Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a633030303a3a2f33342d3334203d3e20323634333539.roa
File:                     323830343a316434633a633030303a3a2f33342d3334203d3e20323634333539.roa (raw, json)
Hash identifier:          ogMB9MOxxn6D9wUoPYrMfjkHE0Y78nCBAsTfWoTu/88=
Subject key identifier:   D6:2E:DB:29:AF:8B:E5:AB:58:D7:5C:F6:C5:57:E6:64:FA:C8:80:0F
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       4B3B9CD8582463C45A18478D503CE50F947CA5A4
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a633030303a3a2f33342d3334203d3e20323634333539.roa
Signing time:             Tue 27 Aug 2024 17:57:39 +0000
ROA not before:           Tue 27 Aug 2024 17:52:39 +0000
ROA not after:            Tue 26 Aug 2025 17:57:39 +0000
asID:                     264359
IP address blocks:        2804:1d4c:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3b:9c:d8:58:24:63:c4:5a:18:47:8d:50:3c:e5:0f:94:7c:a5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Aug 27 17:52:39 2024 GMT
            Not After : Aug 26 17:57:39 2025 GMT
        Subject: CN=D62EDB29AF8BE5AB58D75CF6C557E664FAC8800F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:7c:1d:ac:9d:bb:cd:ea:92:c2:25:d7:96:
                    06:2d:9c:2c:d4:ff:ba:b7:57:51:b2:4d:ec:04:ad:
                    cc:52:84:26:fa:88:c7:d6:bb:30:59:88:91:c1:f7:
                    f7:67:ec:7c:a0:58:a7:f8:9d:67:1e:18:f8:0a:aa:
                    35:6d:17:b9:c2:f0:ed:d8:45:55:32:31:60:82:de:
                    87:ed:db:7b:e5:9c:6f:88:01:3e:60:3d:23:7d:5e:
                    8b:2c:62:1d:cd:16:d0:55:09:9c:b6:71:e6:a1:ee:
                    41:c8:d6:25:ab:89:fd:2c:68:bc:24:ee:a5:cd:a0:
                    4d:23:34:c9:53:ae:3d:e5:bb:1e:d9:5b:04:a2:be:
                    9c:45:4c:5d:f5:47:1d:e0:db:04:4f:9a:40:3d:16:
                    d4:22:76:8e:6e:c0:53:c9:fa:90:96:f7:e5:0e:dc:
                    6f:8e:91:59:a9:55:cd:22:d9:8c:85:ce:47:cc:74:
                    95:e7:65:3f:21:4c:26:0c:d7:c3:33:42:95:6f:c5:
                    ad:b6:74:18:93:fd:59:36:58:6d:56:64:0d:7a:8d:
                    db:9f:9b:dd:5b:43:bc:f3:10:e6:41:1b:33:31:5c:
                    fa:69:f3:ff:44:8f:7b:e2:5c:0e:d4:c6:cd:1f:f8:
                    94:ba:7d:0f:13:ed:9f:4e:e7:13:5d:82:77:dc:9b:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2E:DB:29:AF:8B:E5:AB:58:D7:5C:F6:C5:57:E6:64:FA:C8:80:0F
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a633030303a3a2f33342d3334203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:35:15:ed:5a:56:4e:b5:67:2b:9e:e9:c7:0f:20:f5:56:8a:
         7e:1d:25:a2:70:49:f2:3c:5d:f2:ee:75:b6:5a:12:11:e4:f0:
         48:88:4f:ef:96:67:e0:2f:ac:98:4e:d5:2b:86:8c:a5:28:0b:
         6b:90:fc:56:30:1e:84:17:56:b0:19:70:0f:44:f7:f6:e7:fa:
         6d:e1:3e:be:18:b3:db:53:d4:c0:b2:c5:27:33:c1:bf:6c:f4:
         2d:c8:fe:ae:70:a7:c6:3c:b1:a8:25:c8:40:72:1e:19:71:34:
         1b:c0:bc:16:02:6b:4e:a9:e5:45:1f:5d:ae:2e:12:fe:97:01:
         02:0c:15:a3:ca:ac:7a:a4:b8:2b:85:a7:8c:b3:3a:78:9b:20:
         f9:d8:4c:ba:85:f9:b0:fa:e3:08:dd:c8:96:1a:93:c1:8c:d7:
         15:df:70:3f:4f:ae:5b:71:b5:a2:47:a4:45:63:00:52:29:99:
         18:21:fd:8a:cd:68:0f:2a:89:5f:67:68:7c:96:d1:35:83:57:
         07:ca:53:b8:5d:f6:a3:dc:85:a6:ef:7d:0d:53:7d:94:dc:79:
         5f:b3:a1:37:4f:fc:15:1c:e3:df:c3:76:8e:69:e2:6b:b7:3f:
         01:47:2a:05:7a:b9:7e:88:91:2c:4f:ab:6b:14:11:03:7e:f4:
         18:d2:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----