Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa
File:                     32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa (raw, json)
Hash identifier:          b9HKCuvSujudlN2ODDvav0HWr+WA+X8llwuVm7D8MG8=
Subject key identifier:   30:E2:EA:06:35:49:CF:17:89:F2:AC:57:CE:86:03:1C:5E:61:50:86
Certificate issuer:       /CN=E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7
Certificate serial:       2D530A6AC25D2B63ACE86833C4CEEDE56B37F4FB
Authority key identifier: E6:40:4F:7A:E3:91:6B:15:B9:04:3E:8D:7F:AE:57:A8:EB:DE:71:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa
Signing time:             Thu 04 Apr 2024 08:49:56 +0000
ROA not before:           Thu 04 Apr 2024 08:44:56 +0000
ROA not after:            Thu 03 Apr 2025 08:49:56 +0000
asID:                     270519
IP address blocks:        24.152.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 13:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:53:0a:6a:c2:5d:2b:63:ac:e8:68:33:c4:ce:ed:e5:6b:37:f4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7
        Validity
            Not Before: Apr  4 08:44:56 2024 GMT
            Not After : Apr  3 08:49:56 2025 GMT
        Subject: CN=30E2EA063549CF1789F2AC57CE86031C5E615086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:20:a1:cc:7d:1c:f1:1b:55:43:28:a0:ad:
                    c1:72:e8:1d:20:37:33:f7:89:ac:b0:8f:7f:e8:3b:
                    01:9f:90:38:9f:a4:84:4e:ba:81:11:96:a1:07:e0:
                    c9:8c:54:06:c4:2a:4a:4c:fa:9b:90:21:e3:0c:da:
                    1e:36:30:f8:33:9a:27:78:a6:85:d1:08:bb:da:22:
                    82:14:ab:f9:96:ae:21:38:ed:3b:ca:3a:bc:33:5c:
                    d8:5d:ee:d6:08:ad:b2:d7:0d:46:14:73:f4:23:b2:
                    26:bb:2b:ae:4b:28:b3:67:36:ef:cc:29:f3:0c:57:
                    b2:62:b2:72:d0:6c:db:ee:49:24:45:23:c7:35:92:
                    2b:92:89:01:3e:b6:ae:9a:ad:92:2e:6e:d4:ec:95:
                    26:0c:09:6f:b5:8d:2a:c3:63:6b:fc:ad:17:d2:26:
                    f3:bf:d8:77:a2:fe:68:88:89:59:a8:38:1c:00:65:
                    a0:cb:41:b5:8f:39:f8:63:97:06:91:30:ac:a3:cc:
                    55:85:5a:d2:8c:b3:6a:1b:e7:e8:ce:ce:76:3f:5e:
                    e3:31:a7:9e:ae:cb:3b:28:c6:36:b2:5b:9c:57:a1:
                    52:37:ab:eb:e9:25:9c:c6:c7:c1:e7:2e:eb:e0:35:
                    29:c2:43:96:a6:ee:91:d5:b2:f6:b8:99:4b:4a:9a:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:EA:06:35:49:CF:17:89:F2:AC:57:CE:86:03:1C:5E:61:50:86
            X509v3 Authority Key Identifier:
                keyid:E6:40:4F:7A:E3:91:6B:15:B9:04:3E:8D:7F:AE:57:A8:EB:DE:71:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:55:e5:68:f4:64:5e:68:0c:d5:a0:44:13:5a:7c:bc:e6:
         89:27:87:ef:ac:c4:2c:92:9c:de:91:2a:2a:0e:15:11:d6:ac:
         20:29:c4:1e:74:4e:2b:e4:21:b3:bd:82:75:44:c8:07:5b:92:
         81:db:71:29:bd:f6:0e:f7:d7:33:68:2e:8f:0e:0f:73:5b:04:
         67:db:1a:7a:9b:cf:a5:f3:f0:b3:20:07:d5:42:33:38:42:06:
         52:b9:dd:3c:90:ae:70:af:32:7c:58:3e:66:80:a9:e5:3e:79:
         00:68:29:f1:c8:56:63:b3:41:ef:fd:01:0d:8a:eb:17:36:63:
         05:d2:b4:79:cb:8e:33:b5:4a:69:89:be:9d:57:01:94:ba:80:
         b0:68:3a:d4:3d:ed:03:9c:88:b9:ad:37:24:3e:e1:92:b5:7f:
         17:94:ad:81:d6:9d:87:5c:6c:52:50:ab:b8:f0:10:d4:ff:c2:
         0a:41:fe:8e:3a:2c:63:12:de:13:da:c5:9f:7d:6a:fc:04:c0:
         be:30:41:cd:9c:fb:a3:8e:2c:95:43:8e:f7:c2:cf:ce:b5:e6:
         72:ec:d9:b3:e6:c3:8f:3f:f9:44:e0:b8:1d:45:18:e2:75:64:
         78:f0:e4:9e:08:9f:6c:fb:08:64:66:db:8f:33:9c:7b:bf:81:
         09:89:86:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULVMKasJdK2Os6GgzxM7t5Ws39PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY0MDRGN0FFMzkxNkIxNUI5MDQzRThEN0ZBRTU3QThF
QkRFNzFBNzAeFw0yNDA0MDQwODQ0NTZaFw0yNTA0MDMwODQ5NTZaMDMxMTAvBgNV
BAMTKDMwRTJFQTA2MzU0OUNGMTc4OUYyQUM1N0NFODYwMzFDNUU2MTUwODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfCChzH0c8RtVQyigrcFy6B0g
NzP3iaywj3/oOwGfkDifpIROuoERlqEH4MmMVAbEKkpM+puQIeMM2h42MPgzmid4
poXRCLvaIoIUq/mWriE47TvKOrwzXNhd7tYIrbLXDUYUc/Qjsia7K65LKLNnNu/M
KfMMV7JisnLQbNvuSSRFI8c1kiuSiQE+tq6arZIubtTslSYMCW+1jSrDY2v8rRfS
JvO/2Hei/miIiVmoOBwAZaDLQbWPOfhjlwaRMKyjzFWFWtKMs2ob5+jOznY/XuMx
p56uyzsoxjayW5xXoVI3q+vpJZzGx8HnLuvgNSnCQ5am7pHVsva4mUtKmjZ3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMOLqBjVJzxeJ8qxXzoYDHF5hUIYwHwYDVR0j
BBgwFoAU5kBPeuORaxW5BD6Nf65XqOvecacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhBdkc2YUxOU1VZSE1BYzNiSzFHWk40ZUFtektDeVBZdVJMUHZOZnh6
aGovMS9FNjQwNEY3QUUzOTE2QjE1QjkwNDNFOEQ3RkFFNTdBOEVCREU3MUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2NDA0RjdBRTM5MTZCMTVC
OTA0M0U4RDdGQUU1N0E4RUJERTcxQTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4QXZHNmFMTlNVWUhNQWMzYksxR1pONGVBbXpLQ3lQWXVSTFB2TmZ4emhqLzEv
MzIzNDJlMzEzNTMyMmUzMTMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAYmGgwDQYJKoZIhvcNAQELBQADggEBAJsKVeVo
9GReaAzVoEQTWny85oknh++sxCySnN6RKioOFRHWrCApxB50TivkIbO9gnVEyAdb
koHbcSm99g731zNoLo8OD3NbBGfbGnqbz6Xz8LMgB9VCMzhCBlK53TyQrnCvMnxY
PmaAqeU+eQBoKfHIVmOzQe/9AQ2K6xc2YwXStHnLjjO1SmmJvp1XAZS6gLBoOtQ9
7QOciLmtNyQ+4ZK1fxeUrYHWnYdcbFJQq7jwENT/wgpB/o46LGMS3hPaxZ99avwE
wL4wQc2c+6OOLJVDjvfCz8615nLs2bPmw48/+UTguB1FGOJ1ZHjw5J4In2z7CGRm
248znHu/gQmJhig=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org