Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3332203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33322d3332203d3e20323730363834.roa (raw, json)
Hash identifier:          PC0y+01TbS+35i4GJLqSd2xmvKVa1zFFAAA/rL8v+X8=
Subject key identifier:   B8:20:EE:C8:1F:E3:10:E6:65:B4:03:D9:AC:AD:EA:54:6B:A6:5A:13
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       1275DF0693CBFBEF9793DF885CB970ACE15E9BAD
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3332203d3e20323730363834.roa
Signing time:             Sat 03 Feb 2024 21:18:14 +0000
ROA not before:           Sat 03 Feb 2024 21:13:14 +0000
ROA not after:            Sat 01 Feb 2025 21:18:14 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 03 Feb 2024 23:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:75:df:06:93:cb:fb:ef:97:93:df:88:5c:b9:70:ac:e1:5e:9b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 21:13:14 2024 GMT
            Not After : Feb  1 21:18:14 2025 GMT
        Subject: CN=B820EEC81FE310E665B403D9ACADEA546BA65A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:80:fd:a2:14:5b:d5:2a:b5:fb:6b:f3:d6:
                    83:f1:6c:63:55:3e:52:4f:cc:2d:76:95:72:cd:9f:
                    a6:25:4e:0f:38:0f:c0:80:25:84:83:58:30:4b:f7:
                    01:51:b6:72:7e:48:36:10:a9:0f:6f:6e:95:84:c2:
                    49:c5:55:d6:12:2a:96:49:30:44:10:3f:68:73:e6:
                    d9:27:84:0c:29:74:5d:d0:f3:a0:25:9b:2c:4b:90:
                    1d:9f:59:df:37:38:75:27:54:80:3c:5e:98:31:6e:
                    39:f7:c2:cd:c0:0b:c1:8a:2d:90:05:d8:26:00:bd:
                    50:1d:b6:c4:80:0a:fb:b7:64:5e:3e:41:66:84:76:
                    22:23:ef:f8:5b:3a:08:cd:53:66:8f:32:a1:4a:5d:
                    90:54:5f:84:40:fb:97:9e:a3:9e:83:3d:c9:56:b9:
                    f1:86:ac:28:e0:8d:84:7b:97:4b:56:a0:51:c2:5c:
                    91:6b:b4:99:78:15:c9:a0:d6:80:68:a7:7f:f5:03:
                    16:2d:a9:ae:4f:47:19:de:7c:76:b3:d2:fa:50:ae:
                    8b:ab:73:40:79:9d:f1:a3:74:e3:8a:4b:ef:89:e5:
                    d0:e1:1a:46:16:b0:cb:9c:75:db:d6:e3:79:91:0a:
                    9f:ca:c3:86:fe:e1:35:66:08:cc:2b:ff:10:89:20:
                    55:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:20:EE:C8:1F:E3:10:E6:65:B4:03:D9:AC:AD:EA:54:6B:A6:5A:13
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3332203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:ce:ac:98:91:99:91:fc:96:14:4e:e0:f4:c8:aa:10:7d:
         bc:21:4c:5e:0d:5b:7f:dc:09:c4:b7:80:74:69:c1:a8:28:a5:
         cc:64:ae:58:a3:8c:dd:b2:c0:ef:b5:e4:e3:2e:8b:19:5d:e2:
         5b:16:d0:e4:d0:5f:63:c9:93:ce:f1:8e:ac:e1:48:04:ad:8d:
         c1:84:67:8a:90:9f:10:32:04:ef:b7:62:e2:81:12:b5:47:a6:
         2f:f3:6d:31:ed:bf:88:00:0f:a3:25:90:85:8a:95:25:4d:0c:
         45:b5:02:fe:90:c6:89:ca:b4:bc:8c:4e:75:90:20:28:19:02:
         eb:12:db:e9:6b:5a:5c:ef:bd:d8:b5:00:ed:ae:48:67:70:d7:
         9c:3c:3e:ee:06:03:d5:8a:21:b3:90:dc:14:0c:12:58:66:8f:
         27:e3:85:38:2e:0f:22:6b:ba:02:8e:cc:ee:17:18:dd:4c:48:
         37:3b:f9:db:6f:b1:da:fb:04:2c:f8:82:77:11:e8:2d:5e:82:
         70:61:82:85:c5:a3:74:72:2d:ea:f5:0e:c9:c2:c0:62:1a:38:
         01:59:f4:e8:72:aa:13:fb:43:95:c9:d1:8b:06:94:2e:24:1a:
         c9:29:4a:06:ac:32:ec:42:3a:1c:e9:cc:9b:1b:08:4d:88:af:
         9f:7b:06:35
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEnXfBpPL+++Xk9+IXLlwrOFem60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJBQzdCRUZCRkQ0RTU3MjY3ODczMjkxQUE5QTc0RTc5
RTgyQjMxQjAeFw0yNDAyMDMyMTEzMTRaFw0yNTAyMDEyMTE4MTRaMDMxMTAvBgNV
BAMTKEI4MjBFRUM4MUZFMzEwRTY2NUI0MDNEOUFDQURFQTU0NkJBNjVBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeYD9ohRb1Sq1+2vz1oPxbGNV
PlJPzC12lXLNn6YlTg84D8CAJYSDWDBL9wFRtnJ+SDYQqQ9vbpWEwknFVdYSKpZJ
MEQQP2hz5tknhAwpdF3Q86AlmyxLkB2fWd83OHUnVIA8Xpgxbjn3ws3AC8GKLZAF
2CYAvVAdtsSACvu3ZF4+QWaEdiIj7/hbOgjNU2aPMqFKXZBUX4RA+5eeo56DPclW
ufGGrCjgjYR7l0tWoFHCXJFrtJl4Fcmg1oBop3/1AxYtqa5PRxnefHaz0vpQrour
c0B5nfGjdOOKS++J5dDhGkYWsMucddvW43mRCp/Kw4b+4TVmCMwr/xCJIFUfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuCDuyB/jEOZltAPZrK3qVGumWhMwHwYDVR0j
BBgwFoAUUqx777/U5XJnhzKRqpp0556CsxswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1b2NMUXBZQnpp
NnYvMC81MkFDN0JFRkJGRDRFNTcyNjc4NzMyOTFBQTlBNzRFNzlFODJCMzFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyQUM3QkVGQkZENEU1NzI2
Nzg3MzI5MUFBOUE3NEU3OUU4MkIzMUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZYXE0dVRRS1F6TGR1eXh0UnVxbnBmVDJRd0J3TjJjNW9jTFFwWUJ6aTZ2LzAv
MzIzODMwMzQzYTM2NjY2MzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzYzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARvyDANBgkqhkiG9w0BAQsFAAOCAQEAZdHOrJiR
mZH8lhRO4PTIqhB9vCFMXg1bf9wJxLeAdGnBqCilzGSuWKOM3bLA77Xk4y6LGV3i
WxbQ5NBfY8mTzvGOrOFIBK2NwYRnipCfEDIE77di4oEStUemL/NtMe2/iAAPoyWQ
hYqVJU0MRbUC/pDGicq0vIxOdZAgKBkC6xLb6WtaXO+92LUA7a5IZ3DXnDw+7gYD
1Yohs5DcFAwSWGaPJ+OFOC4PImu6Ao7M7hcY3UxINzv522+x2vsELPiCdxHoLV6C
cGGChcWjdHIt6vUOycLAYho4AVn06HKqE/tDlcnRiwaULiQaySlKBqwy7EI6HOnM
mxsITYivn3sGNQ==
-----END CERTIFICATE-----
Generated at Sun Feb 4 02:30:40 2024 by rpki-client on console-ams.rpki-client.org