Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa
File:                     323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa (raw, json)
Hash identifier:          pDU0MoBiDL2pldD9RiOqurzMRkf7VEl1H8kIgBHgexI=
Subject key identifier:   89:93:22:DF:AE:A0:4E:A2:BB:D5:69:AB:52:36:DD:E4:3C:0D:FE:94
Certificate issuer:       /CN=DADE0C80639BA985F0F9357586063522E5D2116B
Certificate serial:       3A2E1535D62C97857E8AC5042305FC40A20C508A
Authority key identifier: DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa
Signing time:             Thu 15 Feb 2024 13:52:30 +0000
ROA not before:           Thu 15 Feb 2024 13:47:30 +0000
ROA not after:            Thu 13 Feb 2025 13:52:30 +0000
asID:                     262827
IP address blocks:        2804:ccc:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2e:15:35:d6:2c:97:85:7e:8a:c5:04:23:05:fc:40:a2:0c:50:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADE0C80639BA985F0F9357586063522E5D2116B
        Validity
            Not Before: Feb 15 13:47:30 2024 GMT
            Not After : Feb 13 13:52:30 2025 GMT
        Subject: CN=899322DFAEA04EA2BBD569AB5236DDE43C0DFE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:4a:3e:21:12:ab:ee:16:10:4c:62:77:20:
                    fd:67:00:2b:0f:24:18:6a:23:fe:8d:92:c6:c9:48:
                    73:3e:44:71:be:75:7b:01:20:40:b8:2c:c8:d6:78:
                    a4:51:56:f2:12:f4:0f:fe:74:69:15:2e:4b:7f:6d:
                    b8:c0:34:a2:2d:a8:c8:c0:6d:3e:61:e8:39:91:98:
                    3d:89:78:1d:a1:73:b7:62:1f:2d:03:2e:55:7f:97:
                    24:e9:bc:59:12:e8:24:a9:d9:d3:17:ad:23:0f:70:
                    4e:55:37:09:88:ed:01:47:5a:1a:3a:bb:cb:fd:a8:
                    bd:98:08:cf:33:6e:4d:b4:40:28:d3:92:5d:39:ea:
                    12:55:7d:72:a1:ac:fa:ca:9c:0d:ce:c1:14:40:df:
                    47:56:b4:56:6b:cc:07:d2:37:11:22:96:bf:0f:c5:
                    e1:46:ef:01:a8:13:df:6e:d7:d3:8f:6d:5e:57:63:
                    83:f6:80:ce:c2:fe:96:76:e0:d8:2b:6b:bf:c5:b5:
                    02:8a:04:24:ac:9d:97:da:1a:bc:b1:10:63:bb:c6:
                    41:3a:bf:ae:f9:e1:1f:42:0f:49:b4:5c:90:a8:75:
                    7b:4d:55:44:0c:02:7f:65:4a:2f:64:88:9d:21:60:
                    71:f1:b0:34:37:3c:9a:22:68:30:34:73:35:66:3a:
                    4e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:93:22:DF:AE:A0:4E:A2:BB:D5:69:AB:52:36:DD:E4:3C:0D:FE:94
            X509v3 Authority Key Identifier:
                keyid:DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a383030303a3a2f33332d3333203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ccc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:34:85:85:07:74:89:1c:2e:ab:24:8f:14:49:51:e3:02:ef:
         8d:65:8a:b1:f5:ce:00:63:e6:9b:bd:52:d6:0e:4f:d4:5e:ec:
         29:b4:61:b1:cd:20:b0:79:3d:00:ff:10:a6:f2:b8:39:d7:d3:
         69:7d:9e:c4:e9:0f:e3:cc:fc:0a:cc:fd:e1:00:18:af:e3:5f:
         68:3e:ba:d2:3c:7f:da:66:7f:4f:7e:52:cb:46:d6:f5:49:63:
         38:e0:41:25:69:ee:ad:0f:b8:2b:ff:32:91:f2:51:f0:8c:f9:
         dc:d9:f1:f6:bd:41:da:e4:57:cb:7a:89:17:2e:de:9e:1b:2c:
         97:ea:d2:0e:63:5c:a5:92:d2:2d:b0:c2:ff:63:7f:7a:21:f5:
         f6:70:2d:4f:f5:f8:2e:fe:36:ab:8e:90:c7:35:a8:76:cc:91:
         c8:59:11:b2:a3:77:88:3d:da:51:8b:13:55:86:3e:47:b5:20:
         f6:21:ce:a1:b0:72:66:d6:6b:00:07:c8:4a:a4:1e:19:01:52:
         f4:37:94:96:ba:8f:18:e5:16:e1:95:73:39:a5:bb:f2:8c:80:
         28:90:c7:03:72:22:f3:d8:a6:7a:cc:3c:2b:9e:84:8f:82:23:
         e5:11:45:28:d6:c9:cf:18:8b:51:c9:45:8f:ab:5f:99:65:6e:
         cf:48:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:40:11 2024 by rpki-client on console-ams.rpki-client.org