Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a313a3a2f34382d3438203d3e20323633343935.roa
File:                     323830343a313262633a313a3a2f34382d3438203d3e20323633343935.roa (raw, json)
Hash identifier:          YAdkNaV+N1cR7NMZnTphQknqatI28Dtg/rkUfU8TzsI=
Subject key identifier:   24:21:1B:6C:F5:4C:24:84:04:D2:DC:CC:FB:74:99:4A:38:19:5E:B2
Certificate issuer:       /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
Certificate serial:       72BC9F707C120BBE5DE190DC7CFCD79E505F3B2B
Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a313a3a2f34382d3438203d3e20323633343935.roa
Signing time:             Tue 30 Apr 2024 13:52:50 +0000
ROA not before:           Tue 30 Apr 2024 13:47:50 +0000
ROA not after:            Tue 29 Apr 2025 13:52:50 +0000
asID:                     263495
IP address blocks:        2804:12bc:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bc:9f:70:7c:12:0b:be:5d:e1:90:dc:7c:fc:d7:9e:50:5f:3b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
        Validity
            Not Before: Apr 30 13:47:50 2024 GMT
            Not After : Apr 29 13:52:50 2025 GMT
        Subject: CN=24211B6CF54C248404D2DCCCFB74994A38195EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:5d:72:61:04:97:d4:8a:3a:18:58:96:41:
                    7a:22:d3:9a:e8:be:84:d7:2a:f6:24:87:e5:50:59:
                    5d:3f:ec:10:00:1d:a3:05:b2:e5:48:84:d3:a0:54:
                    86:86:99:ed:d0:c8:13:c3:1d:c5:2a:02:43:ad:be:
                    31:63:b9:d2:17:41:98:c5:da:07:2c:2e:db:fe:1e:
                    f3:c2:4b:89:92:59:d4:b5:f0:84:f2:a8:1f:a3:a8:
                    d0:a2:03:49:1f:51:d1:39:a0:11:7c:50:3f:85:54:
                    ae:c9:57:4e:8a:52:7e:23:88:df:fa:61:91:0b:97:
                    7a:45:32:b8:1c:58:6b:19:f3:7e:35:8a:fd:e7:c1:
                    ac:15:88:bc:20:04:e4:4b:c0:27:b0:77:bd:b1:70:
                    d1:d8:82:e0:32:aa:87:1e:04:c0:1a:dc:2a:14:5c:
                    84:a2:bb:82:68:9f:41:cd:b8:b6:0f:db:f9:13:37:
                    bd:20:ab:1e:01:99:8d:86:06:df:ff:90:09:8c:e4:
                    e3:4d:7f:69:4d:dc:f2:dd:35:04:bb:c6:c1:1e:54:
                    c5:12:71:ee:36:2f:75:6e:f6:67:2d:ec:c1:4d:08:
                    cf:59:2c:d5:99:8d:c8:c0:d4:de:1f:0c:97:5a:3c:
                    5c:ad:52:0d:74:45:27:72:7c:2c:70:e1:54:76:b1:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:21:1B:6C:F5:4C:24:84:04:D2:DC:CC:FB:74:99:4A:38:19:5E:B2
            X509v3 Authority Key Identifier:
                keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a313a3a2f34382d3438203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12bc:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:4e:94:10:ad:ba:88:de:f8:c4:d3:87:3c:83:57:ae:40:a0:
         c8:9c:7c:5d:53:5a:87:a5:22:53:34:21:fd:14:de:25:89:6e:
         a2:e7:4e:c1:7b:4d:94:e1:c3:42:5f:05:a6:3e:f4:88:6d:04:
         b1:58:df:ef:63:b8:6f:74:94:e1:0a:ce:73:8e:92:fd:a3:13:
         2d:56:3d:65:61:1f:91:c7:a3:f1:0e:b0:2c:af:ef:7a:31:3d:
         3f:f7:26:5d:9c:f5:f0:c4:2b:9e:58:3d:73:ec:77:49:9d:2a:
         f8:3f:dc:bd:60:40:1e:23:40:1c:2c:57:d8:54:9c:89:8a:9d:
         d8:d8:c5:ce:99:92:5f:f5:b1:45:5d:a3:0f:43:35:8d:57:ad:
         f3:3e:84:82:1b:ed:09:da:f0:d0:74:d9:c6:cd:cf:df:c1:97:
         d0:5c:11:05:96:3d:10:ff:ac:a4:3c:17:ab:51:49:c3:f2:eb:
         23:bb:47:b1:12:89:61:53:49:4b:8a:ce:b3:89:74:d5:64:dc:
         95:da:c6:37:39:de:56:9b:ba:b3:2c:ac:cc:e8:4c:43:67:71:
         44:d3:f9:1e:64:bd:32:33:b2:d2:70:6f:41:7f:fd:a3:17:5a:
         3a:cb:1e:63:71:65:a7:ef:76:33:8a:9a:38:34:42:c5:4e:2a:
         2b:be:ba:a8
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUcryfcHwSC75d4ZDcfPzXnlBfOyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2
NEE2M0RENzAeFw0yNDA0MzAxMzQ3NTBaFw0yNTA0MjkxMzUyNTBaMDMxMTAvBgNV
BAMTKDI0MjExQjZDRjU0QzI0ODQwNEQyRENDQ0ZCNzQ5OTRBMzgxOTVFQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0l1yYQSX1Io6GFiWQXoi05ro
voTXKvYkh+VQWV0/7BAAHaMFsuVIhNOgVIaGme3QyBPDHcUqAkOtvjFjudIXQZjF
2gcsLtv+HvPCS4mSWdS18ITyqB+jqNCiA0kfUdE5oBF8UD+FVK7JV06KUn4jiN/6
YZELl3pFMrgcWGsZ8341iv3nwawViLwgBORLwCewd72xcNHYguAyqoceBMAa3CoU
XISiu4Jon0HNuLYP2/kTN70gqx4BmY2GBt//kAmM5ONNf2lN3PLdNQS7xsEeVMUS
ce42L3Vu9mct7MFNCM9ZLNWZjcjA1N4fDJdaPFytUg10RSdyfCxw4VR2sc1RAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUJCEbbPVMJIQE0tzM+3SZSjgZXrIwHwYDVR0j
BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp
U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux
ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1aXlCWFdwUFVISnp6UFoxQkViU2s2WUMydXRITkFpUzVyRW9VbW9maVNZLzAv
MzIzODMwMzQzYTMxMzI2MjYzM2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMzM0MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEErwAATANBgkqhkiG9w0BAQsFAAOCAQEA
Q06UEK26iN74xNOHPINXrkCgyJx8XVNah6UiUzQh/RTeJYluoudOwXtNlOHDQl8F
pj70iG0EsVjf72O4b3SU4QrOc46S/aMTLVY9ZWEfkcej8Q6wLK/vejE9P/cmXZz1
8MQrnlg9c+x3SZ0q+D/cvWBAHiNAHCxX2FSciYqd2NjFzpmSX/WxRV2jD0M1jVet
8z6EghvtCdrw0HTZxs3P38GX0FwRBZY9EP+spDwXq1FJw/LrI7tHsRKJYVNJS4rO
s4l01WTcldrGNzneVpu6syyszOhMQ2dxRNP5HmS9MjOy0nBvQX/9oxdaOsseY3Fl
p+92M4qaODRCxU4qK766qA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:21 2024 by rpki-client on console-ams.rpki-client.org