Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a643030303a3a2f33362d3336203d3e20323632363931.roa
File:                     323830343a316364383a643030303a3a2f33362d3336203d3e20323632363931.roa (raw, json)
Hash identifier:          oH5G8ecbrXTVfZjLR44ECbVnTXKAkzpLEbOanSlHKG8=
Subject key identifier:   E8:8C:E3:32:35:B6:E5:9A:5B:E5:AD:8B:35:6F:57:A6:77:30:F1:DB
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       77B42C3BC293650233A8B9F7B1B49C49A4B6107C
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a643030303a3a2f33362d3336203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     262691
IP address blocks:        2804:1cd8:d000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b4:2c:3b:c2:93:65:02:33:a8:b9:f7:b1:b4:9c:49:a4:b6:10:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:96:f6:bb:cc:85:e4:b4:77:c4:d9:6d:19:
                    d2:fd:32:7e:0e:c5:d0:b8:97:24:a0:0a:96:4a:39:
                    60:0a:f0:1b:19:15:cc:c8:1c:a6:29:ae:2f:a0:72:
                    ee:9a:3c:88:a3:1a:db:f3:ec:5a:87:56:4f:d6:d7:
                    6a:cb:eb:20:05:b4:b3:b3:ae:19:9c:8a:39:87:63:
                    59:df:02:7c:cb:48:a3:75:05:76:8d:70:fe:0e:1a:
                    e8:54:a7:55:f0:4a:93:53:6e:1b:17:2c:e2:71:69:
                    36:ec:e6:9b:e9:e0:29:0d:d3:ab:36:ee:75:92:71:
                    ce:90:d4:bf:0a:9e:4a:bf:be:2f:e2:f3:d0:98:03:
                    08:3c:59:ef:e9:a3:89:a6:d5:f4:81:23:33:f5:7a:
                    eb:1f:3e:0a:6d:f3:e5:f7:89:e8:03:2f:1d:87:37:
                    0d:f9:ea:1e:4b:c6:6b:3c:de:99:e9:9c:eb:83:97:
                    a9:46:2b:66:7e:83:f3:a8:e3:d9:98:1b:f0:32:d5:
                    bd:04:64:a8:71:21:0a:a3:c9:35:17:2f:71:6f:77:
                    26:af:fa:89:8e:c1:21:49:ae:34:99:cb:51:02:de:
                    95:59:2b:47:37:19:07:61:58:98:d7:8c:ae:01:71:
                    21:74:ef:dd:d4:2b:57:39:6c:77:5e:00:1e:32:42:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8C:E3:32:35:B6:E5:9A:5B:E5:AD:8B:35:6F:57:A6:77:30:F1:DB
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a643030303a3a2f33362d3336203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b0:e1:04:63:af:52:b3:44:2d:8b:fc:a1:60:3f:29:70:d9:6a:
         06:74:93:ac:0f:eb:6e:c7:ce:b0:1f:0c:0f:c3:75:dd:59:fa:
         f1:6d:85:65:c4:2c:af:18:b9:2a:93:73:03:b6:72:93:0b:95:
         63:84:27:23:44:3d:fd:98:e0:44:52:b7:e8:f5:34:d0:12:77:
         96:8e:af:eb:4b:6a:fb:dc:38:4a:e6:2a:29:da:89:5f:34:66:
         94:cc:eb:38:6a:1c:b0:fb:05:d8:7f:7e:ac:c0:f2:8f:bb:86:
         a8:90:7c:1d:18:9e:24:31:3c:3a:ef:fe:06:40:3a:d9:0f:16:
         d2:b8:62:85:3a:af:a2:8e:20:3f:f5:93:d9:8c:8a:ef:9d:f0:
         0e:49:09:55:82:d6:61:92:64:46:ae:4a:50:02:e4:13:1e:7b:
         55:c3:8f:b6:c4:dc:f0:62:38:86:85:68:3a:14:f8:6b:38:67:
         7f:86:05:b1:b3:55:88:62:60:ea:20:3b:4e:05:d4:a5:a1:3c:
         0f:17:e1:2c:a6:1b:bc:76:02:1a:c1:55:8c:df:7e:02:75:e1:
         ba:15:07:66:bb:7d:81:0d:7f:e8:bc:a8:8b:1e:46:28:d6:83:
         e1:3d:ca:12:6c:71:11:b5:72:88:84:7b:d5:3b:5e:02:8f:48:
         99:66:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org