Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a383030303a3a2f33342d3334203d3e20323733353137.roa
File:                     323830343a386664633a383030303a3a2f33342d3334203d3e20323733353137.roa (raw, json)
Hash identifier:          LpYCfumc8q41YRE9AGP9LmaTtBGGcMTc9/LCLOzKhWs=
Subject key identifier:   8F:22:9C:1A:E9:32:5A:75:D9:32:4C:B2:DC:60:78:79:A7:72:07:AA
Certificate issuer:       /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Certificate serial:       7644C82E2D2B337C9E72123D21924EB42745C9C9
Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a383030303a3a2f33342d3334203d3e20323733353137.roa
Signing time:             Tue 27 Aug 2024 17:19:03 +0000
ROA not before:           Tue 27 Aug 2024 17:14:03 +0000
ROA not after:            Tue 26 Aug 2025 17:19:03 +0000
asID:                     273517
IP address blocks:        2804:8fdc:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:44:c8:2e:2d:2b:33:7c:9e:72:12:3d:21:92:4e:b4:27:45:c9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
        Validity
            Not Before: Aug 27 17:14:03 2024 GMT
            Not After : Aug 26 17:19:03 2025 GMT
        Subject: CN=8F229C1AE9325A75D9324CB2DC607879A77207AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:6e:74:d7:1f:b9:1f:ed:31:8d:65:ee:9b:
                    4a:54:b7:eb:58:11:a8:84:05:6a:c7:55:7c:26:3b:
                    49:48:26:72:02:f4:8f:c6:8d:44:b2:43:7f:e8:a1:
                    72:54:7f:2f:bf:05:5a:80:15:84:c7:04:6a:36:dd:
                    00:e4:f6:7a:42:0d:82:77:6c:7e:2f:90:66:c3:68:
                    af:43:6d:dc:a7:88:04:7d:5b:7f:2f:74:0a:f3:f2:
                    b6:77:20:8f:e2:59:d0:a2:c4:83:f6:b8:00:8b:85:
                    6f:36:6a:96:42:96:0c:a5:61:0a:c9:77:44:7f:15:
                    09:6f:70:78:50:c8:7c:a3:a5:4c:00:97:f1:13:58:
                    88:77:66:45:5e:a2:c7:e4:de:f3:03:b0:ab:5c:e4:
                    64:c4:03:63:48:e7:60:63:e4:44:a6:67:a1:3f:77:
                    6b:1f:ad:56:bf:5b:3b:1e:6c:70:43:aa:e9:f5:06:
                    bc:6c:2a:59:3a:68:e9:d8:9b:73:17:ed:2d:40:9a:
                    08:81:34:64:7f:68:6a:ba:1b:a6:26:f6:21:5f:9f:
                    c5:e5:30:59:af:b0:d6:c3:5a:9d:c4:fa:68:00:ca:
                    df:64:92:6f:70:b9:24:a9:d7:58:92:ca:fd:8f:bd:
                    38:e8:ea:ab:8c:b0:f3:9a:bf:6a:eb:93:e2:d4:a3:
                    99:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:22:9C:1A:E9:32:5A:75:D9:32:4C:B2:DC:60:78:79:A7:72:07:AA
            X509v3 Authority Key Identifier:
                keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a383030303a3a2f33342d3334203d3e20323733353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fdc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:9b:17:8d:75:1f:1d:7c:8c:bd:5d:14:ed:c5:a6:7b:c4:67:
         7f:c5:86:57:32:5b:2b:94:57:8e:ef:0e:91:ff:3a:be:15:fc:
         de:81:13:c7:55:ff:3b:45:4c:13:38:de:38:6b:a8:b3:69:ac:
         7b:fe:bd:68:f8:1c:b9:0d:cf:e9:c7:a1:63:5a:77:c7:44:62:
         d9:81:ba:58:88:0c:14:18:04:43:66:79:82:9d:12:e3:35:6f:
         bf:d4:24:46:eb:0f:b7:09:1f:10:98:45:fc:ce:d8:ff:40:61:
         59:3f:f9:23:7a:b7:68:5e:8f:5d:5a:25:65:3c:0b:2d:11:53:
         b4:a6:4c:6d:c1:9e:af:e5:34:9e:0c:23:39:67:e2:59:d7:82:
         ca:5d:d0:22:5f:13:20:5a:e8:c4:64:45:38:33:04:97:f3:6b:
         e6:27:a6:1f:46:ba:43:63:fd:2d:a6:c6:df:2e:68:ea:1f:b0:
         ff:49:05:8f:49:1a:28:bb:99:4b:3f:1c:f4:fb:d6:c9:bc:5b:
         41:f2:76:23:6c:68:41:33:1e:50:87:3f:e0:e6:4f:f9:71:7b:
         36:fa:e7:22:06:6f:71:06:48:18:cd:b8:e2:86:ef:e0:2c:95:
         2e:75:71:7a:01:06:ef:d2:e4:96:41:e5:a2:c3:45:69:6b:b6:
         9e:10:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----