Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/323830343a363639383a3a2f33322d3332203d3e20323639353730.roa
File:                     323830343a363639383a3a2f33322d3332203d3e20323639353730.roa (raw, json)
Hash identifier:          9/dm5DVbeXwAsM0OB5rydZwSGO7woXwWYyPt2LGDZEQ=
Subject key identifier:   FC:9A:99:1E:D8:59:5D:D4:47:D6:B9:8B:1D:D3:FE:BD:58:8D:97:DC
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       2D630BF285D7642730E5859A80D64702C2139B04
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/323830343a363639383a3a2f33322d3332203d3e20323639353730.roa
Signing time:             Tue 23 Apr 2024 13:18:02 +0000
ROA not before:           Tue 23 Apr 2024 13:13:02 +0000
ROA not after:            Tue 22 Apr 2025 13:18:02 +0000
asID:                     269570
IP address blocks:        2804:6698::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:63:0b:f2:85:d7:64:27:30:e5:85:9a:80:d6:47:02:c2:13:9b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: Apr 23 13:13:02 2024 GMT
            Not After : Apr 22 13:18:02 2025 GMT
        Subject: CN=FC9A991ED8595DD447D6B98B1DD3FEBD588D97DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:53:6b:60:6b:3a:b4:e4:5f:d5:52:ea:f6:
                    f7:64:7c:78:7d:ef:6f:65:44:93:74:cb:45:f5:97:
                    cd:02:54:e4:e4:60:33:93:cd:c6:b8:ef:4b:8a:7a:
                    f4:83:38:96:9b:51:27:7f:3e:e8:63:b9:98:bb:87:
                    ab:4a:5b:d8:91:b7:f8:4a:b0:19:52:92:81:4e:ec:
                    00:27:0d:27:1a:ed:66:e6:28:2e:dd:1e:af:ea:34:
                    8a:98:fa:5d:36:a9:8a:41:a5:f5:91:1e:48:df:e5:
                    cf:38:34:e9:a0:5f:7e:a2:d1:1f:7d:9f:6e:f8:df:
                    d2:c6:6a:28:8a:37:59:4f:ba:f8:ef:a5:25:25:89:
                    b4:1b:4c:e0:08:3d:af:f9:a5:bf:be:59:49:4f:bc:
                    0e:23:50:bd:32:de:4a:7f:36:55:2b:6b:5f:33:28:
                    e8:94:37:8f:69:c9:de:46:42:2d:cd:71:08:92:8d:
                    49:f8:50:1e:18:0a:dc:e7:08:74:5c:52:18:b3:41:
                    c6:c4:0b:96:1e:0c:ee:89:28:f7:73:e2:3c:c9:98:
                    3b:8f:53:06:15:72:98:b3:21:36:0f:73:6c:be:47:
                    e8:72:fa:36:b6:82:45:1d:1e:6d:ed:cb:2a:61:7b:
                    00:82:98:3f:d6:f6:18:19:f8:89:43:ac:c5:e4:f0:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:99:1E:D8:59:5D:D4:47:D6:B9:8B:1D:D3:FE:BD:58:8D:97:DC
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/323830343a363639383a3a2f33322d3332203d3e20323639353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6698::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:a9:4d:e6:88:c8:ca:0b:a0:92:59:32:ec:f9:ce:f1:5a:
         a7:46:61:d3:79:cb:27:2a:c4:56:d6:f3:57:b8:35:02:02:24:
         68:60:af:24:2d:f1:8f:f2:69:ca:1b:a3:d1:e4:61:bc:59:41:
         d9:0a:15:f5:7d:ee:86:8d:05:99:52:c2:c7:d0:cf:a5:1d:41:
         e7:a1:18:31:66:bd:69:f1:11:b3:8c:9e:b1:be:0e:68:ec:0e:
         49:69:d4:00:54:1b:03:e7:6f:45:e6:29:28:be:6f:23:28:66:
         42:62:b7:cd:8a:f3:d2:3a:6f:ef:f6:8e:47:51:d9:19:b3:0d:
         a6:28:8e:30:d2:13:28:f3:bb:75:20:23:e8:4a:64:fa:9c:60:
         04:33:2e:7f:8e:79:28:5d:77:12:0c:d6:d8:57:0a:2b:f4:f2:
         84:3f:0e:42:32:a1:5f:2f:15:fd:ba:84:39:99:e0:09:d0:75:
         41:fa:04:de:f4:e5:1a:bd:be:c7:a5:50:87:dd:9e:2e:8a:b2:
         3b:fb:43:9a:f6:42:3a:bf:43:fb:86:a2:08:4f:d1:09:98:b0:
         00:03:79:fe:7c:51:3d:38:01:8e:37:5a:20:6a:0c:60:82:c9:
         6d:4a:7c:9e:67:1f:9e:1c:80:fb:cf:02:cc:06:13:5a:8e:d2:
         75:c7:70:92
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULWML8oXXZCcw5YWagNZHAsITmwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3MEEwM0VDOTU0RTE1MEEyMkJFNzhGQTk2NTE1Q0Iw
MTU4RjVDMTAeFw0yNDA0MjMxMzEzMDJaFw0yNTA0MjIxMzE4MDJaMDMxMTAvBgNV
BAMTKEZDOUE5OTFFRDg1OTVERDQ0N0Q2Qjk4QjFERDNGRUJENTg4RDk3REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB11NrYGs6tORf1VLq9vdkfHh9
729lRJN0y0X1l80CVOTkYDOTzca470uKevSDOJabUSd/PuhjuZi7h6tKW9iRt/hK
sBlSkoFO7AAnDSca7WbmKC7dHq/qNIqY+l02qYpBpfWRHkjf5c84NOmgX36i0R99
n27439LGaiiKN1lPuvjvpSUlibQbTOAIPa/5pb++WUlPvA4jUL0y3kp/NlUra18z
KOiUN49pyd5GQi3NcQiSjUn4UB4YCtznCHRcUhizQcbEC5YeDO6JKPdz4jzJmDuP
UwYVcpizITYPc2y+R+hy+ja2gkUdHm3tyyphewCCmD/W9hgZ+IlDrMXk8FvdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/JqZHthZXdRH1rmLHdP+vViNl9wwHwYDVR0j
BBgwFoAUE3CgPslU4VCiK+ePqWUVywFY9cEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVn
TmovMC8xMzcwQTAzRUM5NTRFMTUwQTIyQkU3OEZBOTY1MTVDQjAxNThGNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNzBBMDNFQzk1NEUxNTBB
MjJCRTc4RkE5NjUxNUNCMDE1OEY1QzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLRGpDajFrTm14b0J0Q3EzNkRVZ25TYVFkQ2tzOXFkUGdmN1gxYmZ1Z05qLzAv
MzIzODMwMzQzYTM2MzYzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARmmDANBgkqhkiG9w0BAQsFAAOCAQEAFNypTeaI
yMoLoJJZMuz5zvFap0Zh03nLJyrEVtbzV7g1AgIkaGCvJC3xj/Jpyhuj0eRhvFlB
2QoV9X3uho0FmVLCx9DPpR1B56EYMWa9afERs4yesb4OaOwOSWnUAFQbA+dvReYp
KL5vIyhmQmK3zYrz0jpv7/aOR1HZGbMNpiiOMNITKPO7dSAj6Epk+pxgBDMuf455
KF13EgzW2FcKK/TyhD8OQjKhXy8V/bqEOZngCdB1QfoE3vTlGr2+x6VQh92eLoqy
O/tDmvZCOr9D+4aiCE/RCZiwAAN5/nxRPTgBjjdaIGoMYILJbUp8nmcfnhyA+88C
zAYTWo7Sdcdwkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org