Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a383030303a3a2f33332d3333203d3e20323635343132.roa
File:                     323830343a333362343a383030303a3a2f33332d3333203d3e20323635343132.roa (raw, json)
Hash identifier:          GN266i3LDAAVYDZwLqy7mFvaNt9Bmp1HwxU7dYgBdCo=
Subject key identifier:   5C:8D:79:9F:E4:3B:B6:BD:7A:45:8E:CF:4D:FB:B2:35:1D:9E:17:C2
Certificate issuer:       /CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
Certificate serial:       56735C23DFCA6DDEC00C0D89B926A4B678F9BFCE
Authority key identifier: F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a383030303a3a2f33332d3333203d3e20323635343132.roa
Signing time:             Wed 24 Apr 2024 20:08:39 +0000
ROA not before:           Wed 24 Apr 2024 20:03:39 +0000
ROA not after:            Wed 23 Apr 2025 20:08:39 +0000
asID:                     265412
IP address blocks:        2804:33b4:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:73:5c:23:df:ca:6d:de:c0:0c:0d:89:b9:26:a4:b6:78:f9:bf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
        Validity
            Not Before: Apr 24 20:03:39 2024 GMT
            Not After : Apr 23 20:08:39 2025 GMT
        Subject: CN=5C8D799FE43BB6BD7A458ECF4DFBB2351D9E17C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:27:78:95:28:52:74:14:47:86:f8:d8:e7:
                    94:32:ce:fe:b0:65:f0:24:4e:bb:c7:49:b6:1a:a9:
                    a3:82:a3:54:0f:13:88:2c:e5:ef:7d:36:55:85:f4:
                    0f:ac:0b:85:d4:8a:a6:b6:9b:0e:e6:08:91:d2:f7:
                    a9:cd:4a:ae:28:88:f2:b5:2d:6c:e7:18:2c:f3:39:
                    70:e5:dc:40:98:a8:26:7d:c1:3d:6a:3d:45:5e:d1:
                    39:49:26:e8:5f:0a:57:a5:17:02:50:df:49:f7:4f:
                    69:eb:d8:ff:9f:bd:93:00:e4:47:92:72:31:af:32:
                    3d:1d:2e:e2:a6:d4:1a:62:6e:19:dc:50:a2:e9:8c:
                    1e:23:16:f8:b5:00:89:58:93:2c:62:c8:f5:28:54:
                    e5:14:df:1f:31:71:32:07:16:16:63:87:10:81:07:
                    b1:fc:1a:e7:d5:47:5a:c6:5c:13:c1:d8:30:db:6a:
                    24:12:23:12:69:be:1c:90:f1:4b:89:58:37:a9:0e:
                    c6:f4:a9:98:85:b4:7d:51:7d:64:d6:b5:dd:bd:33:
                    1a:55:17:c0:0a:c7:00:a0:a5:d5:ca:6a:e0:d9:1b:
                    ce:f2:3f:ac:94:3a:fa:12:73:cf:29:2c:0b:61:46:
                    90:00:06:8c:87:b7:73:86:a7:36:48:9d:cf:e1:71:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8D:79:9F:E4:3B:B6:BD:7A:45:8E:CF:4D:FB:B2:35:1D:9E:17:C2
            X509v3 Authority Key Identifier:
                keyid:F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a383030303a3a2f33332d3333203d3e20323635343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33b4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:5c:2c:90:1e:ef:62:42:22:72:09:23:46:76:1b:6e:15:98:
         8b:76:d7:83:73:05:ed:e3:4d:5d:eb:c4:07:ee:d8:bb:c2:f7:
         02:1b:28:2a:b2:d8:7f:58:78:d6:cc:19:31:bf:8e:f3:96:19:
         59:5d:01:52:28:a0:79:8e:60:d5:b6:9b:2c:ef:7b:be:28:5a:
         0d:69:13:1e:b1:17:9f:83:00:d2:c7:c6:a1:56:d7:6a:3a:de:
         c6:8a:08:ad:f6:c0:e5:e3:b0:35:ca:08:17:44:90:f1:c6:2a:
         ca:a1:1a:f7:ea:f5:9e:bb:dc:aa:7e:1f:ce:34:b4:d5:dc:d1:
         61:8b:c1:49:47:7b:a1:31:d5:f4:45:cf:bd:93:30:19:84:3a:
         ad:fc:7b:64:a7:bc:b2:06:e2:0d:29:39:4d:23:af:ab:10:31:
         6c:33:d8:2b:e6:9c:76:e1:f6:b7:e0:31:08:6d:db:cc:d0:36:
         25:18:b4:6e:24:7a:9e:85:fc:b7:9f:a6:de:ab:35:ae:7e:38:
         b6:5b:6d:94:6a:eb:33:5d:18:1f:b6:19:c5:81:bb:5c:3a:86:
         06:0b:01:00:46:0e:b3:92:00:62:24:ed:81:94:ea:1a:5a:2c:
         cb:eb:b2:b2:62:2e:1b:fc:8a:73:44:8c:a2:c1:9b:9e:d6:19:
         b1:12:c5:f7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVnNcI9/Kbd7ADA2JuSaktnj5v84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUzMkMzRkFDQzg2QUIxRTEwMTgyQTczMUNFRTVDNkUz
MkM3QjNBNjAeFw0yNDA0MjQyMDAzMzlaFw0yNTA0MjMyMDA4MzlaMDMxMTAvBgNV
BAMTKDVDOEQ3OTlGRTQzQkI2QkQ3QTQ1OEVDRjRERkJCMjM1MUQ5RTE3QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9yd4lShSdBRHhvjY55Qyzv6w
ZfAkTrvHSbYaqaOCo1QPE4gs5e99NlWF9A+sC4XUiqa2mw7mCJHS96nNSq4oiPK1
LWznGCzzOXDl3ECYqCZ9wT1qPUVe0TlJJuhfClelFwJQ30n3T2nr2P+fvZMA5EeS
cjGvMj0dLuKm1BpibhncUKLpjB4jFvi1AIlYkyxiyPUoVOUU3x8xcTIHFhZjhxCB
B7H8GufVR1rGXBPB2DDbaiQSIxJpvhyQ8UuJWDepDsb0qZiFtH1RfWTWtd29MxpV
F8AKxwCgpdXKauDZG87yP6yUOvoSc88pLAthRpAABoyHt3OGpzZInc/hcR5BAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXI15n+Q7tr16RY7PTfuyNR2eF8IwHwYDVR0j
BBgwFoAU9TLD+syGqx4QGCpzHO5cbjLHs6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm1UczdSYng2Tm01Sm9zZldKWnp1WXV1cUhvZzR0R0d6R2J2SmExWnV4
OFgvMC9GNTMyQzNGQUNDODZBQjFFMTAxODJBNzMxQ0VFNUM2RTMyQzdCM0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MzJDM0ZBQ0M4NkFCMUUx
MDE4MkE3MzFDRUU1QzZFMzJDN0IzQTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JtVHM3UmJ4Nk5tNUpvc2ZXSlp6dVl1dXFIb2c0dEdHekdidkphMVp1eDhYLzAv
MzIzODMwMzQzYTMzMzM2MjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTM0MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEM7SAMA0GCSqGSIb3DQEBCwUA
A4IBAQCZXCyQHu9iQiJyCSNGdhtuFZiLdteDcwXt401d68QH7ti7wvcCGygqsth/
WHjWzBkxv47zlhlZXQFSKKB5jmDVtpss73u+KFoNaRMesRefgwDSx8ahVtdqOt7G
igit9sDl47A1yggXRJDxxirKoRr36vWeu9yqfh/ONLTV3NFhi8FJR3uhMdX0Rc+9
kzAZhDqt/Htkp7yyBuINKTlNI6+rEDFsM9gr5px24fa34DEIbdvM0DYlGLRuJHqe
hfy3n6beqzWufji2W22UauszXRgfthnFgbtcOoYGCwEARg6zkgBiJO2BlOoaWizL
67KyYi4b/IpzRIyiwZue1hmxEsX3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org