Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323065383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323065383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          iS7WbF0moIN0mImUT58KMtI0v5QfImUmfI4tGMXIx18=
Subject key identifier:   27:44:AB:98:E4:DB:3B:8B:53:C4:67:9C:56:CE:72:E7:47:49:CF:4A
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       2AB6ED2DC1F5D17BFB0EED1ACBDF6090FC02D90E
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323065383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:23 +0000
ROA not before:           Thu 16 May 2024 11:33:23 +0000
ROA not after:            Thu 15 May 2025 11:38:23 +0000
asID:                     263338
IP address blocks:        2804:1494:20e8::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b6:ed:2d:c1:f5:d1:7b:fb:0e:ed:1a:cb:df:60:90:fc:02:d9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:23 2024 GMT
            Not After : May 15 11:38:23 2025 GMT
        Subject: CN=2744AB98E4DB3B8B53C4679C56CE72E74749CF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:79:5e:ec:25:d1:f7:80:b5:6d:09:04:c8:
                    3d:75:a4:08:82:78:d6:1f:20:8c:f3:1e:11:eb:e7:
                    3f:b4:87:9b:13:94:af:7f:12:a2:15:58:2f:d9:15:
                    6d:40:a3:d0:3e:e8:8c:cc:e2:82:92:60:03:27:81:
                    32:77:39:f0:32:7e:bb:a3:4e:20:1d:f3:cf:d9:03:
                    87:40:f7:f0:58:42:10:3f:94:83:59:12:5d:13:5d:
                    17:c4:90:28:58:e9:a5:75:60:d8:d5:85:bd:9a:49:
                    d5:0d:d0:31:6e:9b:46:6f:96:dd:8e:4c:b3:d8:46:
                    ae:63:52:26:ae:53:bb:3c:3f:37:78:78:ec:c6:df:
                    94:cf:4b:22:fa:dd:e1:d7:48:bc:a6:b8:29:e5:88:
                    9e:72:b8:a3:f9:6e:7e:d7:74:7b:84:0f:87:01:c9:
                    4b:49:96:22:8c:3f:f6:be:5f:d0:68:b3:a7:74:b5:
                    06:f9:df:eb:4d:af:7a:73:4a:2b:0c:31:7f:60:0a:
                    ad:fa:8e:48:02:72:7d:15:8e:95:c3:40:29:e9:c5:
                    5d:50:d0:db:15:34:54:d0:0f:c0:95:92:18:f5:ed:
                    6f:54:c8:00:58:57:0c:d6:57:6d:fc:d9:6f:99:fd:
                    74:0a:97:2f:41:82:4d:3b:05:70:69:1d:cd:7e:68:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:AB:98:E4:DB:3B:8B:53:C4:67:9C:56:CE:72:E7:47:49:CF:4A
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323065383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:20e8::/45

    Signature Algorithm: sha256WithRSAEncryption
         75:fe:35:ed:95:14:77:fa:bd:c9:42:1a:a8:41:7f:e7:15:30:
         00:bb:8f:b6:f0:26:46:e1:7d:28:b3:4b:45:26:06:6b:4b:1a:
         ba:d4:5f:89:f7:b0:0e:3f:62:61:f8:df:ac:4a:95:91:58:e3:
         be:71:4f:66:80:4d:f0:2c:cb:f0:b6:d2:c4:ca:27:50:20:4c:
         54:96:e3:6b:38:0e:c8:c6:82:eb:c7:54:6b:08:59:af:81:49:
         e2:c8:8e:81:c5:18:64:f3:98:d2:37:fc:9c:6b:09:ee:fa:09:
         48:fa:c3:db:f9:d4:d9:46:1c:c2:79:c7:e7:70:81:1e:da:ab:
         f0:c4:8a:91:eb:62:b1:85:29:79:17:76:89:f2:67:f2:d7:b9:
         64:ce:ec:cb:8e:ae:fe:34:6d:18:c9:b0:dc:44:0a:fb:4c:4b:
         3e:ce:7b:7f:6c:d9:d5:26:82:ee:5a:16:4e:07:bd:e2:1f:d0:
         3b:eb:f5:55:9d:35:ca:08:f3:51:94:74:9d:50:ca:30:4f:dc:
         03:dc:48:9b:61:40:62:d4:5e:3d:99:0d:a0:ee:9b:ea:71:f3:
         33:20:81:8e:d6:cf:ea:a0:20:86:c7:b6:a9:25:5c:d9:48:c1:
         f1:50:a1:77:0c:0c:89:44:13:9b:c8:dd:5b:8f:80:44:d1:6a:
         d8:60:75:f4
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUKrbtLcH10Xv7Du0ay99gkPwC2Q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDA1MTYxMTMzMjNaFw0yNTA1MTUxMTM4MjNaMDMxMTAvBgNV
BAMTKDI3NDRBQjk4RTREQjNCOEI1M0M0Njc5QzU2Q0U3MkU3NDc0OUNGNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXK3le7CXR94C1bQkEyD11pAiC
eNYfIIzzHhHr5z+0h5sTlK9/EqIVWC/ZFW1Ao9A+6IzM4oKSYAMngTJ3OfAyfruj
TiAd88/ZA4dA9/BYQhA/lINZEl0TXRfEkChY6aV1YNjVhb2aSdUN0DFum0Zvlt2O
TLPYRq5jUiauU7s8Pzd4eOzG35TPSyL63eHXSLymuCnliJ5yuKP5bn7XdHuED4cB
yUtJliKMP/a+X9Bos6d0tQb53+tNr3pzSisMMX9gCq36jkgCcn0VjpXDQCnpxV1Q
0NsVNFTQD8CVkhj17W9UyABYVwzWV2382W+Z/XQKly9Bgk07BXBpHc1+aBT/AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUJ0SrmOTbO4tTxGecVs5y50dJz0owHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzIzODMwMzQzYTMxMzQzOTM0M2EzMjMwNjUzODNhM2EyZjM0MzUyZDM0MzUyMDNk
M2UyMDMyMzYzMzMzMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygEFJQg6DANBgkqhkiG9w0BAQsF
AAOCAQEAdf417ZUUd/q9yUIaqEF/5xUwALuPtvAmRuF9KLNLRSYGa0sautRfifew
Dj9iYfjfrEqVkVjjvnFPZoBN8CzL8LbSxMonUCBMVJbjazgOyMaC68dUawhZr4FJ
4siOgcUYZPOY0jf8nGsJ7voJSPrD2/nU2UYcwnnH53CBHtqr8MSKketisYUpeRd2
ifJn8te5ZM7sy46u/jRtGMmw3EQK+0xLPs57f2zZ1SaC7loWTge94h/QO+v1VZ01
ygjzUZR0nVDKME/cA9xIm2FAYtRePZkNoO6b6nHzMyCBjtbP6qAghse2qSVc2UjB
8VChdwwMiUQTm8jdW4+ARNFq2GB19A==
-----END CERTIFICATE-----