Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33362d3336203d3e20323639313238.roa
File:                     323830343a356664633a3a2f33362d3336203d3e20323639313238.roa (raw, json)
Hash identifier:          XqXs8Ee1MD3Yztmx6lisIzDXH9ziP6Rfnr2dn61E1VQ=
Subject key identifier:   B6:A0:1A:F4:E8:0E:55:71:00:A5:BE:0F:FA:BF:FE:FD:F2:81:96:8A
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       461B07634DAED976168B27550FCB58289CE40D8A
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33362d3336203d3e20323639313238.roa
Signing time:             Thu 04 Apr 2024 08:00:48 +0000
ROA not before:           Thu 04 Apr 2024 07:55:48 +0000
ROA not after:            Thu 03 Apr 2025 08:00:48 +0000
asID:                     269128
IP address blocks:        2804:5fdc::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 15:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1b:07:63:4d:ae:d9:76:16:8b:27:55:0f:cb:58:28:9c:e4:0d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Apr  4 07:55:48 2024 GMT
            Not After : Apr  3 08:00:48 2025 GMT
        Subject: CN=B6A01AF4E80E557100A5BE0FFABFFEFDF281968A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:cd:7a:80:40:08:bf:9b:81:b9:7d:98:54:
                    06:aa:4d:e4:93:e1:94:4d:fb:3f:c4:02:ae:30:7e:
                    c3:7f:a7:a5:55:90:32:da:a3:8c:33:8f:12:a1:85:
                    0e:c6:85:76:85:88:db:35:61:f9:3a:56:f7:cd:cd:
                    3a:da:86:f4:b0:9b:0c:77:b8:b2:94:0c:f5:b7:05:
                    76:ae:90:84:f8:84:72:5b:48:09:33:c5:cc:25:5a:
                    ca:39:f9:cb:36:fa:d1:f6:a7:f1:da:f1:e1:03:9d:
                    e8:21:15:c3:87:99:a2:4e:a2:d8:41:1b:7d:6f:58:
                    a9:de:c3:2f:2b:ac:6a:fd:cd:68:75:22:1a:1a:c0:
                    4a:00:f4:64:72:24:db:dd:51:53:7c:9e:e0:a0:df:
                    80:c1:ba:ce:a1:fd:81:20:fc:63:1c:30:22:06:e3:
                    2e:00:d5:77:e1:7a:01:34:08:61:ff:e7:a1:73:cc:
                    57:b8:a0:1f:67:fd:51:66:73:76:69:03:e9:8f:50:
                    e7:a8:41:94:d8:f5:82:76:e4:71:38:bd:87:6b:ef:
                    b9:1e:9c:52:81:fc:57:31:48:e0:3e:78:46:6a:b0:
                    75:e8:db:98:4f:54:34:ac:58:f7:4d:37:22:16:0f:
                    9e:c1:d5:df:b9:92:ef:66:ff:74:76:b8:13:fb:26:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A0:1A:F4:E8:0E:55:71:00:A5:BE:0F:FA:BF:FE:FD:F2:81:96:8A
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33362d3336203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fdc::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:35:21:33:9a:9e:bd:f3:0a:a2:bf:98:fa:66:8c:3b:9e:1a:
         70:4b:42:bc:3e:4d:79:2f:e8:78:77:e8:23:54:db:6b:a8:e0:
         31:bc:f9:46:1f:b1:25:fd:1e:f7:c1:09:9f:bc:9d:81:74:0e:
         e6:e0:36:fd:ca:bb:9c:39:e9:66:3e:be:64:13:db:6d:66:6e:
         0a:60:ba:72:db:2b:1c:9b:4f:50:1a:a2:0f:b2:cf:db:4e:49:
         c4:7e:1d:bc:60:f0:43:bf:53:37:e3:a1:7b:02:ac:39:df:ab:
         8c:3a:da:bb:8d:b1:55:19:01:3f:8c:dc:ca:a4:d7:32:b6:74:
         f3:e9:d1:3e:3f:bb:b6:d0:f1:a9:72:78:0a:41:93:3d:ce:41:
         7b:41:02:ee:38:7f:a0:86:b5:25:ff:65:da:23:e3:68:9e:c2:
         5d:86:dd:ef:3b:ea:31:0b:f2:9c:e8:63:ee:e7:67:4c:2e:3c:
         ba:1c:62:f8:b2:ac:3f:6e:0c:7c:3f:6f:17:93:7e:96:14:9f:
         54:87:75:42:de:8b:97:f2:65:f3:53:3d:ef:8f:de:92:00:91:
         20:96:51:c5:31:5f:de:a3:f9:a8:fd:82:cb:0d:dc:fd:67:b8:
         0f:79:eb:15:12:1d:41:ce:cf:f9:9c:22:9f:fd:b1:0c:9e:5f:
         2e:ec:bf:9e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURhsHY02u2XYWiydVD8tYKJzkDYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDRTg5M0U5ODc0MzcyOTMyRDYwNTRGN0FGREQ5RkJC
RDAyMTk3NDAeFw0yNDA0MDQwNzU1NDhaFw0yNTA0MDMwODAwNDhaMDMxMTAvBgNV
BAMTKEI2QTAxQUY0RTgwRTU1NzEwMEE1QkUwRkZBQkZGRUZERjI4MTk2OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHc16gEAIv5uBuX2YVAaqTeST
4ZRN+z/EAq4wfsN/p6VVkDLao4wzjxKhhQ7GhXaFiNs1Yfk6VvfNzTrahvSwmwx3
uLKUDPW3BXaukIT4hHJbSAkzxcwlWso5+cs2+tH2p/Ha8eEDneghFcOHmaJOothB
G31vWKnewy8rrGr9zWh1IhoawEoA9GRyJNvdUVN8nuCg34DBus6h/YEg/GMcMCIG
4y4A1XfhegE0CGH/56FzzFe4oB9n/VFmc3ZpA+mPUOeoQZTY9YJ25HE4vYdr77ke
nFKB/FcxSOA+eEZqsHXo25hPVDSsWPdNNyIWD57B1d+5ku9m/3R2uBP7Jqx5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtqAa9OgOVXEApb4P+r/+/fKBloowHwYDVR0j
BBgwFoAU9M6JPph0Nyky1gVPev3Z+70CGXQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWR2amg3YVhGM1ZMbjY4NHByWHhaRzFjcTRnUXc2Skpwc2FndXdLMUdq
a3EvMS9GNENFODkzRTk4NzQzNzI5MzJENjA1NEY3QUZERDlGQkJEMDIxOTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0Q0U4OTNFOTg3NDM3Mjkz
MkQ2MDU0RjdBRkREOUZCQkQwMjE5NzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkdmpoN2FYRjNWTG42ODRwclh4WkcxY3E0Z1F3NkpKcHNhZ3V3SzFHamtxLzEv
MzIzODMwMzQzYTM1NjY2NDYzM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM5
MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARf3AAwDQYJKoZIhvcNAQELBQADggEBAKE1ITOa
nr3zCqK/mPpmjDueGnBLQrw+TXkv6Hh36CNU22uo4DG8+UYfsSX9HvfBCZ+8nYF0
DubgNv3Ku5w56WY+vmQT221mbgpgunLbKxybT1Aaog+yz9tOScR+Hbxg8EO/Uzfj
oXsCrDnfq4w62ruNsVUZAT+M3Mqk1zK2dPPp0T4/u7bQ8alyeApBkz3OQXtBAu44
f6CGtSX/Zdoj42iewl2G3e876jEL8pzoY+7nZ0wuPLocYviyrD9uDHw/bxeTfpYU
n1SHdULei5fyZfNTPe+P3pIAkSCWUcUxX96j+aj9gssN3P1nuA956xUSHUHOz/mc
Ip/9sQyeXy7sv54=
-----END CERTIFICATE-----
Generated at Sat Sep 21 18:56:12 2024 by rpki-client on console-ams.rpki-client.org