Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3336203d3e203238323133.roa
File:                     323830343a326537383a3a2f33322d3336203d3e203238323133.roa (raw, json)
Hash identifier:          lYOzJrmqZjyOiZsqmiUqRcB032tZLOP493XCdKAzRBo=
Subject key identifier:   8D:0F:3F:EB:0B:99:9B:CD:B2:A7:5B:A3:38:95:43:8C:AD:78:C0:86
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       459F311E3053383A3E21427658FF406DE757D468
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3336203d3e203238323133.roa
Signing time:             Thu 13 Jun 2024 13:29:31 +0000
ROA not before:           Thu 13 Jun 2024 13:24:31 +0000
ROA not after:            Thu 12 Jun 2025 13:29:31 +0000
asID:                     28213
IP address blocks:        2804:2e78::/32 maxlen: 36

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 13:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9f:31:1e:30:53:38:3a:3e:21:42:76:58:ff:40:6d:e7:57:d4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 13 13:24:31 2024 GMT
            Not After : Jun 12 13:29:31 2025 GMT
        Subject: CN=8D0F3FEB0B999BCDB2A75BA33895438CAD78C086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c0:41:2e:ff:88:69:9f:22:20:f4:d6:2b:cf:
                    0c:bf:fe:ae:56:06:04:ee:94:ae:7b:53:0a:1a:1c:
                    85:eb:c0:e9:0e:e3:32:8d:94:6a:29:ff:76:4f:a2:
                    d8:a5:30:f9:e6:36:21:2c:34:a4:0f:d9:15:75:c5:
                    7b:f9:42:32:9b:07:04:be:15:f8:71:fc:80:ae:03:
                    7f:89:3a:76:b3:3f:57:64:63:2e:fc:77:40:37:01:
                    92:24:88:b7:65:1b:22:14:89:19:8d:57:6d:75:cf:
                    2e:16:5b:81:26:94:15:95:57:b2:5d:b9:64:0a:51:
                    df:c9:25:c9:61:1a:f5:07:4d:8e:fb:cb:9d:6b:d9:
                    04:3d:0d:7d:a3:0a:76:25:ce:dc:d0:45:1a:27:9a:
                    e1:5f:fa:1f:0d:a8:00:4f:88:ca:5a:17:f5:5e:e8:
                    59:1a:3d:e1:34:5f:ec:49:b7:23:cd:73:a8:8f:ab:
                    3e:b7:80:21:0c:c2:a5:de:cf:cb:64:df:56:73:12:
                    87:64:a1:30:81:19:fa:f6:38:fb:a8:8b:f4:64:ea:
                    a2:5b:a8:31:bb:c8:52:55:6b:ad:b8:68:86:e9:29:
                    9c:50:ce:fe:af:fc:b7:b9:98:92:b8:8f:9b:0b:d6:
                    65:17:49:ba:d0:73:42:ef:8a:97:ce:a4:0a:8f:c7:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0F:3F:EB:0B:99:9B:CD:B2:A7:5B:A3:38:95:43:8C:AD:78:C0:86
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3336203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:82:69:b7:ab:ad:59:4c:1b:e0:da:1b:65:c8:96:7b:18:4c:
         c5:bd:ad:61:4a:42:70:a7:4d:da:2f:48:46:ac:4a:ec:ce:24:
         cb:07:37:ed:4b:0a:d5:ca:1f:97:48:8c:5e:5e:6c:57:36:0e:
         d7:4e:5a:e8:8c:74:8c:c1:bf:52:88:6c:8f:16:5f:78:80:1c:
         96:6e:17:9d:3d:e5:5b:47:fa:ca:16:07:6a:7b:b0:bb:ea:98:
         ac:52:fa:9a:16:b4:36:70:45:01:38:78:bb:ad:1a:d4:47:76:
         4a:b4:48:1b:11:ef:bd:5f:14:8c:37:77:23:61:d4:1c:42:22:
         2a:3b:8b:b0:8c:2b:19:04:45:e2:e9:dc:f8:e9:aa:d7:23:7e:
         2b:96:5d:e4:dd:a4:08:26:c5:e5:b6:05:a0:ba:52:85:fe:6c:
         a2:7c:8a:c2:ae:97:0c:30:81:35:2e:a7:74:49:a8:52:b1:5c:
         f9:00:74:e7:37:b8:0e:e1:bd:e9:e7:19:fc:c6:0d:24:01:e3:
         0e:7f:de:16:a9:47:51:bb:ca:f0:40:b0:b8:44:8e:77:4f:d8:
         f9:ee:86:54:35:49:99:2e:8f:2e:cc:55:88:79:47:be:7c:ce:
         a8:e3:45:27:a8:bd:3c:36:ee:a2:0e:29:6a:6d:d2:b3:59:6a:
         b8:42:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 20:22:28 2024 by rpki-client on console-ams.rpki-client.org