Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a323230313a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a323230313a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          s6Au+JxSideQg64rZ1fhgRrXnVMz3apds8byK6QwMEI=
Subject key identifier:   FD:8A:FB:6E:86:B9:E2:3B:4B:5D:B8:0C:EF:22:F2:FD:07:9B:10:52
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       1EBA805DB27346D51613724B4B03AEAC6B09074B
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a323230313a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:06 +0000
ROA not before:           Sat 02 Nov 2024 15:18:06 +0000
ROA not after:            Sat 01 Nov 2025 15:23:06 +0000
asID:                     272581
IP address blocks:        2804:8578:2201::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ba:80:5d:b2:73:46:d5:16:13:72:4b:4b:03:ae:ac:6b:09:07:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:06 2024 GMT
            Not After : Nov  1 15:23:06 2025 GMT
        Subject: CN=FD8AFB6E86B9E23B4B5DB80CEF22F2FD079B1052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:55:ae:90:19:d3:3c:ac:05:ca:a7:6a:fe:
                    2e:38:6a:8f:86:1d:9b:b4:c4:9d:86:a9:c7:bb:4d:
                    f0:9a:59:6b:28:69:15:92:36:59:f9:37:cb:05:df:
                    54:f6:ca:e2:43:87:29:5c:43:c5:ad:93:ee:7f:44:
                    1d:fe:ba:ce:df:51:6c:02:88:06:14:6d:ef:c2:08:
                    e5:98:cd:03:ad:37:30:64:ba:40:fd:9f:30:88:e9:
                    e6:1d:46:3a:d1:2e:cb:d2:76:0c:f1:45:1c:a2:d3:
                    e7:6c:78:7c:21:61:da:d3:4f:b8:3e:77:38:14:03:
                    eb:f6:a9:0a:a3:53:3c:2d:ca:3d:c1:f0:8e:3a:10:
                    d3:ab:4b:d4:a1:db:0f:a3:5a:4b:dc:1c:ed:05:69:
                    3d:ce:12:9a:64:ae:3d:18:b8:d9:f5:b4:3c:f0:90:
                    e7:b3:92:ca:f6:09:76:b6:81:75:be:54:7e:3f:7e:
                    cb:9d:ea:4d:13:06:b8:41:cc:7e:16:93:b9:22:8d:
                    90:76:aa:f7:22:af:9e:37:35:11:38:e6:75:7d:db:
                    b2:7a:aa:24:61:77:5e:bd:8a:61:9f:18:d7:e2:b2:
                    50:5a:04:57:7d:04:cf:ea:b1:f8:49:2f:b6:1c:1c:
                    bd:83:53:6a:df:b4:0d:dc:f4:a0:ad:a9:ba:35:11:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8A:FB:6E:86:B9:E2:3B:4B:5D:B8:0C:EF:22:F2:FD:07:9B:10:52
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a323230313a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:2201::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:a5:de:0d:eb:03:37:ed:2c:0a:3c:9c:19:c2:2e:fb:cf:e7:
         1f:60:79:c6:ec:3f:25:4f:e4:ff:ab:27:9a:c1:d7:ac:67:67:
         39:86:e8:0c:27:fe:b0:ed:42:b2:31:f2:39:1d:3f:fe:31:43:
         a0:65:57:70:b5:6b:2d:42:b3:1f:15:ef:26:38:d2:1d:86:46:
         1e:81:6c:f6:f2:b1:b9:2e:cc:6f:65:e2:5e:fb:2b:6b:b3:50:
         98:57:bc:88:e4:7e:5a:04:93:75:c9:8b:ae:68:83:72:70:7d:
         e0:59:86:da:36:7b:33:d9:a1:ff:89:f8:34:3f:ab:68:f1:32:
         c7:c4:71:4e:2b:a6:56:29:d1:fe:ce:79:31:b6:1d:7b:ac:5d:
         e2:65:a5:91:91:0d:05:92:f8:4d:97:6e:2a:b5:68:5a:14:ca:
         25:65:be:ef:61:22:07:86:30:7b:ed:70:17:36:a1:84:39:ac:
         76:38:f5:02:bf:8f:c5:64:c1:35:88:99:26:a8:a3:44:43:e8:
         3c:f6:fe:a2:d3:7c:39:a4:4a:ae:0b:5c:d3:64:4d:aa:af:4e:
         ef:34:04:52:62:86:e2:6f:a2:a5:a2:87:77:e4:e1:00:53:59:
         de:20:67:09:1c:a0:2a:c8:ce:9d:33:ec:37:60:45:db:4c:ca:
         eb:ab:8f:5e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUHrqAXbJzRtUWE3JLSwOurGsJB0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY1Rjc1OEQyMEQyMTcwN0JFNjBDMjVGMzAwNEQwRUZB
OEE5RkY1NDAeFw0yNDExMDIxNTE4MDZaFw0yNTExMDExNTIzMDZaMDMxMTAvBgNV
BAMTKEZEOEFGQjZFODZCOUUyM0I0QjVEQjgwQ0VGMjJGMkZEMDc5QjEwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxFWukBnTPKwFyqdq/i44ao+G
HZu0xJ2Gqce7TfCaWWsoaRWSNln5N8sF31T2yuJDhylcQ8Wtk+5/RB3+us7fUWwC
iAYUbe/CCOWYzQOtNzBkukD9nzCI6eYdRjrRLsvSdgzxRRyi0+dseHwhYdrTT7g+
dzgUA+v2qQqjUzwtyj3B8I46ENOrS9Sh2w+jWkvcHO0FaT3OEppkrj0YuNn1tDzw
kOezksr2CXa2gXW+VH4/fsud6k0TBrhBzH4Wk7kijZB2qvcir543NRE45nV927J6
qiRhd169imGfGNfislBaBFd9BM/qsfhJL7YcHL2DU2rftA3c9KCtqbo1EVtnAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU/Yr7boa54jtLXbgM7yLy/QebEFIwHwYDVR0j
BBgwFoAUb191jSDSFwe+YMJfMATQ76ip/1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMC82RjVGNzU4RDIwRDIxNzA3QkU2MEMyNUYzMDA0RDBFRkE4QTlGRjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNUY3NThEMjBEMjE3MDdC
RTYwQzI1RjMwMDREMEVGQThBOUZGNTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAv
MzIzODMwMzQzYTM4MzUzNzM4M2EzMjMyMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMjM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEhXgiATANBgkqhkiG9w0BAQsF
AAOCAQEAmaXeDesDN+0sCjycGcIu+8/nH2B5xuw/JU/k/6snmsHXrGdnOYboDCf+
sO1CsjHyOR0//jFDoGVXcLVrLUKzHxXvJjjSHYZGHoFs9vKxuS7Mb2XiXvsra7NQ
mFe8iOR+WgSTdcmLrmiDcnB94FmG2jZ7M9mh/4n4ND+raPEyx8RxTiumVinR/s55
MbYde6xd4mWlkZENBZL4TZduKrVoWhTKJWW+72EiB4Ywe+1wFzahhDmsdjj1Ar+P
xWTBNYiZJqijREPoPPb+otN8OaRKrgtc02RNqq9O7zQEUmKG4m+ipaKHd+ThAFNZ
3iBnCRygKsjOnTPsN2BF20zK66uPXg==
-----END CERTIFICATE-----
Generated at Tue Nov 5 05:49:56 2024 by rpki-client on console-ams.rpki-client.org