Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a383030303a3a2f33352d3335203d3e20323633333436.roa
File:                     323830343a313462383a383030303a3a2f33352d3335203d3e20323633333436.roa (raw, json)
Hash identifier:          zgWyMyIBq6xabnUTngD2hKYnO+M/5FBQ7+uHBR8czm0=
Subject key identifier:   E8:31:2D:52:35:37:BB:FB:08:76:9C:18:B7:DC:B2:2A:A7:DA:39:6B
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       2BFC030471F390F9AB65925319F974C0BC63062A
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a383030303a3a2f33352d3335203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:49:22 +0000
ROA not before:           Tue 23 Apr 2024 18:44:22 +0000
ROA not after:            Tue 22 Apr 2025 18:49:22 +0000
asID:                     263346
IP address blocks:        2804:14b8:8000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fc:03:04:71:f3:90:f9:ab:65:92:53:19:f9:74:c0:bc:63:06:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:44:22 2024 GMT
            Not After : Apr 22 18:49:22 2025 GMT
        Subject: CN=E8312D523537BBFB08769C18B7DCB22AA7DA396B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:52:b6:a8:87:4b:d5:20:09:72:31:65:90:
                    2a:ec:81:4f:1f:b4:4c:73:9d:36:11:3a:9d:df:02:
                    9f:9c:f6:2d:12:33:12:b5:5a:eb:dd:09:40:9b:0a:
                    95:66:9a:99:bc:c4:eb:df:cc:c7:98:6a:17:96:b0:
                    fc:53:a1:9e:b0:be:d6:a9:8d:17:65:79:23:b3:1b:
                    18:d0:79:19:aa:94:a7:d1:b8:bc:ce:ee:5d:a7:4b:
                    5e:1c:64:dc:3b:ba:4d:95:2d:94:db:cd:e1:6f:bc:
                    d6:da:f2:1a:1e:b4:3d:42:b7:15:1b:7d:fa:7a:81:
                    5e:5d:f7:dc:44:53:d4:a2:98:75:41:ef:98:2e:df:
                    50:bc:66:77:f5:84:67:02:d1:72:7a:86:5f:08:b2:
                    7c:6b:3f:e3:fb:fa:5c:6b:aa:d6:ca:02:27:24:37:
                    05:f2:ac:15:95:36:72:59:72:bb:9f:6e:48:7c:74:
                    ef:49:6b:61:3b:1f:80:1a:fb:fa:45:bb:66:12:06:
                    5d:38:d8:71:1b:1a:f9:79:c8:ec:73:a7:8b:dc:57:
                    60:1a:46:41:32:17:8f:1d:fb:e5:c4:96:00:c0:3f:
                    d9:bb:fe:b2:c0:43:98:38:e5:f7:cf:f2:e8:6b:35:
                    78:70:70:9b:2e:08:ab:db:f4:7e:e7:98:93:bc:ca:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:2D:52:35:37:BB:FB:08:76:9C:18:B7:DC:B2:2A:A7:DA:39:6B
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a383030303a3a2f33352d3335203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14b8:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b8:2c:2d:fc:18:40:e3:84:08:97:85:db:a4:77:9f:78:e5:65:
         08:eb:a5:96:83:5c:6a:8d:f3:23:a4:8a:c3:bf:74:21:59:53:
         5a:de:70:cc:c4:43:e3:d3:e8:ac:5c:92:00:ae:60:d5:46:de:
         54:ab:97:fe:16:d5:5a:b5:8a:2e:ca:9f:0e:de:9c:97:55:6a:
         8f:d7:e6:e8:5b:b6:6b:c3:ce:19:9f:b7:16:bc:27:78:56:65:
         03:7f:61:38:56:86:52:77:7d:14:2b:a9:ec:5f:e2:83:75:df:
         55:a5:43:b4:3c:7e:f6:09:56:64:93:71:5c:ae:36:6c:7c:0c:
         fa:41:97:a5:2c:ed:c7:c2:7c:ba:4b:ad:82:5d:a1:f0:14:ca:
         51:c2:4c:30:73:7d:b5:cc:43:5c:81:a6:88:50:a9:3b:91:86:
         c3:b3:c1:6b:8d:d0:6d:62:e2:f5:26:d7:f0:f0:c5:db:24:d4:
         e4:ed:a2:a3:d0:f4:3b:82:11:95:fd:76:98:62:87:b9:f3:5b:
         ff:7f:2d:44:ff:68:5e:a7:75:be:a4:59:8c:7c:0b:32:1e:52:
         b9:36:0b:c7:bb:aa:83:38:95:b0:89:0f:b2:24:68:3c:1a:45:
         2a:16:e3:02:3e:04:37:6a:66:57:5c:aa:e0:c8:39:a8:39:11:
         11:b2:de:3c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUK/wDBHHzkPmrZZJTGfl0wLxjBiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2
QkJCRENDNjAeFw0yNDA0MjMxODQ0MjJaFw0yNTA0MjIxODQ5MjJaMDMxMTAvBgNV
BAMTKEU4MzEyRDUyMzUzN0JCRkIwODc2OUMxOEI3RENCMjJBQTdEQTM5NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChU1K2qIdL1SAJcjFlkCrsgU8f
tExznTYROp3fAp+c9i0SMxK1WuvdCUCbCpVmmpm8xOvfzMeYaheWsPxToZ6wvtap
jRdleSOzGxjQeRmqlKfRuLzO7l2nS14cZNw7uk2VLZTbzeFvvNba8hoetD1CtxUb
ffp6gV5d99xEU9SimHVB75gu31C8Znf1hGcC0XJ6hl8IsnxrP+P7+lxrqtbKAick
NwXyrBWVNnJZcrufbkh8dO9Ja2E7H4Aa+/pFu2YSBl042HEbGvl5yOxzp4vcV2Aa
RkEyF48d++XElgDAP9m7/rLAQ5g45ffP8uhrNXhwcJsuCKvb9H7nmJO8ynfrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6DEtUjU3u/sIdpwYt9yyKqfaOWswHwYDVR0j
BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx
a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1
MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1b1ZVNHo5M1o3WmI1OUR6WGN4Y1h3ZFNhZ1JjS1ZWRlNOaUdIc1ppMWtKLzAv
MzIzODMwMzQzYTMxMzQ2MjM4M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMzMzMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEFLiAMA0GCSqGSIb3DQEBCwUA
A4IBAQC4LC38GEDjhAiXhdukd5945WUI66WWg1xqjfMjpIrDv3QhWVNa3nDMxEPj
0+isXJIArmDVRt5Uq5f+FtVatYouyp8O3pyXVWqP1+boW7Zrw84Zn7cWvCd4VmUD
f2E4VoZSd30UK6nsX+KDdd9VpUO0PH72CVZkk3FcrjZsfAz6QZelLO3Hwny6S62C
XaHwFMpRwkwwc321zENcgaaIUKk7kYbDs8FrjdBtYuL1Jtfw8MXbJNTk7aKj0PQ7
ghGV/XaYYoe581v/fy1E/2hep3W+pFmMfAsyHlK5NgvHu6qDOJWwiQ+yJGg8GkUq
FuMCPgQ3amZXXKrgyDmoORERst48
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org