Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a343030303a3a2f33342d3334203d3e20323633333436.roa
File:                     323830343a313462383a343030303a3a2f33342d3334203d3e20323633333436.roa (raw, json)
Hash identifier:          XHBF+0IVTOY5fCa99JUOtht6gTovoHELuaanZMHL0Oc=
Subject key identifier:   C6:F7:CA:99:4D:BE:1F:22:0D:63:0A:3E:01:68:0A:47:F3:4F:91:9C
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       137A7BB213F2B721CCF7AAE0987E086895F359CA
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a343030303a3a2f33342d3334203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:49:09 +0000
ROA not before:           Tue 23 Apr 2024 18:44:09 +0000
ROA not after:            Tue 22 Apr 2025 18:49:09 +0000
asID:                     263346
IP address blocks:        2804:14b8:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7a:7b:b2:13:f2:b7:21:cc:f7:aa:e0:98:7e:08:68:95:f3:59:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:44:09 2024 GMT
            Not After : Apr 22 18:49:09 2025 GMT
        Subject: CN=C6F7CA994DBE1F220D630A3E01680A47F34F919C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:77:bc:12:82:e6:db:6a:72:7c:48:15:85:
                    9e:cb:71:b3:47:25:cd:89:be:43:88:9b:17:ce:f1:
                    2d:d1:6f:f5:46:4c:58:c1:38:66:5a:e2:97:a6:3f:
                    a8:82:6c:ef:44:cc:d0:b7:2c:38:db:6e:5d:f0:bf:
                    76:0f:08:ed:ef:cf:a6:91:04:a8:e7:a1:ea:4e:03:
                    44:4d:7e:39:b8:18:90:0b:d4:3c:7b:0c:de:94:7d:
                    75:6d:8f:69:8a:3a:f5:dc:ed:33:ca:e4:23:3b:71:
                    d7:a8:e3:d4:82:1d:32:91:b4:92:a5:cc:d2:85:bc:
                    e4:85:73:6b:7c:56:a8:e2:b6:57:7e:5c:77:28:b2:
                    17:b0:f1:fa:ad:e4:d5:90:14:bc:a7:6a:d9:61:9e:
                    30:0e:b5:ab:43:0d:34:95:97:fb:d3:97:23:d1:f6:
                    d7:27:42:83:6b:61:fc:16:57:64:5a:b5:66:da:1d:
                    07:ed:f9:37:7b:57:1a:ed:32:7e:4e:35:91:15:d5:
                    82:aa:b8:60:47:d5:fb:3f:45:ef:ac:df:33:90:1a:
                    c7:3a:00:e5:96:5a:1b:68:15:05:53:64:30:2a:ea:
                    fe:ab:ed:92:08:68:45:3f:ae:48:3c:46:d4:e7:e8:
                    64:66:ee:da:0a:e6:9a:d5:49:49:b0:18:e6:82:a5:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:CA:99:4D:BE:1F:22:0D:63:0A:3E:01:68:0A:47:F3:4F:91:9C
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a343030303a3a2f33342d3334203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14b8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:ea:8c:4e:88:b8:4a:3d:23:6b:1c:8f:a0:87:ca:70:d1:
         42:01:85:91:c9:4b:88:26:86:34:2e:aa:03:b2:b4:75:84:6c:
         72:2b:b9:69:33:ed:56:66:1e:86:06:b1:ba:67:c0:04:11:0f:
         6f:e0:0f:91:9a:37:25:24:64:fd:93:3c:2a:9d:99:a0:3c:6c:
         1c:1e:b9:45:3f:cb:0c:38:58:28:f2:7c:08:fa:d2:38:26:9d:
         de:20:b1:ef:1c:c4:6b:57:95:85:6a:76:c0:36:71:4e:85:d9:
         6f:48:89:d6:f5:17:43:4b:dc:54:11:71:7e:a6:ec:88:fe:9d:
         ad:75:de:e0:33:56:9c:3e:a2:13:35:d7:13:22:6d:ef:9d:07:
         de:68:86:17:21:55:68:9f:7f:96:de:75:95:88:27:dc:01:ea:
         17:2c:26:0b:9b:07:a2:64:ba:a2:39:cb:c1:21:d3:a2:21:03:
         6e:1e:d7:6b:16:32:06:e8:10:00:d8:a5:5c:96:51:9a:f0:6f:
         c9:89:01:4a:5a:82:cf:e7:ab:ec:1c:2f:c2:6f:5a:f4:e5:3d:
         a2:6a:ad:57:9f:c6:e2:6c:80:75:13:e5:02:4f:9b:6c:fc:59:
         ff:af:89:7e:9b:ac:6b:ef:5f:2c:18:18:3c:fc:c6:25:97:bb:
         a8:0d:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:21 2024 by rpki-client on console-ams.rpki-client.org