Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d3332203d3e20323636393932.roa
File:                     323830343a343637633a3a2f33322d3332203d3e20323636393932.roa (raw, json)
Hash identifier:          xiXf4fLrG1AKQx8IPgYTkYY0KauLK22R+d+X1+ZNSqI=
Subject key identifier:   8E:B3:93:EB:CA:88:A3:66:A7:28:44:15:AD:D7:78:42:F2:DC:A3:51
Certificate issuer:       /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
Certificate serial:       2C165C9C002C6B752833E9CB2C55D783A617DB77
Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d3332203d3e20323636393932.roa
Signing time:             Thu 18 Apr 2024 18:28:00 +0000
ROA not before:           Thu 18 Apr 2024 18:23:00 +0000
ROA not after:            Thu 17 Apr 2025 18:28:00 +0000
asID:                     266992
IP address blocks:        2804:467c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:16:5c:9c:00:2c:6b:75:28:33:e9:cb:2c:55:d7:83:a6:17:db:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
        Validity
            Not Before: Apr 18 18:23:00 2024 GMT
            Not After : Apr 17 18:28:00 2025 GMT
        Subject: CN=8EB393EBCA88A366A7284415ADD77842F2DCA351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:f1:63:38:af:f2:30:c5:67:bb:85:da:a2:
                    de:9b:45:91:8d:66:8f:82:73:13:df:9f:47:66:a1:
                    7f:22:14:14:1c:99:95:2a:b5:32:8b:8f:50:f0:fb:
                    3f:fc:91:9f:e4:23:2e:b7:9b:c0:08:a7:78:f6:0f:
                    84:39:ef:20:5d:02:08:ad:2e:72:af:ba:05:48:24:
                    92:d8:34:db:d5:54:d3:2b:2a:54:ae:f6:3c:df:1a:
                    23:9e:22:fd:25:a4:ca:a1:0a:be:20:2c:f2:d7:e9:
                    65:31:11:f5:bb:00:f6:b4:d8:65:d8:64:17:4c:a1:
                    9a:51:3e:b0:b0:9e:27:92:11:5b:a7:b3:cc:87:45:
                    0d:46:38:96:be:ce:01:2d:24:dc:94:07:79:58:d9:
                    f6:bf:c6:90:2b:fe:e7:fe:cd:cc:1a:23:32:08:ef:
                    70:6a:d2:23:3b:61:2c:a8:b9:61:88:04:ea:ea:02:
                    e3:15:e5:79:2d:6e:57:c2:56:84:a5:17:0e:50:4f:
                    e4:df:89:15:ca:d1:67:7f:f4:da:d8:51:24:02:94:
                    e3:03:58:0f:90:57:d4:ea:ef:05:e8:5d:05:9e:3f:
                    cb:d8:a2:a4:74:31:d5:19:e9:b4:c1:10:0d:d0:6d:
                    bc:cc:73:39:51:a9:1d:c8:80:2c:17:6b:00:21:20:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B3:93:EB:CA:88:A3:66:A7:28:44:15:AD:D7:78:42:F2:DC:A3:51
            X509v3 Authority Key Identifier:
                keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d3332203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:467c::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:84:9d:22:98:75:8c:c9:8d:91:46:03:00:87:4a:52:59:b7:
         a2:e4:96:1d:49:50:98:79:26:10:fc:3f:3a:57:99:ce:3b:bd:
         6c:ab:ba:c9:93:27:c3:6a:d2:dd:61:cf:e5:86:85:2e:82:47:
         78:c7:dd:fc:7d:35:d9:f4:ce:07:d1:8c:1b:a1:12:cf:c5:4d:
         77:b9:71:44:a6:38:5d:c6:99:82:7d:d0:24:19:ae:09:67:d4:
         6e:2c:8b:32:eb:18:f0:4a:f9:c2:d3:5a:20:c2:dd:92:0d:6a:
         6d:06:9e:30:dc:b2:24:c3:9d:0c:22:40:4d:ea:c0:c6:37:fc:
         5e:75:1b:bd:71:25:fc:37:3c:6b:14:c4:2e:91:1c:61:e1:48:
         b1:87:2b:07:34:b3:04:3f:10:7c:81:ed:4b:f2:2c:7c:cd:0b:
         04:8c:cd:a0:39:da:6f:6a:8f:4a:f9:fc:f4:76:19:7c:2e:74:
         3d:3a:87:7e:67:b3:d8:25:68:19:1a:1d:25:9d:10:e0:f9:8c:
         87:b7:43:f6:19:c8:e8:9f:4a:51:2c:91:46:65:bc:7d:12:c9:
         5b:df:cd:08:56:1c:58:29:67:9a:aa:e1:d8:b9:33:d6:7b:7e:
         94:84:24:84:46:f0:6e:9a:2b:3b:f1:3c:b0:9b:76:83:07:57:
         b3:41:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org