Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a323030303a3a2f33352d3335203d3e20323633333436.roa
File:                     323830343a313462383a323030303a3a2f33352d3335203d3e20323633333436.roa (raw, json)
Hash identifier:          gyhwp64a7dp0w2FGuJhMBv9OrlL5znkBMCf7he33g8w=
Subject key identifier:   FC:45:C1:4D:47:28:35:56:D4:DB:EF:C6:6E:C4:6E:82:BF:34:A5:FC
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       4E1B81DC547362E66AFF309228A9EA85C83408EC
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a323030303a3a2f33352d3335203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:49:07 +0000
ROA not before:           Tue 23 Apr 2024 18:44:07 +0000
ROA not after:            Tue 22 Apr 2025 18:49:07 +0000
asID:                     263346
IP address blocks:        2804:14b8:2000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1b:81:dc:54:73:62:e6:6a:ff:30:92:28:a9:ea:85:c8:34:08:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:44:07 2024 GMT
            Not After : Apr 22 18:49:07 2025 GMT
        Subject: CN=FC45C14D47283556D4DBEFC66EC46E82BF34A5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:2f:96:bd:71:69:fb:41:fa:8a:15:61:aa:
                    4f:2f:33:20:2c:18:4e:ff:12:86:42:2e:ad:39:e0:
                    c2:66:39:65:03:77:44:57:5b:de:c0:5d:5d:c8:be:
                    88:a5:27:65:5b:06:e9:91:bf:5a:ae:8d:03:39:89:
                    b0:46:a6:1c:e4:39:ff:88:d2:44:a2:f4:b3:98:c9:
                    91:0f:68:41:08:1c:24:fa:33:4b:32:7a:20:67:b6:
                    ca:b3:f3:7d:81:9e:b8:34:a9:b2:1f:6d:20:d8:f3:
                    59:87:13:63:dd:ae:b9:03:fb:99:22:57:ff:70:01:
                    25:99:22:09:f4:53:85:58:e4:7f:47:8e:64:9e:44:
                    16:bc:ca:5b:6f:f5:bc:e0:db:45:8f:db:48:a7:ee:
                    17:89:35:29:25:db:e6:80:41:ea:88:18:14:88:01:
                    b1:da:a2:90:5b:e7:72:ad:82:15:11:d3:6e:27:8f:
                    78:c1:18:cb:51:3f:eb:29:f4:3b:7b:8d:01:a5:b6:
                    71:d3:71:eb:1d:f0:33:13:db:fb:ef:0f:b8:0c:af:
                    60:0c:19:51:e2:18:1a:88:3d:e7:1d:27:a1:c8:c6:
                    68:41:9c:34:a2:f7:0d:2f:bb:dd:f4:f8:30:b5:f5:
                    ee:46:4b:a0:ce:19:95:01:a2:e1:bf:23:29:4e:ea:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:45:C1:4D:47:28:35:56:D4:DB:EF:C6:6E:C4:6E:82:BF:34:A5:FC
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a323030303a3a2f33352d3335203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14b8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         00:26:a1:6b:41:36:78:70:23:17:ee:e0:ce:fa:6b:ca:41:52:
         2c:a3:18:84:e7:fb:78:fa:b9:86:0c:f8:64:bf:29:b5:06:b3:
         1b:b0:de:d8:34:77:e8:e9:74:ff:8f:c7:59:ef:8a:cc:cb:3a:
         c5:a2:2a:b3:98:c2:70:c7:73:fd:dc:af:9f:b2:39:54:67:ef:
         a0:c8:5e:41:01:e1:52:5d:f3:3a:00:26:f2:ea:95:b5:4a:4c:
         f8:98:d9:e5:75:89:0a:1c:a8:0f:30:aa:1f:55:58:54:4f:cc:
         a8:41:d8:69:65:f6:a9:e0:80:63:16:85:d0:23:66:ec:b2:6c:
         eb:36:38:6e:ea:4f:8e:c9:62:2d:09:4f:77:ec:a8:0f:a4:20:
         d2:c3:e3:4a:1a:00:67:1a:31:74:c9:05:fa:3b:c3:bb:0a:e0:
         23:e5:0d:a8:72:94:29:f1:36:31:5b:69:39:2d:ff:2d:09:f0:
         14:e0:71:55:93:b4:cd:c4:26:cf:d6:00:3d:d9:16:5e:95:03:
         fc:ac:47:f1:1d:36:c2:92:74:e7:ce:cb:08:bf:66:90:ee:80:
         d0:dc:a7:21:61:24:bf:48:78:3e:94:90:a8:29:1f:b7:32:8e:
         08:70:6b:46:f5:b7:cc:48:34:82:28:bd:59:c7:1b:16:0c:2a:
         eb:4f:d3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org