Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33342d3334203d3e20323633333436.roa
File:                     323830343a313462383a3a2f33342d3334203d3e20323633333436.roa (raw, json)
Hash identifier:          z2IDL/qbRvWy6HRJrliehOkDWzAcYFvAfUTkmoI9inY=
Subject key identifier:   08:6A:14:53:28:9A:05:22:77:F6:C3:B0:69:BA:DB:DD:7B:1E:D9:99
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       02F3E029CD0E3477311382BCD31FBF658852967E
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33342d3334203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:48:41 +0000
ROA not before:           Tue 23 Apr 2024 18:43:41 +0000
ROA not after:            Tue 22 Apr 2025 18:48:41 +0000
asID:                     263346
IP address blocks:        2804:14b8::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f3:e0:29:cd:0e:34:77:31:13:82:bc:d3:1f:bf:65:88:52:96:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:43:41 2024 GMT
            Not After : Apr 22 18:48:41 2025 GMT
        Subject: CN=086A1453289A052277F6C3B069BADBDD7B1ED999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:90:af:9c:30:07:ee:db:d1:f8:69:c2:a2:
                    30:ad:99:d9:c0:9c:ce:86:06:05:9f:fa:2b:e8:f0:
                    c5:41:8a:8d:5a:25:12:32:1b:9f:f8:c6:d4:4e:c2:
                    11:7c:03:58:34:1a:45:c6:51:0e:3e:aa:ba:2a:4f:
                    e8:b5:ce:2f:4f:a8:f3:d1:d0:a1:d8:91:a5:cc:97:
                    1c:9c:68:13:ae:84:60:ca:14:97:a6:60:23:f9:f0:
                    7d:c3:23:ab:08:b1:fa:26:39:5f:e0:4c:82:2e:ea:
                    ba:99:81:04:a9:98:17:d9:18:e9:36:f9:ac:bc:2d:
                    5f:ba:7e:a0:d1:62:d9:cc:db:1b:95:b3:27:e5:3f:
                    b0:09:a8:b1:30:4e:8d:52:b4:e6:91:2b:31:b9:a4:
                    16:27:a7:5e:a0:6d:38:52:51:3a:24:90:de:87:ee:
                    09:a1:04:20:35:fa:d2:34:03:d0:9d:16:e7:8e:43:
                    b6:f0:26:5b:9a:d6:2a:5a:fe:d2:d8:2c:28:fa:79:
                    a3:be:4a:d8:ab:33:3e:50:56:29:c7:02:3b:90:c5:
                    29:b8:fe:c2:e0:ec:f5:ee:29:ba:24:24:11:68:66:
                    d8:4c:6f:e9:97:40:b3:ba:4c:fa:0e:8d:3e:89:64:
                    4e:68:cc:a9:3a:45:77:36:88:c9:4b:c0:32:31:73:
                    31:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6A:14:53:28:9A:05:22:77:F6:C3:B0:69:BA:DB:DD:7B:1E:D9:99
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33342d3334203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14b8::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:83:07:08:4c:56:10:f5:71:2a:0c:dd:d2:5d:3a:47:bf:
         20:8e:57:7b:16:a7:a0:9d:bc:29:d0:0e:63:ba:16:26:6f:90:
         19:27:54:8a:55:76:a0:92:ff:b1:fd:69:1d:df:80:a0:62:d8:
         62:82:9d:a5:ff:90:a1:0e:97:48:4c:2b:52:1f:6e:ce:21:12:
         0e:b1:8d:f2:19:42:d4:0d:6d:81:a9:87:83:9e:ab:82:bd:6d:
         2b:71:1a:65:d9:9a:be:6a:6f:45:0e:b6:ba:d3:a5:47:2e:6d:
         33:43:2b:a8:ce:2d:1d:1a:06:52:d7:da:d8:6a:33:09:d7:32:
         18:fa:d0:c9:bd:82:d9:d4:8e:29:14:91:97:22:a9:7c:fc:e7:
         17:80:9a:38:0f:2b:5a:0d:9e:52:67:b1:fe:e6:c2:ff:77:db:
         71:fb:ed:3a:0e:f7:bc:74:e0:0d:09:ac:c1:32:a3:fb:3f:1c:
         b2:82:69:da:d5:42:1d:fa:86:69:cf:b3:03:9f:a0:b2:cb:c7:
         23:11:64:2d:cc:cc:86:a6:90:ef:bc:b3:5a:c6:c2:35:09:e9:
         2a:83:93:c3:06:34:77:2e:94:d6:f7:69:cb:9a:ce:dc:11:4b:
         3c:78:12:55:fb:a6:d2:81:32:c4:b1:4d:59:4d:96:f0:e6:ba:
         6e:02:17:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAvPgKc0ONHcxE4K80x+/ZYhSln4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2
QkJCRENDNjAeFw0yNDA0MjMxODQzNDFaFw0yNTA0MjIxODQ4NDFaMDMxMTAvBgNV
BAMTKDA4NkExNDUzMjg5QTA1MjI3N0Y2QzNCMDY5QkFEQkREN0IxRUQ5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYpCvnDAH7tvR+GnCojCtmdnA
nM6GBgWf+ivo8MVBio1aJRIyG5/4xtROwhF8A1g0GkXGUQ4+qroqT+i1zi9PqPPR
0KHYkaXMlxycaBOuhGDKFJemYCP58H3DI6sIsfomOV/gTIIu6rqZgQSpmBfZGOk2
+ay8LV+6fqDRYtnM2xuVsyflP7AJqLEwTo1StOaRKzG5pBYnp16gbThSUTokkN6H
7gmhBCA1+tI0A9CdFueOQ7bwJlua1ipa/tLYLCj6eaO+StirMz5QVinHAjuQxSm4
/sLg7PXuKbokJBFoZthMb+mXQLO6TPoOjT6JZE5ozKk6RXc2iMlLwDIxczEVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCGoUUyiaBSJ39sOwabrb3Xse2ZkwHwYDVR0j
BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx
a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1
MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1b1ZVNHo5M1o3WmI1OUR6WGN4Y1h3ZFNhZ1JjS1ZWRlNOaUdIc1ppMWtKLzAv
MzIzODMwMzQzYTMxMzQ2MjM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMz
MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQUuAAwDQYJKoZIhvcNAQELBQADggEBAEAvgwcI
TFYQ9XEqDN3SXTpHvyCOV3sWp6CdvCnQDmO6FiZvkBknVIpVdqCS/7H9aR3fgKBi
2GKCnaX/kKEOl0hMK1Ifbs4hEg6xjfIZQtQNbYGph4Oeq4K9bStxGmXZmr5qb0UO
trrTpUcubTNDK6jOLR0aBlLX2thqMwnXMhj60Mm9gtnUjikUkZciqXz85xeAmjgP
K1oNnlJnsf7mwv9323H77ToO97x04A0JrMEyo/s/HLKCadrVQh36hmnPswOfoLLL
xyMRZC3MzIamkO+8s1rGwjUJ6SqDk8MGNHculNb3acuaztwRSzx4ElX7ptKBMsSx
TVlNlvDmum4CF68=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org