Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a3a2f33322d3332203d3e20323632363931.roa
File:                     323830343a316364383a3a2f33322d3332203d3e20323632363931.roa (raw, json)
Hash identifier:          XI7rK1sHsfqJoiX6d3i6wSkV4aPZSyIOKBqHuHAYnYg=
Subject key identifier:   BB:18:E0:C7:80:53:1F:21:D8:D6:43:05:F4:B6:5E:BC:42:FF:4E:4D
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       74EA6CCE32E9DAD1A993B536CC6D036052242C27
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a3a2f33322d3332203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        2804:1cd8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ea:6c:ce:32:e9:da:d1:a9:93:b5:36:cc:6d:03:60:52:24:2c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:30:a5:53:2c:8e:80:9f:ad:4a:31:45:73:
                    27:70:21:aa:74:7a:6c:de:6c:a9:74:a6:0e:a8:e9:
                    eb:a1:45:49:20:c2:1c:35:c3:f9:ea:8e:57:dc:61:
                    f0:a7:19:ce:a6:d2:0d:33:7d:27:4a:02:c9:da:25:
                    59:aa:b7:04:c6:2e:cb:fc:e7:6e:54:35:f0:d7:94:
                    ef:5b:db:ca:95:77:78:4c:3f:b2:69:4f:39:09:db:
                    d0:0a:a7:cf:b5:90:33:70:72:2b:2d:39:23:59:68:
                    65:cc:16:08:76:c2:22:e4:c8:37:2c:d5:b1:08:0f:
                    28:91:b9:06:48:66:de:2f:a3:f6:31:57:42:e2:be:
                    79:1f:49:90:5d:9b:c5:34:ff:49:83:69:9b:9f:de:
                    76:7d:fb:1f:90:27:ff:da:ed:43:4e:66:c2:fe:be:
                    b2:4f:1c:09:8f:8d:94:45:00:8a:37:08:2c:ee:ac:
                    fe:1e:84:1a:0c:83:35:70:4b:7e:30:f1:ca:b5:fd:
                    82:78:51:93:66:8d:ca:42:1b:2e:a5:ad:bd:90:a5:
                    76:85:56:87:2d:e4:58:ae:ce:a5:71:38:7b:7e:25:
                    0a:90:e7:79:9b:b2:89:e7:b2:19:99:8a:92:d5:96:
                    ba:36:94:48:89:9d:f1:f0:51:0a:db:12:57:37:a7:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:18:E0:C7:80:53:1F:21:D8:D6:43:05:F4:B6:5E:BC:42:FF:4E:4D
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a3a2f33322d3332203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:3a:d8:77:8c:8e:78:7b:c5:28:51:53:f4:5b:65:32:8f:
         00:1e:68:9b:0e:fd:29:aa:1f:66:6d:9d:b3:81:43:e4:f1:60:
         77:e3:68:10:96:ed:82:40:57:7a:f3:32:6d:19:ce:cc:54:a0:
         12:b1:cb:84:97:f5:f2:0b:ed:6e:a7:48:08:cd:14:d8:8f:06:
         07:eb:97:d7:fb:b6:c1:fc:2d:ab:7b:d9:3e:cd:16:16:b8:49:
         e0:82:8c:45:92:19:ef:fe:4a:00:d2:7b:b4:e6:83:5f:38:cb:
         be:50:41:e8:ff:6b:04:50:e6:16:33:a5:83:c1:58:b5:f1:96:
         9c:3e:2c:cd:54:a1:04:01:bf:91:83:46:90:aa:a7:15:01:e0:
         91:c7:bc:dd:43:61:7f:9a:1b:d2:71:66:20:c4:00:9c:ae:95:
         2d:97:a7:38:d4:94:0c:b3:8f:5a:cd:53:84:85:7d:d5:39:3e:
         63:75:cf:41:e0:65:59:89:64:d3:55:ab:09:6a:43:d7:f2:ec:
         1c:38:21:11:96:82:50:d7:68:db:32:cc:dc:52:65:fe:25:d0:
         d4:c1:a3:0c:41:6e:9f:3d:fb:7d:e0:74:1d:75:ca:49:33:fb:
         4c:06:82:3d:08:3c:08:67:e4:45:17:23:27:67:da:ca:6f:0b:
         13:e8:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org