Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323061383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323061383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          4hWBE5USKvoF+fA2u7DMb28MhsbOGaa6fuaSgY1zGx8=
Subject key identifier:   39:E9:FA:EA:B7:EE:AD:C9:4D:18:EF:0B:69:3A:14:09:9C:24:CD:81
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       37F85FAA05B41BC1E1565BFDB598D1B3C84382F1
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323061383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:23 +0000
ROA not before:           Thu 16 May 2024 11:33:23 +0000
ROA not after:            Thu 15 May 2025 11:38:23 +0000
asID:                     263338
IP address blocks:        2804:1494:20a8::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f8:5f:aa:05:b4:1b:c1:e1:56:5b:fd:b5:98:d1:b3:c8:43:82:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:23 2024 GMT
            Not After : May 15 11:38:23 2025 GMT
        Subject: CN=39E9FAEAB7EEADC94D18EF0B693A14099C24CD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:c3:92:14:7b:3d:2e:23:e5:d5:fe:78:33:
                    7d:84:65:82:54:a4:08:ee:e9:3e:93:b8:82:87:cb:
                    15:44:8e:18:f0:db:88:52:46:f1:4f:78:3b:e4:66:
                    23:c5:c7:74:61:88:c3:92:03:b6:b7:d3:98:67:98:
                    15:e5:23:65:9f:a0:f1:b3:23:ab:d6:93:c2:d3:a6:
                    ec:50:39:71:53:db:83:20:46:d0:14:21:11:cd:b4:
                    d3:2e:29:83:ee:5b:ae:dd:0a:7e:25:7e:92:14:1f:
                    98:70:9c:15:84:8d:48:37:7b:ec:e8:c7:61:af:e4:
                    a0:bf:60:06:dd:68:2d:1a:fd:b9:2e:d1:74:15:ce:
                    f8:d4:04:a8:d0:fe:0a:68:ef:41:1a:50:43:6d:9a:
                    a3:f0:db:bd:c9:48:c8:5d:90:93:e3:e9:e2:6f:5a:
                    6e:d6:b9:eb:5a:3d:0b:c0:8e:ea:67:5f:7b:42:15:
                    33:d8:4d:13:15:ed:50:9c:90:06:82:f9:5c:0c:8f:
                    69:17:c3:0e:c2:77:17:a9:75:25:a2:a6:3c:8d:14:
                    a7:e1:d3:ac:f8:53:26:11:77:f2:da:99:35:08:f8:
                    3b:94:d0:56:bc:c2:dd:f3:a9:a3:86:36:eb:90:b1:
                    31:36:ea:30:e5:cb:4c:2b:a5:04:22:91:d9:ac:7a:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E9:FA:EA:B7:EE:AD:C9:4D:18:EF:0B:69:3A:14:09:9C:24:CD:81
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323061383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:20a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:0d:a5:2b:96:bb:47:f6:02:3f:30:71:dd:6f:d3:39:75:
         0d:d3:bd:3a:d3:28:94:b4:95:d2:f3:d4:62:f5:e7:1d:84:73:
         db:96:e9:75:fc:89:ed:b8:d6:cb:58:cc:e2:d1:9d:4a:11:4a:
         f3:76:33:bc:8c:58:bd:df:b2:d6:16:eb:1b:df:e4:55:63:3c:
         26:37:f3:17:02:b8:37:06:ee:b7:78:f9:d7:83:2e:34:4f:21:
         f6:33:e1:ed:9e:28:02:14:87:f1:7b:a7:09:6b:3b:20:e4:63:
         1a:61:12:79:4b:02:21:3d:20:fe:b7:4c:95:c3:5a:2d:d3:99:
         74:3f:db:bd:cf:c0:a9:ec:b1:32:a7:13:0d:3a:5d:8d:d2:16:
         b7:40:75:c4:88:11:bf:c4:fc:f4:20:19:22:1d:53:16:48:d7:
         d1:f7:15:b6:ef:0c:17:26:2e:06:e5:45:ff:5a:04:2c:a8:ad:
         67:41:1f:7e:2e:b0:9e:7f:36:8c:60:76:43:2d:d4:4d:dd:3e:
         55:ff:ae:f2:9d:7f:28:64:75:74:d9:90:36:31:cc:ed:a2:9b:
         4c:34:3d:8f:90:1c:6c:c2:0d:99:06:d5:1a:5c:7e:df:92:f4:
         fd:ff:d7:2b:d6:87:ba:45:e8:59:72:ff:99:2c:56:b4:7d:72:
         25:1f:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----