Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d3634203d3e20323632323933.roa
File:                     323830343a6138303a3a2f33322d3634203d3e20323632323933.roa (raw, json)
Hash identifier:          uBwI9LbOkq+Z2VrTyP+T1iNCo+i2gSKIP8GEmMKwOXM=
Subject key identifier:   F3:E1:C7:9F:11:04:05:61:B1:BE:93:B5:91:21:36:71:98:E9:F7:8A
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       67BF53EBBAD6D54CE3BD23D1A424E5190C2BEAD7
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d3634203d3e20323632323933.roa
Signing time:             Fri 05 Jul 2024 15:11:21 +0000
ROA not before:           Fri 05 Jul 2024 15:06:21 +0000
ROA not after:            Fri 04 Jul 2025 15:11:21 +0000
asID:                     262293
IP address blocks:        2804:a80::/32 maxlen: 64

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 08:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bf:53:eb:ba:d6:d5:4c:e3:bd:23:d1:a4:24:e5:19:0c:2b:ea:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Jul  5 15:06:21 2024 GMT
            Not After : Jul  4 15:11:21 2025 GMT
        Subject: CN=F3E1C79F11040561B1BE93B59121367198E9F78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:19:1f:e1:43:ff:54:87:fe:75:7b:9a:62:
                    ce:14:fc:b0:a5:b7:b1:e7:fb:d8:57:64:2b:b6:30:
                    c3:a8:30:fc:ed:9c:94:1b:89:f7:61:ba:be:7f:7c:
                    8c:d1:8b:10:2d:30:d9:3a:47:58:d4:5c:c8:15:cb:
                    ad:b9:c9:b2:30:9b:6f:c9:91:71:51:a3:50:b1:81:
                    c9:7b:a3:46:9d:0b:0e:d4:8d:5e:5f:3d:c7:cb:ec:
                    da:0b:a5:33:b3:9c:a6:49:d1:a5:e5:89:11:63:12:
                    f7:06:55:39:60:22:c8:d8:8a:1d:ce:55:50:5d:30:
                    2b:d9:dd:a8:81:e2:d4:25:e1:d0:dd:36:8c:80:e9:
                    af:7a:eb:b6:41:1d:72:6a:84:e7:c6:59:dd:8d:03:
                    9e:69:c0:0d:ee:44:c4:29:4b:7e:4e:5a:5f:7d:ce:
                    04:29:ae:28:13:85:58:0c:89:68:7a:40:a6:cc:64:
                    b5:26:91:75:54:32:a1:69:37:50:5b:a4:c3:a0:cf:
                    a9:39:c3:5e:92:31:0f:06:3d:48:b9:76:10:7f:36:
                    e8:82:c5:8f:b6:2f:43:64:9c:60:90:89:e4:21:ab:
                    5b:19:26:b4:31:8d:39:6b:56:62:e4:87:68:b7:cf:
                    c2:86:0e:0f:24:05:4e:da:f9:6a:d4:6e:19:17:04:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:C7:9F:11:04:05:61:B1:BE:93:B5:91:21:36:71:98:E9:F7:8A
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d3634203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:56:63:9e:38:96:ff:40:6f:2e:e0:9d:b3:88:fc:7d:96:
         c7:31:1a:6e:b7:b0:f1:1b:73:cb:13:be:10:98:23:ba:a2:2c:
         18:76:3a:32:aa:00:8e:49:de:a8:7b:8f:9c:ee:57:bf:76:37:
         4b:f2:1f:26:38:99:60:a2:04:a1:48:91:fa:22:fa:6f:a4:47:
         cc:e4:0b:69:a9:62:df:e7:6f:7b:57:a8:af:b8:45:1f:31:44:
         3e:c9:f0:0e:51:fc:d9:6c:6c:26:07:16:eb:91:83:d0:8b:c7:
         10:c0:90:a0:cc:de:6f:2d:f1:b5:95:be:d4:db:7f:6d:42:44:
         a7:23:be:c8:00:c0:ec:92:a1:f2:55:05:11:62:f5:29:bb:60:
         06:0a:7e:50:14:a3:18:2a:8f:fa:42:30:1c:fe:c5:ed:82:20:
         81:a0:b1:43:ec:8b:bf:0a:35:56:73:97:bb:1c:da:27:51:ba:
         5e:9d:76:de:86:6e:fe:22:4f:7d:a9:fd:1a:75:b5:34:a3:2c:
         d1:54:37:3c:30:cf:41:38:19:e5:c8:f9:21:5d:81:4e:7c:d7:
         1d:a7:ac:6f:73:ed:53:20:cf:49:d9:1d:51:6d:cf:03:a2:4f:
         6b:3d:c3:84:97:ea:8c:8c:96:4e:a2:df:72:9f:4d:fe:04:74:
         50:d2:4d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 10:47:32 2024 by rpki-client on console-fra.rpki-client.org