Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623030303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a623030303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          NYPtbVHNo/YOOsTDFP2FrY2T/9/3c1GyJ2C85MNvrq8=
Subject key identifier:   C1:FF:0E:95:A4:94:51:66:F7:11:F0:2E:EE:D4:62:98:64:90:CE:93
Certificate issuer:       /CN=EA7A73A4D9B6A4650A7D2300D2FF1B943039A802
Certificate serial:       2E109D7BCA2092944AB7B1D433C0CA2420A6FFFF
Authority key identifier: EA:7A:73:A4:D9:B6:A4:65:0A:7D:23:00:D2:FF:1B:94:30:39:A8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7A73A4D9B6A4650A7D2300D2FF1B943039A802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623030303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Sat 28 Sep 2024 03:12:44 +0000
ROA not before:           Sat 28 Sep 2024 03:07:44 +0000
ROA not after:            Sat 27 Sep 2025 03:12:44 +0000
asID:                     264344
IP address blocks:        2804:2674:b000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 19:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:10:9d:7b:ca:20:92:94:4a:b7:b1:d4:33:c0:ca:24:20:a6:ff:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7A73A4D9B6A4650A7D2300D2FF1B943039A802
        Validity
            Not Before: Sep 28 03:07:44 2024 GMT
            Not After : Sep 27 03:12:44 2025 GMT
        Subject: CN=C1FF0E95A4945166F711F02EEED462986490CE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:99:72:01:f0:dd:0d:a0:d9:af:09:e0:2e:
                    09:c9:ed:67:29:f9:30:ef:5b:cc:87:53:95:61:bc:
                    30:b2:4d:be:32:e5:99:22:40:bf:46:55:af:47:20:
                    e2:11:b0:f4:c8:dc:c5:fc:8d:39:af:e8:50:b6:fd:
                    b0:ee:a1:a4:8b:f1:77:7d:42:48:fc:17:ab:e1:61:
                    37:7f:0d:e0:ba:79:8d:a6:b0:8e:e4:c5:da:01:3a:
                    2c:a3:13:54:89:35:71:78:0b:d6:11:b9:2b:92:3f:
                    fd:b0:2a:72:cf:92:bd:61:96:7c:8b:c6:fe:7e:5e:
                    f1:c6:27:64:d1:89:19:91:c2:8c:78:fc:be:ac:31:
                    49:c7:60:0b:cf:4e:3d:2d:2a:70:64:02:ba:59:3d:
                    c7:5c:a4:c7:c5:04:86:e2:81:e7:47:14:54:89:5c:
                    54:dc:e2:64:91:62:c1:64:38:f8:b1:a5:e6:b1:65:
                    0e:ee:81:20:44:0d:c7:c6:c1:5e:4a:79:e4:ca:be:
                    c7:50:ac:2a:23:c7:de:74:5e:6b:d0:ec:89:7f:dc:
                    33:cc:3b:0a:d7:bc:df:97:58:66:09:9b:1f:36:2d:
                    4d:75:e9:76:00:24:da:a6:b7:97:23:5a:19:3f:f8:
                    21:ca:45:23:46:7e:4f:25:58:33:1b:52:73:eb:f0:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:0E:95:A4:94:51:66:F7:11:F0:2E:EE:D4:62:98:64:90:CE:93
            X509v3 Authority Key Identifier:
                keyid:EA:7A:73:A4:D9:B6:A4:65:0A:7D:23:00:D2:FF:1B:94:30:39:A8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/EA7A73A4D9B6A4650A7D2300D2FF1B943039A802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7A73A4D9B6A4650A7D2300D2FF1B943039A802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623030303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:6e:4b:6d:9f:d3:4b:58:03:ce:36:49:0f:8b:19:85:ce:
         aa:a5:40:6a:32:b9:ac:3a:28:68:dc:fd:cc:c1:37:19:57:e4:
         0d:92:38:e4:c0:e0:aa:46:f6:56:aa:ab:ae:04:2c:c8:35:cd:
         89:56:68:8d:1e:2b:ed:2c:de:a2:9b:ff:ea:a9:68:16:d8:be:
         b0:46:7b:61:dd:41:98:75:a6:fa:c2:7c:c1:78:60:48:4c:b8:
         52:a3:c5:9f:0c:3d:0d:17:ac:5d:98:ad:65:0a:2b:5f:8a:39:
         15:cc:42:1e:65:81:ef:91:99:e0:c1:7b:14:02:4a:9a:d4:23:
         de:ee:70:5a:07:89:f6:c7:83:50:e1:3c:4d:43:41:9d:f2:d6:
         55:05:25:6d:7c:c4:de:8a:bb:05:f7:73:20:38:f8:39:03:31:
         1c:ee:12:34:86:f1:1a:22:2d:62:31:88:6c:6b:65:00:91:ea:
         b2:df:96:80:ba:09:d5:6f:27:2f:63:a7:bd:4d:41:ec:a3:02:
         19:79:a4:52:3a:60:fe:64:26:ce:d2:d9:8f:0a:7a:fd:67:5e:
         ae:f4:f8:9c:62:87:ea:96:07:52:ea:41:32:e4:08:a6:f8:36:
         a0:07:d1:cd:0e:3c:4e:3f:db:0d:9f:cd:a9:e8:8c:93:a0:7d:
         d6:37:8d:77
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULhCde8ogkpRKt7HUM8DKJCCm//8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE3QTczQTREOUI2QTQ2NTBBN0QyMzAwRDJGRjFCOTQz
MDM5QTgwMjAeFw0yNDA5MjgwMzA3NDRaFw0yNTA5MjcwMzEyNDRaMDMxMTAvBgNV
BAMTKEMxRkYwRTk1QTQ5NDUxNjZGNzExRjAyRUVFRDQ2Mjk4NjQ5MENFOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcUplyAfDdDaDZrwngLgnJ7Wcp
+TDvW8yHU5VhvDCyTb4y5ZkiQL9GVa9HIOIRsPTI3MX8jTmv6FC2/bDuoaSL8Xd9
Qkj8F6vhYTd/DeC6eY2msI7kxdoBOiyjE1SJNXF4C9YRuSuSP/2wKnLPkr1hlnyL
xv5+XvHGJ2TRiRmRwox4/L6sMUnHYAvPTj0tKnBkArpZPcdcpMfFBIbigedHFFSJ
XFTc4mSRYsFkOPixpeaxZQ7ugSBEDcfGwV5KeeTKvsdQrCojx950XmvQ7Il/3DPM
OwrXvN+XWGYJmx82LU116XYAJNqmt5cjWhk/+CHKRSNGfk8lWDMbUnPr8Cf3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwf8OlaSUUWb3EfAu7tRimGSQzpMwHwYDVR0j
BBgwFoAU6npzpNm2pGUKfSMA0v8blDA5qAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC9FQTdBNzNBNEQ5QjZBNDY1MEE3RDIzMDBEMkZGMUI5NDMwMzlBODAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBN0E3M0E0RDlCNkE0NjUw
QTdEMjMwMEQyRkYxQjk0MzAzOUE4MDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2E2MjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJnSwMA0GCSqGSIb3DQEBCwUA
A4IBAQBb8m5LbZ/TS1gDzjZJD4sZhc6qpUBqMrmsOiho3P3MwTcZV+QNkjjkwOCq
RvZWqquuBCzINc2JVmiNHivtLN6im//qqWgW2L6wRnth3UGYdab6wnzBeGBITLhS
o8WfDD0NF6xdmK1lCitfijkVzEIeZYHvkZngwXsUAkqa1CPe7nBaB4n2x4NQ4TxN
Q0Gd8tZVBSVtfMTeirsF93MgOPg5AzEc7hI0hvEaIi1iMYhsa2UAkeqy35aAugnV
bycvY6e9TUHsowIZeaRSOmD+ZCbO0tmPCnr9Z16u9PicYofqlgdS6kEy5Aim+Dag
B9HNDjxOP9sNn82p6IyToH3WN413
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:55 2024 by rpki-client on console-fra.rpki-client.org