Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33332d3333203d3e20323634333539.roa
File:                     323830343a316434633a3a2f33332d3333203d3e20323634333539.roa (raw, json)
Hash identifier:          WutP2JM0Yj9PCqFf2iPFVGpO0nGSif4dC7WKloSeFNQ=
Subject key identifier:   48:C4:90:D8:D4:6D:AC:0B:D3:C9:C0:E4:EA:E5:E0:EF:1A:0D:92:93
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       74274816AD5563D9E241B02FB6B5572A4FC45268
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33332d3333203d3e20323634333539.roa
Signing time:             Tue 27 Aug 2024 18:21:58 +0000
ROA not before:           Tue 27 Aug 2024 18:16:58 +0000
ROA not after:            Tue 26 Aug 2025 18:21:58 +0000
asID:                     264359
IP address blocks:        2804:1d4c::/33 maxlen: 33

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:27:48:16:ad:55:63:d9:e2:41:b0:2f:b6:b5:57:2a:4f:c4:52:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Aug 27 18:16:58 2024 GMT
            Not After : Aug 26 18:21:58 2025 GMT
        Subject: CN=48C490D8D46DAC0BD3C9C0E4EAE5E0EF1A0D9293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:e6:f0:0a:62:c4:8a:28:68:fe:10:97:26:
                    bd:ba:5b:91:82:79:04:73:8d:e9:f9:c4:ec:51:29:
                    40:51:e7:9c:99:7f:76:b2:97:de:be:1e:89:45:36:
                    c8:bc:19:ef:b5:67:75:6d:ca:0b:15:96:8d:65:64:
                    a1:08:b2:c4:df:dd:0f:ad:f0:c1:50:03:df:11:a6:
                    10:dd:38:63:ce:f1:90:75:7a:54:25:0f:82:c7:cf:
                    41:a6:99:29:c7:55:9a:2f:ab:84:7a:4c:01:3c:d0:
                    1e:f7:d7:4c:c9:6c:ce:1d:ff:2b:97:a2:65:47:a7:
                    8f:61:58:38:5e:58:49:0d:a2:bc:6f:04:b8:bc:73:
                    c3:05:61:6d:e3:a4:bf:ee:b8:16:13:97:c7:53:04:
                    57:cd:5d:8e:8e:e6:cd:d4:21:32:57:37:20:68:94:
                    5d:36:b5:24:37:d6:a1:9e:de:de:f7:1d:1a:ed:08:
                    0a:6d:45:3a:28:ab:af:86:43:ae:92:22:86:38:17:
                    8e:0f:c0:cd:e3:18:30:fe:37:b3:f9:80:4c:47:c2:
                    40:89:10:47:88:b3:43:ed:d9:ad:fe:2c:e1:b6:fb:
                    f2:d7:b3:05:91:c9:5c:3b:15:79:e2:4d:be:e6:85:
                    4b:f2:c6:96:eb:20:32:85:06:7b:7c:1c:67:c3:0f:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C4:90:D8:D4:6D:AC:0B:D3:C9:C0:E4:EA:E5:E0:EF:1A:0D:92:93
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33332d3333203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:b0:8f:8b:4c:5e:b7:e0:66:6f:af:3a:09:08:97:58:c6:
         57:7e:05:09:78:d5:99:39:70:c0:d3:af:ca:7d:33:a5:27:64:
         a4:3a:9e:ab:1d:05:59:72:da:8e:d0:84:21:e5:85:44:b3:58:
         b5:24:ea:d1:cd:9c:a1:53:c0:5c:d7:f0:b4:27:9f:9d:99:a3:
         71:33:ba:ee:83:fc:cc:8e:ce:aa:fa:b3:ed:ee:0d:b3:fd:dd:
         41:f7:71:7e:b0:86:19:d0:22:4f:96:52:a5:ac:3f:79:a2:da:
         c0:28:f9:08:ed:6f:7a:fe:66:e7:cc:9e:46:3a:c4:4a:ce:ea:
         74:37:6d:e3:e9:14:c8:81:3c:8f:b6:73:b6:6e:ee:07:b1:49:
         91:14:0a:fa:d6:7a:9b:49:de:52:cc:9a:54:84:9e:91:6a:88:
         90:b7:40:53:f8:93:89:e7:68:f1:b1:05:b7:72:ab:a3:61:a9:
         51:fa:45:d5:ca:8c:fe:dc:c6:7a:53:65:a8:22:8a:b1:fa:8a:
         bf:2a:74:5d:ba:c5:ed:43:92:ae:08:4d:04:3a:d5:84:0e:c0:
         37:cd:31:f1:45:41:fd:ca:1a:c0:85:8b:93:5d:c6:1c:12:90:
         60:4b:0d:c4:39:05:4a:d5:07:d3:20:11:20:e4:25:50:f9:55:
         f7:38:b9:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdCdIFq1VY9niQbAvtrVXKk/EUmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUwQjM2NjFCMTJGOUUxQkU4QjZFNEM2MjhDMjE0QUM2
OTQzN0M1RDAeFw0yNDA4MjcxODE2NThaFw0yNTA4MjYxODIxNThaMDMxMTAvBgNV
BAMTKDQ4QzQ5MEQ4RDQ2REFDMEJEM0M5QzBFNEVBRTVFMEVGMUEwRDkyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCce+bwCmLEiiho/hCXJr26W5GC
eQRzjen5xOxRKUBR55yZf3ayl96+HolFNsi8Ge+1Z3VtygsVlo1lZKEIssTf3Q+t
8MFQA98RphDdOGPO8ZB1elQlD4LHz0GmmSnHVZovq4R6TAE80B7310zJbM4d/yuX
omVHp49hWDheWEkNorxvBLi8c8MFYW3jpL/uuBYTl8dTBFfNXY6O5s3UITJXNyBo
lF02tSQ31qGe3t73HRrtCAptRTooq6+GQ66SIoY4F44PwM3jGDD+N7P5gExHwkCJ
EEeIs0Pt2a3+LOG2+/LXswWRyVw7FXniTb7mhUvyxpbrIDKFBnt8HGfDDxdjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSMSQ2NRtrAvTycDk6uXg7xoNkpMwHwYDVR0j
BBgwFoAUXgs2YbEvnhvotuTGKMIUrGlDfF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0RtWDE1QnhiWnoyNEduN1VvTkJ5cmdaUndkcXFMak40cU1VczRjTnNn
UGEvMC81RTBCMzY2MUIxMkY5RTFCRThCNkU0QzYyOEMyMTRBQzY5NDM3QzVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFMEIzNjYxQjEyRjlFMUJF
OEI2RTRDNjI4QzIxNEFDNjk0MzdDNUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NEbVgxNUJ4Ylp6MjRHbjdVb05CeXJnWlJ3ZHFxTGpONHFNVXM0Y05zZ1BhLzAv
MzIzODMwMzQzYTMxNjQzNDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzMzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQdTAAwDQYJKoZIhvcNAQELBQADggEBAHMssI+L
TF634GZvrzoJCJdYxld+BQl41Zk5cMDTr8p9M6UnZKQ6nqsdBVly2o7QhCHlhUSz
WLUk6tHNnKFTwFzX8LQnn52Zo3Ezuu6D/MyOzqr6s+3uDbP93UH3cX6whhnQIk+W
UqWsP3mi2sAo+Qjtb3r+ZufMnkY6xErO6nQ3bePpFMiBPI+2c7Zu7gexSZEUCvrW
eptJ3lLMmlSEnpFqiJC3QFP4k4nnaPGxBbdyq6NhqVH6RdXKjP7cxnpTZagiirH6
ir8qdF26xe1Dkq4ITQQ61YQOwDfNMfFFQf3KGsCFi5NdxhwSkGBLDcQ5BUrVB9Mg
ESDkJVD5Vfc4ues=
-----END CERTIFICATE-----