Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a3a2f33322d3332203d3e20323632373932.roa
File:                     323830343a3232343a3a2f33322d3332203d3e20323632373932.roa (raw, json)
Hash identifier:          H/7i2Dog89CeKAB8iOxW6nTOwAZ7aWsAANHY1adaAWE=
Subject key identifier:   6E:E9:C1:1A:D4:39:60:DA:40:BC:08:B5:9A:67:3C:95:FA:74:D4:3E
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       745D5788B7EE130D3566036F303A738EFF83D0FA
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a3a2f33322d3332203d3e20323632373932.roa
Signing time:             Thu 04 Apr 2024 11:26:04 +0000
ROA not before:           Thu 04 Apr 2024 11:21:04 +0000
ROA not after:            Thu 03 Apr 2025 11:26:04 +0000
asID:                     262792
IP address blocks:        2804:224::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 23:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5d:57:88:b7:ee:13:0d:35:66:03:6f:30:3a:73:8e:ff:83:d0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Apr  4 11:21:04 2024 GMT
            Not After : Apr  3 11:26:04 2025 GMT
        Subject: CN=6EE9C11AD43960DA40BC08B59A673C95FA74D43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:f7:6b:70:8b:24:04:7b:7a:4e:ab:b3:e4:
                    43:c9:6e:a3:02:22:ef:bb:b0:17:39:a8:f6:00:ab:
                    35:90:0d:e9:94:23:5d:c1:e2:ef:07:77:66:4c:02:
                    f1:58:8a:96:42:4c:e3:3d:60:6a:75:44:8c:5c:82:
                    c9:76:8f:e6:78:aa:5e:cc:12:9d:d2:05:f3:b5:87:
                    ef:49:4a:40:02:95:6c:b8:4b:31:03:10:f6:1c:63:
                    91:f1:50:80:d9:26:03:d9:fa:bd:71:e2:18:97:a9:
                    74:d8:31:39:ac:62:a2:7d:12:ba:bd:8f:32:71:59:
                    bd:84:35:83:1a:0a:8b:45:4e:57:51:2e:a8:28:e1:
                    bb:80:46:af:fe:0f:c4:2d:02:a9:90:6d:ae:e0:60:
                    bf:fa:58:78:d8:6e:e9:da:5b:a6:f0:61:02:e1:f9:
                    d1:93:1c:79:ac:f4:6c:ef:27:71:ac:a4:89:e9:28:
                    d4:a3:b7:67:bb:40:c3:6b:b6:36:75:8b:78:58:ed:
                    79:ba:cc:81:7b:58:c9:7c:28:e6:a3:2c:bf:77:b0:
                    94:9f:5c:55:5b:72:1d:2d:a2:8f:1f:36:68:94:ce:
                    e4:bc:a8:31:86:9b:ae:11:c5:79:68:77:19:fe:85:
                    4f:a7:e0:80:84:d9:9d:db:81:3d:b6:9c:cc:9e:8c:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E9:C1:1A:D4:39:60:DA:40:BC:08:B5:9A:67:3C:95:FA:74:D4:3E
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a3a2f33322d3332203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:224::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:45:fc:2e:62:47:da:9d:f1:6b:3f:1d:e7:e5:77:6f:61:bb:
         47:fc:fa:25:2c:4f:fb:19:b1:40:20:66:3c:27:8d:0e:ca:17:
         20:ff:cb:0c:f1:5a:d5:25:fb:fa:1e:09:a9:81:e5:5d:d7:a8:
         69:2c:31:c3:b3:23:c5:60:29:28:db:04:c7:43:42:4b:80:7d:
         ff:fa:ce:55:29:38:b5:d8:00:3b:81:3d:c6:64:bd:df:62:95:
         fb:de:ae:cf:f7:6a:b5:7c:f3:42:28:db:f9:7a:e5:1f:49:50:
         84:3f:29:35:70:09:c6:e9:cb:20:1a:1c:b3:b2:b1:0f:6a:50:
         79:b8:00:31:5b:9b:72:54:e2:28:eb:98:7e:29:81:a7:a4:ea:
         c1:fb:df:a0:e5:4b:83:7a:ba:be:3e:3c:da:ac:de:23:23:f8:
         37:98:1c:b6:46:da:40:76:af:63:e2:16:46:2c:6c:42:d2:1c:
         d1:56:50:c9:c3:f4:41:5c:6b:32:e6:de:34:64:e9:bc:e3:37:
         b3:cf:4e:b6:57:dd:24:47:37:18:31:d4:9f:9e:d4:55:94:f0:
         df:6b:ba:b4:3f:3c:be:81:c0:83:71:63:69:b8:38:b5:a9:35:
         0d:f4:e0:7d:a0:ab:2d:2d:9c:5c:1c:86:a9:c9:e9:e6:b4:a1:
         13:25:5f:fd
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 1 00:19:38 2024 by rpki-client on console-fra.rpki-client.org