Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a633030303a3a2f33362d3336203d3e20323632363931.roa
File:                     323830343a316364383a633030303a3a2f33362d3336203d3e20323632363931.roa (raw, json)
Hash identifier:          Skl1MijYEvPWI7EHsQwNMZfgc7pHf7XCH9HCj+kpDK0=
Subject key identifier:   BD:6D:B4:F6:D2:52:CB:98:42:C1:A7:21:15:17:C9:6F:80:59:12:B2
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       455D7CDB346137A755F9DAF81BF643C8A1D749D1
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a633030303a3a2f33362d3336203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        2804:1cd8:c000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5d:7c:db:34:61:37:a7:55:f9:da:f8:1b:f6:43:c8:a1:d7:49:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:da:7f:4e:5c:20:0d:3e:a6:ea:46:0f:e5:bf:
                    27:52:21:05:16:e2:5e:3d:28:75:50:90:0f:9f:8b:
                    12:0c:40:6d:2c:6e:58:b3:9f:3e:45:bb:9a:7d:a1:
                    71:c9:01:84:85:29:3c:3e:5f:5d:8d:3e:eb:9d:7f:
                    fd:71:cb:5c:77:a3:44:50:20:c9:b2:40:cb:00:57:
                    13:c4:14:61:4e:f3:95:86:ac:e5:1f:12:c8:82:8c:
                    f6:88:ab:ad:ab:8c:51:1e:a1:f8:7e:c6:97:05:9b:
                    6f:bd:10:23:10:46:13:df:91:9a:7f:e4:b6:46:4e:
                    6b:79:8b:96:54:57:8f:02:07:7a:e0:26:da:9e:c0:
                    04:66:8a:59:e2:ce:60:95:2c:b9:b9:cd:a9:48:e5:
                    fa:6f:81:35:ab:ee:43:61:8a:26:64:39:51:02:14:
                    95:6b:e5:1c:7b:73:af:e1:5e:e8:8f:07:3d:ad:46:
                    3f:d0:84:7d:4b:61:a7:1a:71:97:f7:7f:27:f1:f9:
                    2f:81:71:57:69:ea:f3:da:cd:18:a4:15:79:99:b4:
                    6d:e1:d9:34:c2:41:2d:d1:9c:b5:76:c8:53:8e:2d:
                    28:28:cc:18:d7:f6:4b:21:6d:09:de:d1:a9:5e:ea:
                    85:08:93:bc:ea:d9:9c:4d:76:f8:ab:92:c3:ad:9d:
                    6d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6D:B4:F6:D2:52:CB:98:42:C1:A7:21:15:17:C9:6F:80:59:12:B2
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a633030303a3a2f33362d3336203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:59:94:75:e6:aa:ae:96:af:d2:36:90:cf:a4:f9:1a:80:
         f7:a7:9b:ef:b9:25:0a:86:d7:65:41:cb:dc:6d:98:14:3a:6b:
         f2:86:d9:ff:77:56:b9:7e:73:0a:01:99:44:cb:01:53:be:39:
         38:1b:94:5b:13:a7:f1:37:e9:a8:12:9b:f9:95:bb:4e:e2:a8:
         dd:bc:df:95:fc:95:d2:c8:be:38:2b:63:16:ae:90:24:be:77:
         df:56:6d:77:ce:15:00:47:0a:a0:83:6e:e7:4b:46:e5:e8:3b:
         e8:73:7a:2b:e2:14:d3:a1:cb:a6:e3:8b:ee:64:c2:26:54:76:
         f2:5a:b8:65:67:a1:6c:30:5c:af:7f:0c:38:3e:5e:ce:0b:1c:
         c4:eb:21:e3:a7:a0:af:51:25:81:b4:94:af:8d:68:cc:3b:bf:
         6f:c0:4b:e6:67:58:40:4e:13:6b:88:63:b5:53:25:c3:64:17:
         13:39:e1:b4:47:14:67:48:34:43:26:0e:e0:f9:9e:b5:fc:4c:
         c5:3a:7a:00:10:1e:fb:91:6f:08:2e:91:84:5b:b9:3a:92:2f:
         10:b7:a5:90:19:32:ae:27:4e:92:3a:12:18:9d:f9:c5:9b:9f:
         c7:d0:3c:f7:d5:06:c6:f3:60:71:5a:f5:98:bc:8d:e9:a0:51:
         ab:22:9c:74
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIURV182zRhN6dV+dr4G/ZDyKHXSdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTlaFw0yNTA0MDIxODMwMTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTlEQTdGNEU1QzIwMEQzRUE2
RUE0NjBGRTVCRjI3NTIyMTA1MTZFMjVFM0QyODc1NTA5MDBGOUY4QjEyMEM0MDZE
MkM2RTU4QjM5RjNFNDVCQjlBN0RBMTcxQzkwMTg0ODUyOTNDM0U1RjVEOEQzRUVC
OUQ3RkZENzFDQjVDNzdBMzQ0NTAyMEM5QjI0MENCMDA1NzEzQzQxNDYxNEVGMzk1
ODZBQ0U1MUYxMkM4ODI4Q0Y2ODhBQkFEQUI4QzUxMUVBMUY4N0VDNjk3MDU5QjZG
QkQxMDIzMTA0NjEzREY5MTlBN0ZFNEI2NDY0RTZCNzk4Qjk2NTQ1NzhGMDIwNzdB
RTAyNkRBOUVDMDA0NjY4QTU5RTJDRTYwOTUyQ0I5QjlDREE5NDhFNUZBNkY4MTM1
QUJFRTQzNjE4QTI2NjQzOTUxMDIxNDk1NkJFNTFDN0I3M0FGRTE1RUU4OEYwNzNE
QUQ0NjNGRDA4NDdENEI2MUE3MUE3MTk3Rjc3RjI3RjFGOTJGODE3MTU3NjlFQUYz
REFDRDE4QTQxNTc5OTlCNDZERTFEOTM0QzI0MTJERDE5Q0I1NzZDODUzOEUyRDI4
MjhDQzE4RDdGNjRCMjE2RDA5REVEMUE5NUVFQTg1MDg5M0JDRUFEOTlDNEQ3NkY4
QUI5MkMzQUQ5RDZEQTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6dp/TlwgDT6m6kYP5b8nUiEFFuJePSh1UJAPn4sSDEBtLG5Ys58+
RbuafaFxyQGEhSk8Pl9djT7rnX/9cctcd6NEUCDJskDLAFcTxBRhTvOVhqzlHxLI
goz2iKutq4xRHqH4fsaXBZtvvRAjEEYT35Gaf+S2Rk5reYuWVFePAgd64CbansAE
ZopZ4s5glSy5uc2pSOX6b4E1q+5DYYomZDlRAhSVa+Uce3Ov4V7ojwc9rUY/0IR9
S2GnGnGX938n8fkvgXFXaerz2s0YpBV5mbRt4dk0wkEt0Zy1dshTji0oKMwY1/ZL
IW0J3tGpXuqFCJO86tmcTXb4q5LDrZ1tpQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FL1ttPbSUsuYQsGnIRUXyW+AWRKyMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMyMzgzMDM0M2EzMTYzNjQzODNh
NjMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzIzNjM5MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBBzYwDANBgkqhkiG9w0BAQsFAAOCAQEAj/tZlHXmqq6Wr9I2kM+k
+RqA96eb77klCobXZUHL3G2YFDpr8obZ/3dWuX5zCgGZRMsBU745OBuUWxOn8Tfp
qBKb+ZW7TuKo3bzflfyV0si+OCtjFq6QJL5331Ztd84VAEcKoINu50tG5eg76HN6
K+IU06HLpuOL7mTCJlR28lq4ZWehbDBcr38MOD5ezgscxOsh46egr1ElgbSUr41o
zDu/b8BL5mdYQE4Ta4hjtVMlw2QXEznhtEcUZ0g0QyYO4PmetfxMxTp6ABAe+5Fv
CC6RhFu5OpIvELelkBkyridOkjoSGJ35xZufx9A899UGxvNgcVr1mLyN6aBRqyKc
dA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org