Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f33342d3334203d3e20323634333539.roa
File:                     323830343a316434633a383030303a3a2f33342d3334203d3e20323634333539.roa (raw, json)
Hash identifier:          bi4wcFilJXqFV3jhBs434ba7a6wn+efURDpWQvYzsmE=
Subject key identifier:   00:A4:94:CE:CF:E2:0F:3D:C8:FF:54:8C:11:5C:6F:AD:0C:FD:CE:88
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       3D611F9B4C9662BE31BC61CEDD17C02AFEC37016
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f33342d3334203d3e20323634333539.roa
Signing time:             Tue 27 Aug 2024 17:57:22 +0000
ROA not before:           Tue 27 Aug 2024 17:52:22 +0000
ROA not after:            Tue 26 Aug 2025 17:57:22 +0000
asID:                     264359
IP address blocks:        2804:1d4c:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:61:1f:9b:4c:96:62:be:31:bc:61:ce:dd:17:c0:2a:fe:c3:70:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Aug 27 17:52:22 2024 GMT
            Not After : Aug 26 17:57:22 2025 GMT
        Subject: CN=00A494CECFE20F3DC8FF548C115C6FAD0CFDCE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:82:ae:63:e8:f3:d8:e8:69:a2:00:51:44:
                    b4:5d:44:c2:4c:31:81:26:ed:b7:3a:5a:6b:ba:75:
                    14:68:4b:39:34:da:53:b1:ec:11:db:bb:f7:01:94:
                    e8:a1:b3:f4:12:27:58:cb:e1:1e:20:1b:98:03:ed:
                    1e:e1:db:e0:8d:48:1f:4d:80:e8:95:46:64:25:66:
                    4b:d7:57:ae:50:09:85:98:51:d9:b8:7e:1b:2e:04:
                    39:39:d7:16:f4:6b:1c:03:a3:fd:ad:ae:6c:df:a3:
                    06:3b:17:73:68:a4:1d:87:22:b6:ee:42:7d:4e:88:
                    d9:52:6a:e5:53:21:9c:4d:a5:0b:d0:58:26:cb:7b:
                    e3:7b:38:58:34:69:85:d5:30:63:66:23:0b:48:9b:
                    b6:cb:5a:15:13:4a:86:ed:c1:d4:65:fa:1e:cc:24:
                    8e:6a:de:b5:58:00:29:a8:38:a6:c9:41:8a:12:b4:
                    93:73:1c:42:bc:b6:a3:b5:d6:d1:14:fb:6a:72:49:
                    00:2b:5f:f6:4d:42:ad:a1:7b:df:6d:4a:ff:48:4c:
                    ec:87:f4:ae:d2:89:fc:c8:fa:71:3b:57:43:6a:28:
                    52:67:2e:7b:ed:17:77:e4:b3:25:aa:d5:f2:b7:18:
                    98:bb:f1:11:aa:58:e1:e7:e3:2d:00:d9:50:32:3f:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:94:CE:CF:E2:0F:3D:C8:FF:54:8C:11:5C:6F:AD:0C:FD:CE:88
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f33342d3334203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:7b:99:5d:29:5d:b0:9f:0f:a2:f3:13:93:3d:28:14:6f:
         cf:8d:bf:14:72:e3:c5:f1:79:c3:f0:67:9d:6d:81:38:2d:4a:
         a0:10:fb:9b:fa:1a:e6:14:b9:3e:42:26:6a:7d:46:70:fe:f6:
         86:e5:0b:a5:7a:c2:26:e1:37:2f:ed:fc:d5:91:5c:05:4e:85:
         6d:1c:a3:5f:33:51:7c:fe:b4:b2:21:9a:57:57:42:87:20:40:
         dc:dd:19:ab:7e:31:80:8a:cc:eb:8c:3d:06:0b:77:51:89:25:
         3d:47:9d:e3:8d:ca:3d:54:e7:b2:71:8e:ba:3f:ca:02:ae:f9:
         2e:6f:dd:d1:d6:85:3a:2d:cf:6a:11:a9:a0:f7:e6:57:3b:36:
         8f:a9:af:ac:a1:9b:d2:0d:7d:dd:56:b5:8f:c0:bc:9f:a8:82:
         20:27:e8:d0:a1:b0:56:3e:67:45:02:a6:8d:c0:68:ae:c0:5a:
         12:cc:d6:a7:30:50:f3:89:ee:a4:f9:41:68:c4:1b:66:d0:5c:
         f4:7c:12:c2:cc:45:ad:0c:71:9c:6b:ac:92:9e:74:be:83:a7:
         b6:76:8d:28:9d:5b:09:25:91:0c:c1:48:9a:6c:b8:ce:dd:a6:
         33:32:58:59:41:1c:c6:1e:ed:56:59:5f:66:09:a4:71:e7:9e:
         60:bc:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----