Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/323830343a316537633a383030303a3a2f33332d3333203d3e20323634343332.roa
File:                     323830343a316537633a383030303a3a2f33332d3333203d3e20323634343332.roa (raw, json)
Hash identifier:          q76lHdW4WwF0nBzrvU+CJUULlcq4mK1ewUG3d2Iv0tQ=
Subject key identifier:   34:D0:00:A1:30:37:24:30:16:07:D0:1B:70:EE:70:7F:1E:3E:7C:15
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       41FBFAAE33630623CE96C0786FE706DE32E72B21
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/323830343a316537633a383030303a3a2f33332d3333203d3e20323634343332.roa
Signing time:             Thu 25 Apr 2024 13:22:33 +0000
ROA not before:           Thu 25 Apr 2024 13:17:33 +0000
ROA not after:            Thu 24 Apr 2025 13:22:33 +0000
asID:                     264432
IP address blocks:        2804:1e7c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fb:fa:ae:33:63:06:23:ce:96:c0:78:6f:e7:06:de:32:e7:2b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: Apr 25 13:17:33 2024 GMT
            Not After : Apr 24 13:22:33 2025 GMT
        Subject: CN=34D000A1303724301607D01B70EE707F1E3E7C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:71:40:1d:81:b4:e9:e5:2d:09:58:6b:68:
                    c1:5e:67:08:0d:c0:af:98:58:b9:1a:2e:7e:fd:14:
                    ba:82:aa:62:39:8d:63:9d:c7:9b:21:59:a4:6b:e7:
                    d2:32:e1:53:27:4c:7d:98:fb:ad:e3:04:3d:03:87:
                    ca:5d:cf:37:7b:d5:6d:53:e6:6e:5c:41:33:4b:78:
                    8f:16:70:aa:5f:48:86:ca:82:e4:db:ca:5f:87:b3:
                    ee:95:cc:be:2e:27:04:cd:16:94:48:bc:04:ed:41:
                    a2:70:44:35:e4:08:66:56:7c:b6:17:e8:dc:f1:e6:
                    cd:3d:69:15:5d:e7:0d:cd:ae:4b:aa:12:97:40:22:
                    41:2e:c5:c6:81:4b:e1:34:c2:f7:e6:9c:61:e8:1d:
                    a6:c1:a5:a0:62:53:e7:5b:ab:03:14:83:dd:c1:78:
                    e1:4f:c9:2f:e5:19:76:0a:c9:e5:02:7c:73:7a:94:
                    9e:7a:d5:47:34:a9:5a:d7:d0:5b:a9:0d:d0:7a:e3:
                    b7:43:b1:f0:d2:b8:47:0e:af:af:db:c0:8a:1a:bb:
                    29:b1:81:db:8a:6b:01:f7:39:7f:33:aa:7e:dc:59:
                    28:b3:fc:41:17:ec:03:b3:fe:fb:a5:65:e4:78:76:
                    e2:3e:2e:99:b6:0b:6a:78:7d:cd:f5:ba:3e:13:f6:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D0:00:A1:30:37:24:30:16:07:D0:1B:70:EE:70:7F:1E:3E:7C:15
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/323830343a316537633a383030303a3a2f33332d3333203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:04:be:9f:89:c4:8c:59:45:e8:ff:52:2b:fa:67:63:a5:63:
         a7:34:04:55:b6:60:65:7b:95:07:26:70:29:ef:71:a6:71:a5:
         dd:27:a2:ea:c6:0f:00:f7:80:1b:33:81:9e:34:5a:8b:f8:70:
         50:f6:cd:c3:fa:75:7e:90:f6:38:61:ee:6e:7f:8c:48:48:43:
         c3:d2:d7:a5:cb:87:92:a7:1d:ec:e1:98:80:0a:b9:6e:a8:04:
         b7:21:1d:cc:ab:46:a9:02:2b:21:80:d2:e5:14:2b:23:10:cf:
         c6:eb:9b:3f:8a:3a:59:ac:6d:d1:f1:46:5d:da:cf:43:8f:2b:
         ce:75:d0:cc:cd:05:bd:3a:15:1b:21:5f:c6:c2:72:dd:86:8e:
         96:36:bf:d1:9b:7d:61:81:11:b4:1d:f9:5f:57:09:11:9b:21:
         88:f9:98:48:4b:cd:ba:9e:46:0a:8c:2e:21:f8:1d:83:53:6b:
         8d:55:67:8d:8b:d2:80:ac:e5:4b:38:18:0f:08:7b:95:a2:d2:
         a9:b7:ad:6e:67:2c:ad:8c:68:5b:24:32:60:a6:e4:8b:36:20:
         20:0f:94:58:a6:00:ca:cf:ea:41:60:ca:19:17:6e:13:03:de:
         8c:33:6b:22:a6:da:eb:23:0c:5a:69:a7:5b:e9:dc:e3:e7:8e:
         d1:ce:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org