Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a633030303a3a2f33342d3334203d3e20323733353137.roa
File:                     323830343a386664633a633030303a3a2f33342d3334203d3e20323733353137.roa (raw, json)
Hash identifier:          HzhK7tgVGQfyshtknwh0W5h4L7wONJMzUhv4IVFx7Wg=
Subject key identifier:   A8:16:A5:26:DC:72:FA:3F:05:05:14:67:39:2C:9A:2E:E2:0F:1E:4F
Certificate issuer:       /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Certificate serial:       4F6ACEF41D5217FDBB012A30141ECD7E5EE58C08
Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a633030303a3a2f33342d3334203d3e20323733353137.roa
Signing time:             Tue 27 Aug 2024 17:19:06 +0000
ROA not before:           Tue 27 Aug 2024 17:14:06 +0000
ROA not after:            Tue 26 Aug 2025 17:19:06 +0000
asID:                     273517
IP address blocks:        2804:8fdc:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6a:ce:f4:1d:52:17:fd:bb:01:2a:30:14:1e:cd:7e:5e:e5:8c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
        Validity
            Not Before: Aug 27 17:14:06 2024 GMT
            Not After : Aug 26 17:19:06 2025 GMT
        Subject: CN=A816A526DC72FA3F05051467392C9A2EE20F1E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:66:0d:fd:f4:51:5b:ad:f9:03:5e:ca:54:
                    9f:ce:21:3b:39:70:0b:15:c7:9e:36:6a:67:29:f3:
                    3d:60:e0:cd:25:ff:a0:af:69:8a:c7:b6:e5:88:25:
                    e4:72:0e:d6:29:bb:5f:3e:9f:f6:ab:74:fc:10:b0:
                    99:ff:49:a5:7c:92:c5:d7:5d:d0:d9:42:08:9e:0f:
                    1c:9b:3c:33:39:82:39:6b:f6:f6:40:fb:14:72:37:
                    55:80:f9:5d:2e:47:2a:1b:c6:9b:61:92:b6:1c:e1:
                    70:d9:0c:02:ef:ed:3a:0a:e1:2d:62:69:5d:04:60:
                    12:6c:3f:07:be:65:ad:83:cc:b5:f1:96:2e:cb:ad:
                    bb:d6:e7:27:2a:86:36:13:d3:28:84:43:41:14:e2:
                    0d:6b:07:51:38:90:ed:ca:5f:46:a4:8c:7f:78:1d:
                    da:a1:96:4e:ef:93:31:8d:c7:6e:a6:b5:e4:d1:31:
                    8c:72:d5:7f:a1:7b:02:6f:d9:9f:b4:37:a1:e9:d4:
                    c4:82:83:a9:73:a4:eb:6e:16:f9:87:73:d3:44:1b:
                    c8:f0:fc:8e:39:2f:31:24:de:33:1e:5e:2d:9d:d9:
                    ac:03:92:95:ba:06:47:ca:18:6f:f5:f3:f2:be:b0:
                    4d:84:8d:3b:bc:20:35:01:1f:fe:99:31:ad:f1:28:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:16:A5:26:DC:72:FA:3F:05:05:14:67:39:2C:9A:2E:E2:0F:1E:4F
            X509v3 Authority Key Identifier:
                keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a633030303a3a2f33342d3334203d3e20323733353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fdc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:99:4a:b9:70:a8:76:fc:55:a0:35:54:83:74:44:5e:17:
         05:72:07:89:fc:9d:e7:89:ef:a9:d1:bb:9a:80:12:5f:31:81:
         77:ef:93:15:c0:72:07:ed:76:69:8f:cc:cc:9f:1b:62:16:4a:
         67:05:d2:b6:6f:bc:5e:27:ff:fd:7e:f7:d4:7a:31:f8:6b:9a:
         5f:e9:04:e4:8d:29:db:5a:18:15:db:9f:d5:d2:a6:de:68:60:
         4f:d7:1c:f8:ed:55:6e:a8:6d:01:cc:c2:f2:ac:42:ab:04:45:
         95:99:95:78:fa:26:09:8e:78:e7:f5:30:c0:31:88:f0:bd:ee:
         fa:70:9b:d8:df:ed:64:cd:51:a1:b7:8d:62:bb:17:63:ba:b8:
         64:12:48:b9:8c:96:89:3f:0b:74:0b:32:20:c5:d2:fc:fa:cb:
         81:87:9e:8b:aa:f9:56:2d:a6:18:d1:e6:4a:a0:b5:7c:c5:09:
         a5:1d:ae:ad:bb:da:c4:e0:d9:9d:f6:15:b3:b0:6e:ab:e3:78:
         44:5c:61:14:75:11:8f:b2:77:d2:26:eb:12:21:9b:1f:07:e5:
         c1:f6:22:5e:19:5b:ce:0c:3e:bf:b4:6e:ce:96:0d:92:89:99:
         bb:89:9f:cb:0d:0f:ac:c0:bb:ac:b7:01:0b:3a:1b:86:ad:d4:
         bf:98:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----