Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a343030303a3a2f33362d3336203d3e20323632333338.roa
File:                     323830343a3830343a343030303a3a2f33362d3336203d3e20323632333338.roa (raw, json)
Hash identifier:          Z+THMadZBD9N9zLVuAA6oodSpA++i0EKLpM3tvt/zWg=
Subject key identifier:   A1:AD:97:D2:EE:F5:33:1F:72:6E:51:43:63:0D:69:15:1B:C1:7F:F2
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       0CDA8721EB527C802F9E5843A6ACCAF80FDF05A7
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a343030303a3a2f33362d3336203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:44:53 +0000
ROA not before:           Wed 24 Apr 2024 12:39:53 +0000
ROA not after:            Wed 23 Apr 2025 12:44:53 +0000
asID:                     262338
IP address blocks:        2804:804:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:87:21:eb:52:7c:80:2f:9e:58:43:a6:ac:ca:f8:0f:df:05:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:39:53 2024 GMT
            Not After : Apr 23 12:44:53 2025 GMT
        Subject: CN=A1AD97D2EEF5331F726E5143630D69151BC17FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:23:a0:22:33:ec:1e:56:54:18:45:3e:c7:
                    e1:3b:44:da:71:58:9b:a1:c3:5b:c5:ef:89:e4:76:
                    bb:39:fe:32:16:6a:e4:35:d5:71:21:f7:a0:cb:76:
                    88:1c:a1:65:63:6e:f1:ec:b0:fc:ed:b1:0e:ee:9d:
                    ef:3a:f1:02:87:20:cc:8d:df:62:94:c6:00:c6:b3:
                    87:00:6e:2f:63:d1:4d:db:c8:54:b3:8e:f1:62:24:
                    74:b3:81:28:ee:f0:3d:f4:f3:b1:3c:3d:fb:fa:97:
                    fb:13:15:f6:98:d7:e3:b8:15:fc:12:09:37:14:d3:
                    38:af:e8:e6:03:ba:b5:ba:94:95:4e:bf:9f:5a:4a:
                    8b:5f:76:97:6c:68:ca:0b:9e:ce:af:73:25:a1:17:
                    1b:65:f3:7b:a3:75:a7:93:ba:c2:5e:44:67:e5:a2:
                    fb:da:4c:7e:a4:68:8f:95:ee:f4:7d:56:5d:78:5b:
                    14:59:6b:aa:89:29:7f:37:2d:a4:05:27:e5:4d:1d:
                    eb:eb:7e:5c:ff:73:7d:9f:b2:b8:d2:23:f9:2f:74:
                    8d:55:cd:c6:36:63:76:ea:f3:d3:4b:dd:ce:ea:cb:
                    f0:8b:de:ab:22:c9:3a:ab:eb:13:6c:12:3f:ac:22:
                    8d:1e:48:f2:47:a1:cd:6f:7a:ab:2e:6e:3e:49:5b:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:97:D2:EE:F5:33:1F:72:6E:51:43:63:0D:69:15:1B:C1:7F:F2
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a343030303a3a2f33362d3336203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:804:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:0d:b7:84:4b:ff:43:fe:56:ef:5d:68:75:ed:ef:ce:db:
         0b:cf:02:32:7a:a5:f2:ed:20:8c:72:e1:0f:91:c7:b3:4f:ef:
         4e:51:80:73:6e:85:fb:a5:a7:16:3b:f5:5e:97:2d:d2:3c:a2:
         2f:22:39:e2:d7:a4:57:f0:72:99:d9:26:4d:69:9e:78:d4:6e:
         e2:0f:1e:6a:c4:78:10:7c:87:69:d3:f9:39:ab:8f:fd:c6:99:
         6e:89:91:96:c9:d5:9e:80:95:0a:63:e6:47:72:3d:09:93:d1:
         fd:85:fd:77:0b:4b:07:01:be:92:91:e2:92:19:8e:43:6a:9e:
         a4:25:bb:46:8d:d0:27:03:e0:81:9e:c4:38:12:4c:52:ef:10:
         4e:12:e0:8c:3f:b2:7b:3e:e4:43:72:75:20:de:c4:87:d0:9b:
         4d:b8:dc:49:13:d7:29:3a:65:97:04:52:07:64:ad:5e:1e:3d:
         4e:6e:40:0a:fa:34:98:26:c3:8d:1d:aa:a3:4f:b3:35:5e:07:
         37:e3:0c:fa:2a:d3:ef:48:a1:6d:96:29:d0:c0:67:e6:12:4e:
         54:bf:f6:6b:28:bf:1d:b5:d1:46:61:90:8c:b5:24:a1:71:8c:
         51:7e:95:21:05:bf:fa:37:4f:a2:ca:5c:96:e1:8d:4b:37:4f:
         ca:34:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----