Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a383030303a3a2f33332d3333203d3e20323638323632.roa
File:                     323830343a346537343a383030303a3a2f33332d3333203d3e20323638323632.roa (raw, json)
Hash identifier:          jchBdgKxFZuJQg5fWi/H8TVw1i4R75Zd0746whc7Bhs=
Subject key identifier:   F0:8E:2F:C8:EC:9E:EA:D2:42:3A:14:43:03:0E:9F:BE:88:4C:75:E3
Certificate issuer:       /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial:       5254ADA963B23601CCA148665B2B161995C10DCF
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a383030303a3a2f33332d3333203d3e20323638323632.roa
Signing time:             Thu 25 Apr 2024 13:14:30 +0000
ROA not before:           Thu 25 Apr 2024 13:09:30 +0000
ROA not after:            Thu 24 Apr 2025 13:14:30 +0000
asID:                     268262
IP address blocks:        2804:4e74:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:54:ad:a9:63:b2:36:01:cc:a1:48:66:5b:2b:16:19:95:c1:0d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
        Validity
            Not Before: Apr 25 13:09:30 2024 GMT
            Not After : Apr 24 13:14:30 2025 GMT
        Subject: CN=F08E2FC8EC9EEAD2423A1443030E9FBE884C75E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:0c:c3:3d:1d:a2:68:82:51:1f:4b:f4:4a:
                    24:4a:35:e8:23:fe:d8:9a:ff:21:9e:44:d7:72:ca:
                    7f:9d:81:9d:a8:10:6a:f4:3c:b6:0a:4c:27:9f:4c:
                    2b:94:39:4f:6e:8b:fa:6e:0b:f5:d4:d9:83:3a:d4:
                    c1:20:0b:e6:6b:98:8a:a2:e3:ee:d0:78:3f:6f:79:
                    5f:d0:10:d5:d0:3a:a8:01:52:27:99:5f:2b:ff:e0:
                    0f:1c:d2:84:b7:67:e0:5b:5a:9d:cf:b8:56:41:13:
                    cc:3f:fa:1e:01:f4:bc:cd:93:3f:e7:23:c6:f8:a2:
                    ca:8d:7d:06:d9:08:f5:9a:b6:b5:1d:6c:c7:58:01:
                    10:dc:7e:4f:ea:52:90:67:33:aa:77:93:58:7f:7d:
                    6c:0f:0f:05:10:1d:d4:f8:21:8c:9d:e9:d6:53:41:
                    7d:62:f9:c1:52:dd:ee:b9:b7:02:40:f3:bb:48:ca:
                    f5:f7:71:21:9c:b9:f6:98:85:cb:5a:6a:2f:d9:e4:
                    9b:75:86:89:82:42:de:c1:d9:ad:0d:16:4e:37:11:
                    e0:9e:67:44:21:24:76:1f:0b:eb:40:07:9b:4e:00:
                    47:9d:bd:93:3e:a2:7f:22:93:ae:85:4b:6b:c5:ff:
                    52:1f:63:c9:c7:27:45:ee:52:46:b4:8d:8e:15:8a:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:2F:C8:EC:9E:EA:D2:42:3A:14:43:03:0E:9F:BE:88:4C:75:E3
            X509v3 Authority Key Identifier:
                keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a383030303a3a2f33332d3333203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5d:1e:ef:06:76:d8:c6:70:94:a2:d8:dd:ab:3d:3d:0f:e4:77:
         d8:60:d7:1b:86:94:23:e7:ef:4f:8a:58:b3:e1:76:bb:19:67:
         2f:e2:a8:90:0f:fd:3d:9c:b1:b8:c0:e2:41:fe:f8:0e:93:fc:
         3f:55:79:47:03:44:c1:a6:26:6d:8d:9f:92:92:bf:bf:cc:b2:
         21:08:43:5b:0c:f1:61:22:41:b7:b6:30:de:42:a4:a6:05:a4:
         42:b0:07:21:21:7f:29:36:e0:98:9b:f8:a1:2e:ae:9b:26:6a:
         77:66:a6:cc:69:7a:5b:0e:25:09:7d:6a:fe:df:63:bf:51:a6:
         1b:d7:9c:ef:e6:11:97:d2:a3:63:06:61:be:b9:4c:b3:a3:1d:
         a7:11:63:25:ee:a4:c1:18:92:8a:04:14:94:04:0e:60:6f:ee:
         7d:5a:a9:ea:cc:e8:58:f6:0e:41:e1:ae:ab:55:6e:bf:08:68:
         32:d3:d1:a4:38:1a:75:6f:42:ca:d1:bd:50:21:4f:24:97:15:
         33:97:87:0d:5e:f3:b7:4e:47:9f:73:44:40:84:c5:fd:79:c8:
         53:17:b0:d8:09:62:01:83:53:4e:25:a8:7d:a8:25:b7:d1:40:
         de:3e:c9:28:5c:73:6a:03:d2:d7:0c:e2:99:a4:c6:6b:8c:6f:
         7d:1e:e6:34
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUlStqWOyNgHMoUhmWysWGZXBDc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4
QkVEOEE2OTAeFw0yNDA0MjUxMzA5MzBaFw0yNTA0MjQxMzE0MzBaMDMxMTAvBgNV
BAMTKEYwOEUyRkM4RUM5RUVBRDI0MjNBMTQ0MzAzMEU5RkJFODg0Qzc1RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TgzDPR2iaIJRH0v0SiRKNegj
/tia/yGeRNdyyn+dgZ2oEGr0PLYKTCefTCuUOU9ui/puC/XU2YM61MEgC+ZrmIqi
4+7QeD9veV/QENXQOqgBUieZXyv/4A8c0oS3Z+BbWp3PuFZBE8w/+h4B9LzNkz/n
I8b4osqNfQbZCPWatrUdbMdYARDcfk/qUpBnM6p3k1h/fWwPDwUQHdT4IYyd6dZT
QX1i+cFS3e65twJA87tIyvX3cSGcufaYhctaai/Z5Jt1homCQt7B2a0NFk43EeCe
Z0QhJHYfC+tAB5tOAEedvZM+on8ik66FS2vF/1IfY8nHJ0XuUka0jY4VitOJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU8I4vyOye6tJCOhRDAw6fvohMdeMwHwYDVR0j
BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl
VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF
RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0WGhOb0RwemJaTmpXVHI5S3IyWVFnN0poRjZlMVZIamNuRms3WDNUZVZqLzAv
MzIzODMwMzQzYTM0NjUzNzM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODMyMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETnSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBdHu8GdtjGcJSi2N2rPT0P5HfYYNcbhpQj5+9Piliz4Xa7GWcv4qiQD/09
nLG4wOJB/vgOk/w/VXlHA0TBpiZtjZ+Skr+/zLIhCENbDPFhIkG3tjDeQqSmBaRC
sAchIX8pNuCYm/ihLq6bJmp3ZqbMaXpbDiUJfWr+32O/UaYb15zv5hGX0qNjBmG+
uUyzox2nEWMl7qTBGJKKBBSUBA5gb+59WqnqzOhY9g5B4a6rVW6/CGgy09GkOBp1
b0LK0b1QIU8klxUzl4cNXvO3Tkefc0RAhMX9echTF7DYCWIBg1NOJah9qCW30UDe
PskoXHNqA9LXDOKZpMZrjG99HuY0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org