Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a653030303a3a2f33362d3336203d3e20323632363931.roa
File:                     323830343a316364383a653030303a3a2f33362d3336203d3e20323632363931.roa (raw, json)
Hash identifier:          WN6LSEZl6Zi6bx6OcwGdcXvPAyU/RQkZtjoCIP2o+1c=
Subject key identifier:   9D:07:CD:86:1B:EC:DF:53:22:2C:B9:6F:DE:D9:00:88:B5:2D:A4:8F
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       56A3737994B17F296F9BFA6CE3F7DD1855ED26F8
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a653030303a3a2f33362d3336203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     262691
IP address blocks:        2804:1cd8:e000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a3:73:79:94:b1:7f:29:6f:9b:fa:6c:e3:f7:dd:18:55:ed:26:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject: CN=3082010A0282010100F8B0C94C0FC7B98FF824DF2F6AA5482FDBD088AF4A3C5F4FF2C9A1F3967E7870A55142D87444C17ED2542E339B2252FD8A72CAD526116609425F015219863165900CD1539AF02A6100DD568BD74325CF458CC9BD4AA50E5ADF83FF8FC10061F8F88554C79264ED7FD5A3ABBEA78B8193831C28494AB408E2494BD443D60C518124C41EE7A01DB767F1CAD12270B7B3D3AEF0223A4884E5C51C95D4F5D7ECC6F097B8A176CB683E375224EDFCC86E1E7D2D3D819045B9970DA2E84D6DC0606994AAFF83FA09D2FC32656682F26EE504044B877A79847225DCA0BE9E2454968A7CB67FD8059449AC14C76B4ED6438AE230492100DB9E0A50B6A19BFC87D0DF7AE70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b0:c9:4c:0f:c7:b9:8f:f8:24:df:2f:6a:a5:
                    48:2f:db:d0:88:af:4a:3c:5f:4f:f2:c9:a1:f3:96:
                    7e:78:70:a5:51:42:d8:74:44:c1:7e:d2:54:2e:33:
                    9b:22:52:fd:8a:72:ca:d5:26:11:66:09:42:5f:01:
                    52:19:86:31:65:90:0c:d1:53:9a:f0:2a:61:00:dd:
                    56:8b:d7:43:25:cf:45:8c:c9:bd:4a:a5:0e:5a:df:
                    83:ff:8f:c1:00:61:f8:f8:85:54:c7:92:64:ed:7f:
                    d5:a3:ab:be:a7:8b:81:93:83:1c:28:49:4a:b4:08:
                    e2:49:4b:d4:43:d6:0c:51:81:24:c4:1e:e7:a0:1d:
                    b7:67:f1:ca:d1:22:70:b7:b3:d3:ae:f0:22:3a:48:
                    84:e5:c5:1c:95:d4:f5:d7:ec:c6:f0:97:b8:a1:76:
                    cb:68:3e:37:52:24:ed:fc:c8:6e:1e:7d:2d:3d:81:
                    90:45:b9:97:0d:a2:e8:4d:6d:c0:60:69:94:aa:ff:
                    83:fa:09:d2:fc:32:65:66:82:f2:6e:e5:04:04:4b:
                    87:7a:79:84:72:25:dc:a0:be:9e:24:54:96:8a:7c:
                    b6:7f:d8:05:94:49:ac:14:c7:6b:4e:d6:43:8a:e2:
                    30:49:21:00:db:9e:0a:50:b6:a1:9b:fc:87:d0:df:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:07:CD:86:1B:EC:DF:53:22:2C:B9:6F:DE:D9:00:88:B5:2D:A4:8F
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/323830343a316364383a653030303a3a2f33362d3336203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:61:27:b4:6c:e7:bf:24:5c:08:d8:4f:3e:34:85:a7:d5:
         10:26:df:2c:bc:22:21:02:11:b2:b4:f1:5b:26:78:d7:e7:64:
         d1:b1:95:ae:83:47:99:26:32:48:fb:ef:c3:bc:07:28:9b:f0:
         6e:19:2a:46:56:11:dc:c5:6a:5e:e6:80:44:6c:2d:fd:e9:9b:
         c0:02:cc:b3:9e:36:dd:e2:0d:c2:4d:cc:ff:39:63:2f:84:4c:
         17:d6:61:c7:24:9f:c0:7a:aa:cb:e0:7d:86:66:ba:03:78:52:
         27:39:a8:e3:fc:ee:ec:4b:b6:35:ec:cc:bc:5f:77:25:cd:a7:
         1f:94:a3:96:eb:99:7a:bd:56:4a:56:52:a3:3f:80:3d:c6:b3:
         6d:00:d8:81:c6:cc:b7:c0:73:55:a8:a9:ce:cd:14:fb:9f:cd:
         19:75:f1:44:27:f0:3b:66:67:2a:e4:94:3a:8c:79:dc:bc:d0:
         87:85:75:9c:76:57:40:00:ae:74:46:83:19:0c:55:70:b0:87:
         79:b0:59:ba:40:1a:2c:6e:58:0a:89:bd:93:04:f3:57:0c:b3:
         b5:42:01:2a:d0:b3:fe:e9:33:e2:6a:5c:7f:2c:32:38:26:cc:
         7c:b8:ab:8e:c7:46:46:93:43:88:16:eb:dc:d3:b9:fb:64:02:
         3e:6f:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org