Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          gQUXjCh1dAig0YVK8yb0SbMZHZtnp7GucbGO2M1XbCE=
Subject key identifier:   8A:AC:0D:98:AF:95:B7:11:2F:89:7C:F8:3D:82:DA:96:B7:3C:A7:EC
Certificate issuer:       /CN=9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9
Certificate serial:       1A36F249BCA2B7D0D8BD2D4E8DEFCB4985B9CF68
Authority key identifier: 9A:78:08:6E:3F:E6:E3:14:3E:B9:A4:F9:C4:F5:4A:D2:F1:71:B0:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Sat 15 Jun 2024 15:49:51 +0000
ROA not before:           Sat 15 Jun 2024 15:44:51 +0000
ROA not after:            Sat 14 Jun 2025 15:49:51 +0000
asID:                     265500
IP address blocks:        2804:3518:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 14:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:36:f2:49:bc:a2:b7:d0:d8:bd:2d:4e:8d:ef:cb:49:85:b9:cf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9
        Validity
            Not Before: Jun 15 15:44:51 2024 GMT
            Not After : Jun 14 15:49:51 2025 GMT
        Subject: CN=8AAC0D98AF95B7112F897CF83D82DA96B73CA7EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:e8:80:47:f1:cf:6e:8f:74:9a:35:66:73:
                    7a:80:48:82:65:36:49:3e:23:24:64:be:2f:ce:20:
                    9e:be:00:20:f6:f2:41:45:83:a4:fd:87:01:e6:1f:
                    62:98:c8:83:d9:99:35:60:57:85:8b:80:e0:35:f7:
                    24:8a:60:ca:8b:a9:54:a1:27:9b:ed:db:3c:df:ec:
                    f9:1f:c4:04:4b:1a:74:83:49:2e:61:3e:5b:05:b4:
                    78:d3:a0:d7:db:8f:de:8e:3e:f3:ee:38:e7:93:56:
                    60:f7:e6:4d:8e:66:05:f1:78:03:5c:b8:fc:25:6a:
                    e0:e0:f2:87:e2:82:e5:76:f7:ef:d7:7b:1a:66:97:
                    8d:51:d5:21:d1:cc:d4:b9:95:9f:f2:a7:5c:c7:4d:
                    4a:3c:50:c8:2b:72:6f:2f:26:12:28:55:bb:bc:54:
                    da:e8:84:a3:13:bb:9b:9d:ee:63:18:87:75:6c:c6:
                    3f:aa:3a:96:64:d8:6c:c9:f4:5d:b9:d0:9b:7a:a8:
                    fc:29:6a:0a:24:7d:23:df:92:08:a1:a7:70:0e:06:
                    a9:2b:69:22:b3:de:d3:46:53:d7:5c:d8:f6:07:29:
                    40:2b:c7:5b:5d:c2:6c:0f:88:e7:95:fb:87:a9:eb:
                    49:93:d7:f1:bf:3a:21:bf:2e:aa:d2:ea:d5:ac:da:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AC:0D:98:AF:95:B7:11:2F:89:7C:F8:3D:82:DA:96:B7:3C:A7:EC
            X509v3 Authority Key Identifier:
                keyid:9A:78:08:6E:3F:E6:E3:14:3E:B9:A4:F9:C4:F5:4A:D2:F1:71:B0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A78086E3FE6E3143EB9A4F9C4F54AD2F171B0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:b0:a6:c3:bf:d4:95:2e:12:82:e0:0f:d6:78:59:61:e5:
         99:c0:91:d4:87:8d:08:e3:f0:4e:c5:cd:bc:c3:f6:e0:17:0d:
         ed:a0:94:fc:c6:b7:5d:0f:96:a6:b4:a8:5d:1c:9e:e6:cb:95:
         32:d7:e7:eb:1a:41:e9:4f:cc:1e:09:3f:47:d7:b9:e0:ee:13:
         7c:55:81:61:5b:c3:e7:bf:5a:7f:40:a5:3a:89:3e:5e:3e:27:
         d0:59:c9:9a:e4:b4:10:f8:13:c1:85:c8:26:30:d9:94:c9:0f:
         8f:80:39:e9:1e:7b:a8:06:10:b8:f2:4d:b2:fa:79:d0:bf:df:
         a7:04:25:ac:08:19:2e:31:6f:4c:2c:d0:43:ac:73:4a:ab:a8:
         50:b1:7f:c2:ca:92:b3:c8:ef:44:9c:bc:5a:0a:03:ff:60:8d:
         2f:fb:08:f5:17:fc:56:08:47:40:f8:43:2d:1f:05:09:2b:af:
         90:81:f2:59:bd:dd:ee:54:f1:83:ca:52:ca:fd:5f:9e:12:cb:
         19:bd:0b:4e:4c:27:00:03:25:7b:f3:23:57:73:ba:27:b8:23:
         0e:57:c8:9c:57:94:32:e6:ec:af:d6:e5:5a:b1:15:e6:bb:a4:
         b6:8f:68:cd:fd:c8:13:7d:66:18:82:9f:d8:c3:9a:a5:b7:fe:
         6b:1c:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 19:03:38 2024 by rpki-client on console-ams.rpki-client.org