Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33332d3333203d3e20323639313234.roa
File:                     323830343a356663633a3a2f33332d3333203d3e20323639313234.roa (raw, json)
Hash identifier:          A+wBKdzfzErIdXdVRwmLU4RBUH++rmm7l2qlSB+4CNw=
Subject key identifier:   4F:A9:68:39:5A:D4:A1:18:5F:3D:C2:9D:34:A8:31:48:37:8F:AC:D7
Certificate issuer:       /CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
Certificate serial:       11A9D0B4852161DE9E0A35D4D8A2880829A82353
Authority key identifier: 56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33332d3333203d3e20323639313234.roa
Signing time:             Thu 04 Apr 2024 09:47:17 +0000
ROA not before:           Thu 04 Apr 2024 09:42:17 +0000
ROA not after:            Thu 03 Apr 2025 09:47:17 +0000
asID:                     269124
IP address blocks:        2804:5fcc::/33 maxlen: 33

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 20:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a9:d0:b4:85:21:61:de:9e:0a:35:d4:d8:a2:88:08:29:a8:23:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
        Validity
            Not Before: Apr  4 09:42:17 2024 GMT
            Not After : Apr  3 09:47:17 2025 GMT
        Subject: CN=4FA968395AD4A1185F3DC29D34A83148378FACD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:72:f1:6d:09:dd:0f:fb:4b:70:be:9a:82:
                    93:c6:e5:58:a5:9f:19:8f:a9:18:0c:dc:28:41:b5:
                    15:19:ac:54:63:1d:99:4d:6c:1c:0b:c2:c0:cd:53:
                    e9:27:65:d8:29:2e:63:6b:ad:de:da:fc:5e:25:3a:
                    ae:da:8c:d6:84:88:5e:97:ec:f0:24:73:6c:c6:a7:
                    70:f1:5e:10:8b:e0:7b:c0:36:02:e7:ff:36:af:3a:
                    13:09:f2:df:72:bd:17:f6:84:09:38:cd:33:cd:02:
                    1b:9c:5f:51:93:c2:e7:ab:fa:9a:e4:39:87:5a:b5:
                    f9:de:6c:a4:9b:c4:cb:d4:1a:65:3a:bd:0b:fb:0e:
                    e7:84:5b:f4:d0:93:f7:a8:9c:81:65:9a:02:31:06:
                    d1:0a:88:53:53:45:14:3b:36:02:8a:2a:fa:f9:27:
                    ad:9a:e7:da:cc:7f:f4:fe:59:e6:24:9f:b7:49:d2:
                    8b:f7:de:27:d6:2b:3a:d6:24:9e:22:32:bd:c2:5b:
                    3c:3a:4c:ad:c0:da:da:d3:d5:3c:9c:62:a6:b0:86:
                    7a:1f:83:ce:2c:69:9d:9e:4b:81:c3:4d:39:b1:50:
                    12:1e:f1:9e:3e:b6:d4:de:b6:59:f5:0e:29:6a:74:
                    0e:0a:48:83:85:2f:37:44:61:0e:00:d6:da:f8:49:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:68:39:5A:D4:A1:18:5F:3D:C2:9D:34:A8:31:48:37:8F:AC:D7
            X509v3 Authority Key Identifier:
                keyid:56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33332d3333203d3e20323639313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fcc::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:26:5a:10:68:57:16:09:92:81:3f:39:67:9c:7c:34:74:
         19:ad:19:c8:8c:13:b4:14:39:bc:fc:42:80:22:97:42:ba:11:
         70:92:9e:7a:ca:a5:e6:a7:a7:51:59:25:52:7f:ef:be:f0:cd:
         aa:7e:ca:ed:00:21:eb:39:29:01:62:bf:dc:ed:1b:05:65:a6:
         37:02:dc:54:e2:bc:0f:e0:7d:8f:a4:54:12:0a:95:01:03:df:
         e1:29:88:4d:3c:1b:83:da:c3:ef:ff:c2:b9:33:01:18:c5:0e:
         10:d2:ee:8e:c1:94:5d:8a:33:12:90:88:88:84:9a:93:25:cd:
         58:a9:4c:45:9f:c0:cd:3c:f1:b6:0d:a2:6e:0c:f7:53:82:66:
         21:6b:bd:ff:81:6c:2e:3f:02:69:90:59:87:0a:dc:46:30:4f:
         20:c1:72:57:1b:56:df:90:19:f5:27:f7:56:2a:57:99:31:13:
         45:a0:55:07:04:9c:f7:fd:ff:1f:73:dd:d2:42:f0:38:fb:1d:
         5a:11:8f:3e:ff:54:17:ef:48:16:08:98:cb:71:8e:3e:08:91:
         31:64:6a:47:27:8b:d3:0e:12:79:cd:06:c3:62:44:18:1c:de:
         8b:e2:af:4f:11:5c:8c:f4:78:dd:af:9d:e1:43:1b:94:12:7d:
         89:72:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 23:28:36 2024 by rpki-client on console-fra.rpki-client.org