Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a633030303a3a2f33342d3334203d3e20323638363633.roa
File:                     323830343a353461383a633030303a3a2f33342d3334203d3e20323638363633.roa (raw, json)
Hash identifier:          7yubzLpWHRgvi84PqG4OBuOLiMQCH4VITlZprIe3BMw=
Subject key identifier:   95:5D:FC:BD:FE:82:C9:E5:B0:41:7F:0F:8A:92:1C:3D:32:23:BF:B2
Certificate issuer:       /CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
Certificate serial:       1757660F37E68DDF1B494A4E8F0073A2D60EC1F1
Authority key identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a633030303a3a2f33342d3334203d3e20323638363633.roa
Signing time:             Mon 23 Sep 2024 13:32:41 +0000
ROA not before:           Mon 23 Sep 2024 13:27:41 +0000
ROA not after:            Mon 22 Sep 2025 13:32:41 +0000
asID:                     268663
IP address blocks:        2804:54a8:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 20:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:57:66:0f:37:e6:8d:df:1b:49:4a:4e:8f:00:73:a2:d6:0e:c1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
        Validity
            Not Before: Sep 23 13:27:41 2024 GMT
            Not After : Sep 22 13:32:41 2025 GMT
        Subject: CN=955DFCBDFE82C9E5B0417F0F8A921C3D3223BFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:28:41:7c:bf:7f:2d:42:c0:0d:75:73:9e:
                    c0:ac:8a:fc:e9:ba:f8:26:17:81:a9:9c:9c:43:71:
                    47:31:fb:43:f5:65:6d:7b:d4:e6:f6:31:64:16:50:
                    1f:b7:c9:26:1f:fe:f1:95:90:ae:70:26:2e:df:da:
                    31:ac:b5:17:55:00:dc:0f:c3:a9:23:38:14:42:71:
                    45:28:58:1e:b2:e9:be:c9:82:d6:9c:29:5d:77:ec:
                    1a:22:98:df:9e:9f:03:c2:57:81:7f:6b:0a:a7:db:
                    2d:f6:3f:02:62:2d:88:e7:92:2c:e0:a3:f7:eb:8e:
                    db:d0:80:84:51:47:49:93:01:ca:cd:47:13:b7:c1:
                    89:d1:82:93:5f:73:c7:d1:b3:33:93:58:14:89:ae:
                    22:d8:e7:6d:f8:90:91:14:0e:62:26:de:fe:79:6f:
                    35:eb:c1:98:12:eb:62:fb:4c:33:2a:17:62:5a:06:
                    7a:4f:2a:fc:66:ef:bf:40:46:bf:1b:79:69:b9:c3:
                    02:a3:27:3e:69:77:dc:04:c5:51:0a:39:93:69:96:
                    95:0b:a5:8b:8b:4d:76:e9:d0:f0:72:1c:bf:3b:ba:
                    fb:7b:7b:03:bf:56:bc:73:35:77:c3:59:36:c1:d8:
                    3a:ba:83:72:7c:02:c4:41:a2:63:79:45:62:80:90:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5D:FC:BD:FE:82:C9:E5:B0:41:7F:0F:8A:92:1C:3D:32:23:BF:B2
            X509v3 Authority Key Identifier:
                keyid:8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a633030303a3a2f33342d3334203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:e7:cf:f0:52:6e:dc:97:e0:27:e3:39:89:c2:ed:60:e1:9f:
         a5:96:e7:50:23:80:a3:26:82:25:1a:80:20:ba:3c:a6:c9:84:
         46:5f:39:80:4f:11:c9:7f:0c:5c:2c:e3:30:b5:5b:d5:2d:77:
         f5:8a:0c:5f:be:c5:be:11:fe:64:da:33:f2:7e:11:f2:b5:65:
         d0:aa:91:46:c7:da:b5:3f:43:4c:9d:50:3d:42:32:d1:86:0f:
         8a:8c:f5:a4:77:99:0f:03:ea:16:b1:6e:88:56:35:55:b4:4f:
         85:15:fd:c5:6c:9a:cc:e1:bc:38:bf:3f:51:24:c6:11:eb:84:
         5a:3c:58:e9:9d:a8:ea:95:cf:66:f8:c6:4a:af:1d:3d:78:0e:
         c5:72:10:57:a2:23:e6:e8:15:92:50:5c:39:1c:34:1e:5a:d5:
         d7:43:fe:4f:fa:c8:79:c2:26:11:4c:e9:3c:44:98:9a:66:90:
         69:76:2f:e7:17:b4:54:1e:b3:06:a2:1a:7b:5f:32:12:88:37:
         e0:e8:68:d5:a7:eb:71:56:12:91:61:3e:10:b3:cd:da:76:fe:
         49:67:82:49:f0:14:a8:51:35:46:58:2a:e6:0b:7a:d6:68:f0:
         7d:e9:0a:5f:04:22:25:9e:6f:16:90:fc:e9:e2:0d:29:df:d6:
         81:53:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org