Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33322d3332203d3e20323633333436.roa
File:                     323830343a313462383a3a2f33322d3332203d3e20323633333436.roa (raw, json)
Hash identifier:          sdTXJcjNET+tvQN9NXvGnmHyPj1O23/HgPoPxUsz+M0=
Subject key identifier:   3E:CD:EB:93:B6:94:49:4B:3F:A4:C1:E3:7F:D1:E3:F7:51:0A:E0:CD
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       568EC4B005A264A7A67057CD6175E954F240D9F9
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33322d3332203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:47:59 +0000
ROA not before:           Tue 23 Apr 2024 18:42:59 +0000
ROA not after:            Tue 22 Apr 2025 18:47:59 +0000
asID:                     263346
IP address blocks:        2804:14b8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8e:c4:b0:05:a2:64:a7:a6:70:57:cd:61:75:e9:54:f2:40:d9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:42:59 2024 GMT
            Not After : Apr 22 18:47:59 2025 GMT
        Subject: CN=3ECDEB93B694494B3FA4C1E37FD1E3F7510AE0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ca:07:35:ba:7e:87:a3:41:83:cb:55:ad:87:
                    e2:cb:7d:5d:ce:9c:e7:06:86:f7:e0:42:57:a0:e5:
                    c4:8e:ad:4b:68:86:f7:94:1c:db:36:f9:4f:62:fd:
                    e9:38:31:05:32:a3:7e:36:44:ba:47:62:6e:26:cc:
                    b8:e9:af:43:5f:4e:ce:d1:8e:c6:79:78:0a:c4:49:
                    b6:9b:79:f8:e1:07:5d:ae:6c:59:1b:12:15:72:c8:
                    e2:37:0e:84:b8:59:68:a0:52:c3:51:3e:17:de:5f:
                    79:61:b6:19:d1:f6:93:3d:af:9b:13:e6:06:60:68:
                    f9:66:0c:86:5e:45:c2:b2:0a:37:af:9e:21:00:cd:
                    e1:55:4f:d0:b0:a5:91:14:c4:a7:a2:4b:78:85:1d:
                    c0:ba:21:1b:20:af:33:8a:4b:26:05:5a:41:de:32:
                    52:59:68:e7:90:bd:6b:dc:61:99:42:3c:a6:5a:7a:
                    99:16:df:fe:80:4c:2a:f0:4c:97:36:83:34:a4:1e:
                    74:08:06:98:f9:ba:82:76:fb:0d:00:10:d9:f6:19:
                    16:37:54:a7:fb:ee:46:56:c2:c3:ec:c4:3a:04:f2:
                    b7:4f:43:57:5f:1f:7d:5f:12:77:7a:81:0c:d4:67:
                    53:31:3b:3e:72:0b:c9:4a:81:95:ed:a2:0c:ff:31:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CD:EB:93:B6:94:49:4B:3F:A4:C1:E3:7F:D1:E3:F7:51:0A:E0:CD
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33322d3332203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:71:bc:c4:23:91:26:1a:d2:88:57:c0:2e:b0:f3:2a:04:dd:
         c2:91:4a:a2:35:93:b9:a5:75:36:bb:af:b1:c4:ca:10:24:af:
         52:4a:a4:d2:cc:a8:6c:2b:55:70:21:1f:3d:40:4e:89:2f:44:
         67:f9:33:e6:1e:5f:71:e9:36:45:f5:b2:13:b0:10:82:76:89:
         47:0f:d8:c9:6e:3d:e5:7b:29:d8:ed:8c:e1:4e:5f:5c:04:1e:
         9c:64:28:29:5a:ed:25:19:b8:fe:d7:43:77:85:15:ac:4b:ac:
         ca:92:6e:d9:3a:ea:ff:4c:a1:40:72:02:39:3f:3e:28:ff:f0:
         f3:c5:d1:c7:1f:ed:d1:95:2c:25:66:50:3d:3d:65:55:bd:36:
         d2:f3:1e:6d:5c:60:8c:5d:29:f0:e6:2a:58:af:f9:b5:e8:83:
         f4:56:1b:f3:dd:4f:f8:83:04:4e:41:5d:83:59:8c:2c:e9:9d:
         9d:0c:0a:b6:d3:96:18:67:00:19:dd:b2:78:29:d5:c9:7a:cb:
         fa:5e:9e:f6:3e:63:44:29:39:b5:d0:86:46:ba:7f:12:70:eb:
         dc:e2:12:e4:d5:2e:cd:c6:61:4a:80:0a:52:ed:db:00:1b:f7:
         c2:07:ae:5f:d8:66:ff:3e:fb:79:9b:d8:d9:3d:be:62:ad:94:
         d8:0c:b3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org