Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/323830343a373831633a3a2f33322d3438203d3e20323731323231.roa
File:                     323830343a373831633a3a2f33322d3438203d3e20323731323231.roa (raw, json)
Hash identifier:          9maBQtUUbpBZr5QAHlwglP9aUKUfrL+iIz+0JhUQCvg=
Subject key identifier:   8C:A4:C0:40:2E:C6:F9:9F:FF:15:6C:B0:D2:16:DC:30:A5:B9:48:0F
Certificate issuer:       /CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
Certificate serial:       2506D5D97D4A1ED578F4CD5764BB3ACFC62B09F4
Authority key identifier: 48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/323830343a373831633a3a2f33322d3438203d3e20323731323231.roa
Signing time:             Thu 04 Apr 2024 08:00:19 +0000
ROA not before:           Thu 04 Apr 2024 07:55:19 +0000
ROA not after:            Thu 03 Apr 2025 08:00:19 +0000
asID:                     271221
IP address blocks:        2804:781c::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 16:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:06:d5:d9:7d:4a:1e:d5:78:f4:cd:57:64:bb:3a:cf:c6:2b:09:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
        Validity
            Not Before: Apr  4 07:55:19 2024 GMT
            Not After : Apr  3 08:00:19 2025 GMT
        Subject: CN=8CA4C0402EC6F99FFF156CB0D216DC30A5B9480F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:a9:10:7c:25:c8:39:6f:39:25:18:b0:91:
                    b5:e6:c6:44:3c:66:ec:5d:c3:85:14:10:45:cd:f9:
                    aa:bb:76:3e:a8:41:a7:de:71:18:9c:04:8b:2c:50:
                    7b:0f:18:34:69:a0:14:4b:26:18:e8:ec:16:82:99:
                    e7:57:b6:bf:fd:31:e2:7b:eb:23:ff:a6:ca:52:76:
                    34:33:e4:2f:cc:c5:d7:5e:f6:da:af:eb:b6:75:37:
                    5d:65:7b:a5:67:47:ae:32:34:19:9e:8c:50:75:e8:
                    cd:6f:29:44:1e:14:1e:59:b7:d2:9b:56:2f:a5:00:
                    28:71:29:c3:b4:bd:3d:0b:d9:30:b1:2c:fc:81:4d:
                    f4:34:3d:12:8b:8c:ee:38:7b:4b:4a:3a:6e:46:c9:
                    4e:af:e7:30:5e:bc:50:f0:52:1f:0a:c7:97:0f:d4:
                    9a:bd:f0:39:f7:72:2c:71:09:9a:0d:4f:02:3d:fc:
                    38:01:39:c8:45:59:e7:87:7c:be:18:02:6e:b4:75:
                    7f:30:cf:d1:80:08:2f:2f:84:ce:41:24:88:1e:99:
                    b7:74:4c:4f:4c:92:a6:1d:a3:a6:8e:60:9b:cd:32:
                    3f:4a:cc:09:3e:5b:b2:b7:24:e1:07:9a:96:29:fb:
                    d9:65:94:c8:8f:62:06:19:9a:9d:13:9e:cd:b8:76:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A4:C0:40:2E:C6:F9:9F:FF:15:6C:B0:D2:16:DC:30:A5:B9:48:0F
            X509v3 Authority Key Identifier:
                keyid:48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/323830343a373831633a3a2f33322d3438203d3e20323731323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:781c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:cb:3c:f4:84:b8:a2:71:96:be:7f:f5:28:43:73:a2:32:b1:
         a8:e1:01:68:65:61:ad:f1:2e:71:55:01:df:65:c9:0b:af:27:
         91:d9:94:25:f5:7c:97:10:93:09:1b:29:b6:c3:58:d5:0a:16:
         32:5a:40:a3:04:5f:30:68:c9:79:68:64:49:bf:46:f7:02:16:
         49:8d:7c:4f:df:a6:7f:a3:62:1d:ee:80:6b:2f:ee:18:1f:65:
         f8:3b:c8:4f:3b:57:3d:6e:ee:4f:35:3b:cd:cd:41:78:89:55:
         9c:3a:fe:14:d9:c6:b6:94:89:41:cc:9d:d5:05:06:ca:45:f1:
         4b:8c:2f:b0:58:38:c7:4b:40:ad:a2:8a:2c:e2:96:72:b9:66:
         12:3a:7b:c7:47:c2:3c:a9:a6:24:a2:b6:8f:55:dd:ab:30:61:
         b5:9f:af:91:65:65:3c:80:1b:46:1c:be:75:9b:9d:5d:f0:72:
         13:a2:e3:54:be:67:f2:da:c5:75:6e:5f:2a:74:89:52:4d:23:
         9f:12:b2:f7:4f:4f:cc:26:77:1a:26:d2:d1:a1:ec:61:16:1a:
         61:ee:e2:78:52:65:36:84:7a:b7:d0:b8:9a:cc:22:2a:69:a1:
         ba:9f:6d:dc:56:11:42:8d:0a:fd:c1:fb:c7:38:6f:1f:eb:18:
         4c:f4:1a:33
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJQbV2X1KHtV49M1XZLs6z8YrCfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEMTdDQTI5NkI4QUY3MThDRjRGODJBQkNEMDgyNkJC
NzZCQ0QwQTAeFw0yNDA0MDQwNzU1MTlaFw0yNTA0MDMwODAwMTlaMDMxMTAvBgNV
BAMTKDhDQTRDMDQwMkVDNkY5OUZGRjE1NkNCMEQyMTZEQzMwQTVCOTQ4MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS0KkQfCXIOW85JRiwkbXmxkQ8
Zuxdw4UUEEXN+aq7dj6oQafecRicBIssUHsPGDRpoBRLJhjo7BaCmedXtr/9MeJ7
6yP/pspSdjQz5C/Mxdde9tqv67Z1N11le6VnR64yNBmejFB16M1vKUQeFB5Zt9Kb
Vi+lAChxKcO0vT0L2TCxLPyBTfQ0PRKLjO44e0tKOm5GyU6v5zBevFDwUh8Kx5cP
1Jq98Dn3cixxCZoNTwI9/DgBOchFWeeHfL4YAm60dX8wz9GACC8vhM5BJIgembd0
TE9MkqYdo6aOYJvNMj9KzAk+W7K3JOEHmpYp+9lllMiPYgYZmp0Tns24dua1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjKTAQC7G+Z//FWyw0hbcMKW5SA8wHwYDVR0j
BBgwFoAUSNF8opa4r3GM9PgqvNCCa7drzQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTl4aEZob1p5WmlGdVNkR0xDU0JGVFNEMVh6c3lEUnA0OUFUSkpqRTJi
aWcvMS80OEQxN0NBMjk2QjhBRjcxOENGNEY4MkFCQ0QwODI2QkI3NkJDRDBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4RDE3Q0EyOTZCOEFGNzE4
Q0Y0RjgyQUJDRDA4MjZCQjc2QkNEMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk5eGhGaG9aeVppRnVTZEdMQ1NCRlRTRDFYenN5RFJwNDlBVEpKakUyYmlnLzEv
MzIzODMwMzQzYTM3MzgzMTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzIzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR4HDANBgkqhkiG9w0BAQsFAAOCAQEAHcs89IS4
onGWvn/1KENzojKxqOEBaGVhrfEucVUB32XJC68nkdmUJfV8lxCTCRsptsNY1QoW
MlpAowRfMGjJeWhkSb9G9wIWSY18T9+mf6NiHe6Aay/uGB9l+DvITztXPW7uTzU7
zc1BeIlVnDr+FNnGtpSJQcyd1QUGykXxS4wvsFg4x0tAraKKLOKWcrlmEjp7x0fC
PKmmJKK2j1XdqzBhtZ+vkWVlPIAbRhy+dZudXfByE6LjVL5n8trFdW5fKnSJUk0j
nxKy909PzCZ3GibS0aHsYRYaYe7ieFJlNoR6t9C4mswiKmmhup9t3FYRQo0K/cH7
xzhvH+sYTPQaMw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org