Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a343030303a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a343030303a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          s3SXjWAHmZ+STDexYIcp33U9qV+cWBDRfA8jivmEYaY=
Subject key identifier:   4A:9B:35:B6:AA:F0:CE:EC:C7:78:4F:6E:20:ED:00:F5:F7:81:D9:E0
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       448DDB94B3D9D09C706476CDF9C32669CC5F7C4A
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a343030303a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:08 +0000
ROA not before:           Sat 02 Nov 2024 15:18:08 +0000
ROA not after:            Sat 01 Nov 2025 15:23:08 +0000
asID:                     272581
IP address blocks:        2804:8578:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8d:db:94:b3:d9:d0:9c:70:64:76:cd:f9:c3:26:69:cc:5f:7c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:08 2024 GMT
            Not After : Nov  1 15:23:08 2025 GMT
        Subject: CN=4A9B35B6AAF0CEECC7784F6E20ED00F5F781D9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:4e:16:b0:a2:2f:69:95:df:f3:31:61:10:
                    64:98:88:e5:8e:22:6f:c6:92:f9:9d:df:c5:29:79:
                    43:1e:86:d8:78:11:89:45:32:fe:ea:13:11:63:14:
                    c7:a6:18:bb:05:d6:fe:c4:f0:c8:13:13:3d:0c:ad:
                    7c:27:69:d7:13:23:a3:63:1b:e0:d1:8a:5d:c0:ea:
                    fc:4a:b8:77:06:13:57:6a:bd:b2:ff:17:1c:0f:65:
                    90:96:a5:9b:60:25:e0:13:76:08:75:a0:7f:81:43:
                    1a:b5:78:b7:e0:24:76:1e:22:40:fe:b5:d9:7d:cb:
                    bc:8e:b6:4d:d1:83:c0:8c:47:3e:71:36:a3:6c:27:
                    69:c6:9f:a1:23:89:7c:80:04:27:0f:fd:e1:1f:d8:
                    c6:52:33:7b:97:1d:6c:45:68:30:b7:4c:b0:60:fd:
                    7b:65:1a:b4:30:69:b6:30:f7:56:3a:2c:b8:92:1e:
                    b7:e2:04:f6:59:ab:b5:41:25:9f:0c:a0:cf:45:a7:
                    7e:ea:ea:3c:3d:1a:63:34:e0:e2:e0:7e:42:74:57:
                    7b:e5:27:ff:24:e4:f0:98:4c:63:1e:29:15:d3:4d:
                    5d:27:b0:a5:77:a2:ba:7f:8e:5a:91:af:fb:22:64:
                    3f:25:8b:bf:37:7a:4d:0a:94:e5:ca:7a:84:5c:26:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9B:35:B6:AA:F0:CE:EC:C7:78:4F:6E:20:ED:00:F5:F7:81:D9:E0
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a343030303a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:01:5f:1e:0d:07:db:aa:3b:89:64:19:90:12:e8:ab:a0:
         2f:86:aa:30:24:18:28:09:28:79:4f:79:08:15:90:b9:31:16:
         83:c3:b6:83:07:b2:3a:8b:86:f3:55:ce:2b:ec:6e:b3:16:e8:
         74:d0:20:2c:98:e9:6a:fa:61:64:62:78:db:3c:61:43:80:8f:
         b0:96:8c:97:20:cc:dd:dc:b6:b9:87:a1:90:09:e2:b7:90:3c:
         8f:dd:1d:76:20:1f:34:0d:9d:34:e4:c2:d6:17:5d:dd:19:7d:
         67:21:7f:44:6c:40:15:30:ce:b0:d1:e2:11:83:79:fe:a3:d4:
         62:f0:62:ef:2c:38:0d:5a:45:68:37:f4:a3:9c:45:e2:f8:b6:
         07:ce:96:33:86:3a:54:80:ed:95:ed:62:37:f4:4d:24:bc:ff:
         49:a3:f2:bd:74:2a:bd:32:c2:f7:ad:40:ef:ac:3e:16:67:18:
         a5:f7:cc:b9:c9:f9:8c:21:6d:f4:95:05:06:f0:61:f1:5f:1d:
         ff:b5:50:2c:e1:f2:47:a5:12:6d:90:18:bd:70:7d:97:af:97:
         b7:2c:bc:99:07:0a:c9:39:f9:20:ae:3b:bb:e2:59:44:2a:fd:
         4c:05:7a:a7:78:47:4f:3c:6c:4f:30:d3:d9:eb:93:7a:94:cd:
         2d:44:84:29
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURI3blLPZ0JxwZHbN+cMmacxffEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY1Rjc1OEQyMEQyMTcwN0JFNjBDMjVGMzAwNEQwRUZB
OEE5RkY1NDAeFw0yNDExMDIxNTE4MDhaFw0yNTExMDExNTIzMDhaMDMxMTAvBgNV
BAMTKDRBOUIzNUI2QUFGMENFRUNDNzc4NEY2RTIwRUQwMEY1Rjc4MUQ5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUO04WsKIvaZXf8zFhEGSYiOWO
Im/Gkvmd38UpeUMehth4EYlFMv7qExFjFMemGLsF1v7E8MgTEz0MrXwnadcTI6Nj
G+DRil3A6vxKuHcGE1dqvbL/FxwPZZCWpZtgJeATdgh1oH+BQxq1eLfgJHYeIkD+
tdl9y7yOtk3Rg8CMRz5xNqNsJ2nGn6EjiXyABCcP/eEf2MZSM3uXHWxFaDC3TLBg
/XtlGrQwabYw91Y6LLiSHrfiBPZZq7VBJZ8MoM9Fp37q6jw9GmM04OLgfkJ0V3vl
J/8k5PCYTGMeKRXTTV0nsKV3orp/jlqRr/siZD8li783ek0KlOXKeoRcJt4xAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSps1tqrwzuzHeE9uIO0A9feB2eAwHwYDVR0j
BBgwFoAUb191jSDSFwe+YMJfMATQ76ip/1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMC82RjVGNzU4RDIwRDIxNzA3QkU2MEMyNUYzMDA0RDBFRkE4QTlGRjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNUY3NThEMjBEMjE3MDdC
RTYwQzI1RjMwMDREMEVGQThBOUZGNTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAv
MzIzODMwMzQzYTM4MzUzNzM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhXhAMA0GCSqGSIb3DQEBCwUA
A4IBAQCgyQFfHg0H26o7iWQZkBLoq6AvhqowJBgoCSh5T3kIFZC5MRaDw7aDB7I6
i4bzVc4r7G6zFuh00CAsmOlq+mFkYnjbPGFDgI+wloyXIMzd3La5h6GQCeK3kDyP
3R12IB80DZ005MLWF13dGX1nIX9EbEAVMM6w0eIRg3n+o9Ri8GLvLDgNWkVoN/Sj
nEXi+LYHzpYzhjpUgO2V7WI39E0kvP9Jo/K9dCq9MsL3rUDvrD4WZxil98y5yfmM
IW30lQUG8GHxXx3/tVAs4fJHpRJtkBi9cH2Xr5e3LLyZBwrJOfkgrju74llEKv1M
BXqneEdPPGxPMNPZ65N6lM0tRIQp
-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:40 2024 by rpki-client on console-fra.rpki-client.org