Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a383030303a3a2f33332d3333203d3e20323633343935.roa
File:                     323830343a313262633a383030303a3a2f33332d3333203d3e20323633343935.roa (raw, json)
Hash identifier:          0Acx7qEVyQyMHmgxfF2hQPZHlEB44wOAugyj+0S/7XQ=
Subject key identifier:   3A:E3:E8:F5:E8:54:3A:82:FA:9F:D6:F6:D6:8C:25:60:91:D7:77:20
Certificate issuer:       /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
Certificate serial:       068FD75B72B38EF83D1A8B169A4991790367551B
Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a383030303a3a2f33332d3333203d3e20323633343935.roa
Signing time:             Tue 30 Apr 2024 13:53:02 +0000
ROA not before:           Tue 30 Apr 2024 13:48:02 +0000
ROA not after:            Tue 29 Apr 2025 13:53:02 +0000
asID:                     263495
IP address blocks:        2804:12bc:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8f:d7:5b:72:b3:8e:f8:3d:1a:8b:16:9a:49:91:79:03:67:55:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
        Validity
            Not Before: Apr 30 13:48:02 2024 GMT
            Not After : Apr 29 13:53:02 2025 GMT
        Subject: CN=3AE3E8F5E8543A82FA9FD6F6D68C256091D77720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:5a:c1:b6:c5:0b:e7:a6:f7:43:90:2a:7d:
                    34:32:6f:50:a3:88:43:3a:fa:7a:bb:47:88:d1:c1:
                    b0:b0:76:7c:b9:92:3c:71:1d:db:0a:ac:53:3d:3a:
                    c1:d1:ec:c1:87:16:40:7e:df:46:12:f9:c7:ec:d4:
                    f0:7e:ab:41:24:1c:73:58:d9:d4:b0:dc:60:db:23:
                    ae:ae:c0:48:6b:71:81:65:03:3b:e7:e0:4d:3e:d5:
                    22:53:89:fd:49:f0:a3:77:b6:d4:d9:8b:69:8b:86:
                    5b:4e:a2:aa:b0:70:38:f9:bd:df:63:97:fe:80:6b:
                    4d:2a:02:16:dc:ce:86:76:92:d7:74:5c:8b:ee:f8:
                    6b:73:39:20:2d:cc:0d:0b:0b:88:51:55:ed:02:5a:
                    0e:47:80:fc:9f:50:93:fe:48:b4:c9:5d:99:93:57:
                    a0:db:0a:14:63:f3:f3:95:6a:f3:b9:26:80:50:62:
                    83:81:f2:fd:f3:e2:18:87:06:4e:89:05:f7:8a:bf:
                    7e:27:8a:09:3e:27:9a:4c:fc:e9:19:61:8d:d0:38:
                    3c:92:6b:ec:c9:5b:36:e1:e2:cd:20:4b:eb:3f:f9:
                    51:e5:46:61:34:36:ef:70:c3:0b:84:e4:ab:aa:5e:
                    1a:d7:ae:fe:d0:78:62:33:30:6e:bc:18:6d:23:21:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E3:E8:F5:E8:54:3A:82:FA:9F:D6:F6:D6:8C:25:60:91:D7:77:20
            X509v3 Authority Key Identifier:
                keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a383030303a3a2f33332d3333203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:61:74:d3:8d:ee:2f:08:b9:10:23:79:f9:44:85:1f:67:93:
         e4:73:6c:f3:4b:e1:ec:a3:70:78:19:db:b2:9c:c9:95:78:29:
         32:40:88:85:cc:89:96:9a:86:94:a8:06:09:1d:c0:6a:d6:40:
         71:12:f5:ff:db:99:c2:9e:83:cf:7e:10:9d:52:d7:7a:99:d8:
         d5:19:70:9a:a0:bd:c7:c6:53:90:d7:6f:35:7d:cf:15:f7:94:
         25:1d:c9:e4:c9:2a:bf:9b:8e:36:08:25:69:46:ee:a9:88:10:
         e6:3a:42:09:a4:dd:e4:a5:77:f5:eb:a9:cf:7e:b7:53:20:48:
         5e:ad:4e:b5:c8:8a:cc:99:ba:28:18:3e:4e:c3:d5:29:77:24:
         22:f8:00:8d:67:bc:0b:b8:37:79:f3:35:19:58:6d:62:8c:b3:
         70:d8:46:94:6e:64:83:4e:af:55:d8:95:5f:56:a0:9e:9e:07:
         08:2c:93:fe:bd:f3:c4:e4:c2:1d:25:36:13:34:90:c0:10:64:
         a3:52:99:42:10:fc:4e:50:6c:01:e3:de:d8:42:ab:5f:4e:88:
         de:03:9e:51:61:f8:03:ed:b9:9a:c9:ac:77:e0:f8:89:b7:90:
         eb:f3:79:53:e8:36:36:4d:a7:20:a7:b6:03:a0:6c:e7:c2:4d:
         69:eb:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:21 2024 by rpki-client on console-ams.rpki-client.org