Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33332d3333203d3e203532353837.roa
File:                     323830343a386563303a3a2f33332d3333203d3e203532353837.roa (raw, json)
Hash identifier:          DQ+xwScoG/d78j5zrDlM32KpBYp/hi/19no8e4UALw4=
Subject key identifier:   0E:18:53:D0:6D:91:B3:45:CE:EC:2C:E8:8B:11:D7:75:02:C9:15:4C
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       217F8C195CCB3DF8C8DA8766BC9098E29BD04632
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33332d3333203d3e203532353837.roa
Signing time:             Wed 03 Apr 2024 18:50:46 +0000
ROA not before:           Wed 03 Apr 2024 18:45:46 +0000
ROA not after:            Wed 02 Apr 2025 18:50:46 +0000
asID:                     52587
IP address blocks:        2804:8ec0::/33 maxlen: 33

Validation:               Failed, certificate revoked on Fri 24 May 2024 18:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7f:8c:19:5c:cb:3d:f8:c8:da:87:66:bc:90:98:e2:9b:d0:46:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Apr  3 18:45:46 2024 GMT
            Not After : Apr  2 18:50:46 2025 GMT
        Subject: CN=0E1853D06D91B345CEEC2CE88B11D77502C9154C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:17:29:f4:77:33:4f:59:46:fe:30:42:8e:
                    35:3b:2b:b7:e5:cf:da:1d:75:c2:ad:9e:60:d7:4e:
                    bc:00:9a:34:77:84:1f:55:2d:92:01:8a:09:8d:d8:
                    62:ba:cd:ce:09:b2:d2:ac:98:f4:3a:12:b0:d8:f0:
                    a5:e2:74:c1:74:ba:4a:bb:d4:cf:da:70:e7:6c:8d:
                    2c:04:c8:28:a5:22:53:2f:8c:f6:a1:c7:f6:a2:72:
                    e3:79:40:de:13:1e:36:62:eb:3f:7b:13:62:a1:b3:
                    72:26:f9:10:24:12:1c:a4:b3:5c:b5:dc:9c:cc:63:
                    a0:4a:e5:5b:0d:63:2e:34:6d:5f:c0:fd:e9:ac:24:
                    bb:ea:ed:8b:ce:1c:f6:c8:1a:1a:3a:89:f8:46:46:
                    ed:cc:99:9f:10:ac:14:51:d2:b3:5c:61:c2:28:c7:
                    70:37:c5:d5:cc:82:ab:a8:ed:6d:67:ca:81:e8:60:
                    6e:84:ed:6b:48:38:bb:43:28:b4:b8:26:c2:65:20:
                    45:a3:20:24:c3:68:2c:9d:9b:04:1e:45:32:70:72:
                    18:9a:17:4a:dc:65:50:25:cb:9e:f3:32:84:3d:40:
                    2d:0e:76:8e:50:86:dc:5d:0c:99:37:b4:ba:7f:bd:
                    cc:5b:14:21:14:17:fc:0d:b1:64:d7:af:46:7c:35:
                    4a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:18:53:D0:6D:91:B3:45:CE:EC:2C:E8:8B:11:D7:75:02:C9:15:4C
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33332d3333203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec0::/33

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:ac:42:8f:8b:d8:72:08:5e:5b:59:f7:b8:d1:08:b0:14:
         a9:d0:c9:b7:0a:dc:bd:61:38:27:69:22:f9:e1:91:e3:fb:12:
         98:52:21:fc:b4:17:e0:04:75:03:73:db:00:8d:cb:eb:37:d7:
         e7:a5:c3:3e:53:dc:cf:18:87:1d:e1:00:37:d1:f7:9d:e3:4c:
         25:1b:6f:02:f0:10:19:33:f9:37:5f:58:35:0a:ca:33:d9:37:
         bb:d9:06:71:da:84:01:90:87:39:fb:f5:f7:53:d9:69:44:f4:
         ee:ee:8f:34:a0:e1:ef:a0:d4:ba:39:14:be:07:e1:a6:74:6f:
         cb:67:c3:53:cf:e9:10:20:2b:95:99:71:03:29:7e:3a:3f:9d:
         60:a4:c2:a0:57:6e:75:af:ef:08:92:5c:ba:a0:b8:68:86:7d:
         72:d8:48:a7:49:d8:77:77:d7:68:83:1c:6f:0d:9d:28:b5:59:
         58:2b:47:1d:f8:36:3f:a9:5c:d7:c9:ef:67:46:bd:db:5c:50:
         36:c8:e5:13:4b:48:a2:76:af:3c:23:63:17:04:cc:ec:08:ce:
         19:ad:ea:21:e9:ee:d0:7e:1c:14:55:49:1a:63:30:e1:32:85:
         1b:eb:2d:25:1a:95:02:86:17:fe:f5:78:ff:89:9d:a1:94:9b:
         22:1b:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org