9/xz3IMeahYwHwYDVR0j
BBgwFoAUwr2EpPzdWtq+KTomzJzpuifUYz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi
TXAvMC9DMkJEODRBNEZDREQ1QURBQkUyOTNBMjZDQzlDRTlCQTI3RDQ2MzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyQkQ4NEE0RkNERDVBREFC
RTI5M0EyNkNDOUNFOUJBMjdENDYzM0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv
MzIzODMwMzQzYTMzNjQzNTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ9VAAwDQYJKoZIhvcNAQELBQADggEBAE2HNEVc
6xaAlN7+0fe/GLZiE/UuVzHE10pwu5/GJ+a3k/kOfXYlxjo1ltp2cBiA5ByXkMuX
hCVL+SiEVshLyasTIMfO45NI20Xo9lb0bJ7DCOpTdmROZ3zK72Cwh28HF213mFrJ
4X/fiGk0yKpTcl/h7srFDs6FDV31TCJbFlHwoeOuzwLqvzQjb/JCbXqQP0DA/rmv
F2ibDOUA5iqJmRCsOn0JCGVVkvsCw967DNmESHrbSgWfNNbShm1rtQbhfRtuKVGN
/k/0B3SfQ1lhHg5hVXPQk+37H4NSS7eNbEmxkpU4vLWPTQOpiaK5EbTJC/5QFYkO
qsll110QoRbb5g4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 04:11:42 2024 by rpki-client on console-ams.rpki-client.org