Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33352d3335203d3e20323633333436.roa
File:                     323830343a313462383a3a2f33352d3335203d3e20323633333436.roa (raw, json)
Hash identifier:          BMpx+0doO5+/Jgw326yj4XskEY8FiVBQz0o0UzLSqtY=
Subject key identifier:   3C:B1:7F:DC:DE:50:C0:B9:C4:32:D4:43:74:35:53:89:73:C5:BC:85
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       47F78CB32D93E4E9590A4B6E8A9F8A57EA6661B1
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33352d3335203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:49:04 +0000
ROA not before:           Tue 23 Apr 2024 18:44:04 +0000
ROA not after:            Tue 22 Apr 2025 18:49:04 +0000
asID:                     263346
IP address blocks:        2804:14b8::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f7:8c:b3:2d:93:e4:e9:59:0a:4b:6e:8a:9f:8a:57:ea:66:61:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:44:04 2024 GMT
            Not After : Apr 22 18:49:04 2025 GMT
        Subject: CN=3CB17FDCDE50C0B9C432D4437435538973C5BC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1c:95:e1:16:f7:77:1a:a9:88:02:f6:00:9c:
                    35:47:13:65:84:15:49:61:90:08:47:4b:eb:7e:e2:
                    c5:52:c0:d6:00:89:4c:ff:43:7d:9c:e6:67:f5:ea:
                    e3:f1:a6:03:4f:f4:d2:c7:bb:09:b0:a1:30:ab:1a:
                    ab:31:1d:60:b6:cd:13:42:6b:af:df:70:75:15:49:
                    f4:a4:d6:57:1f:46:13:cf:cc:48:5c:e3:99:69:94:
                    b5:25:f1:a7:08:00:b1:17:5b:fc:03:50:a9:c2:16:
                    b7:b4:5d:32:dd:93:6c:2b:1f:7a:4d:c1:a2:3e:87:
                    e5:40:78:e7:c7:e7:62:26:ce:1f:93:58:af:48:c7:
                    f5:6f:fa:a2:80:0b:83:a4:47:0b:01:eb:4e:89:58:
                    1e:0a:99:c6:0c:80:c9:65:dc:f9:38:a3:6a:78:8b:
                    4a:17:a3:72:f8:93:6f:9e:a3:9c:6c:d1:ea:9d:6a:
                    0b:a1:86:1d:90:be:c5:55:2c:a2:da:91:74:3f:0f:
                    dc:ea:60:01:c7:a9:c0:1f:17:9e:8d:e8:88:7a:1f:
                    8c:c1:fe:15:9a:81:6a:b6:bc:c5:c4:79:e4:12:d7:
                    10:c9:7f:bd:e9:b4:e8:ad:9c:5f:48:95:a3:53:56:
                    3a:72:86:e0:81:e9:58:71:0f:59:3a:03:4e:f8:54:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B1:7F:DC:DE:50:C0:B9:C4:32:D4:43:74:35:53:89:73:C5:BC:85
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33352d3335203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14b8::/35

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:d6:8a:a6:70:0a:64:25:e1:58:13:b0:cd:d6:6c:b4:c3:
         16:80:15:2a:5f:ba:15:44:b3:2c:3d:3c:a1:80:17:ad:fd:e3:
         5e:82:89:c7:4d:e0:28:94:e6:d0:9f:4c:ea:51:95:e7:7c:6d:
         3a:ab:a0:f9:a2:d2:a2:8d:ac:50:d0:90:c8:9a:a7:08:f9:9e:
         ce:89:ae:1b:c8:c7:d0:93:7e:76:83:3b:4b:4b:72:07:3e:7a:
         4c:a9:5e:c3:70:6a:ae:3b:de:af:d8:ba:fb:5c:fa:45:7f:e6:
         2c:a4:84:e2:37:a3:ce:6a:bd:ec:c1:d2:41:e6:dc:3d:d2:85:
         15:8a:23:9a:20:3d:1e:d9:c3:4e:02:8d:f7:1f:45:06:f8:e7:
         0b:6d:d4:82:cf:c7:14:8a:fb:0c:5c:77:49:85:8f:93:4b:34:
         c3:a2:4d:ad:74:3b:55:3d:c1:87:72:1b:7c:74:31:7e:89:1f:
         39:54:58:6b:3e:84:68:df:61:64:24:35:53:4d:fd:60:ec:59:
         29:3a:92:90:f2:60:a0:53:75:c0:e3:43:05:9f:e0:17:95:e3:
         78:06:82:88:6c:e3:d1:e1:df:26:a5:f7:b4:0b:67:4f:ae:a4:
         80:e0:1d:1f:d8:e8:6a:a0:fb:3f:a4:cc:78:b0:de:da:ee:16:
         21:df:bd:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR/eMsy2T5OlZCktuip+KV+pmYbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2
QkJCRENDNjAeFw0yNDA0MjMxODQ0MDRaFw0yNTA0MjIxODQ5MDRaMDMxMTAvBgNV
BAMTKDNDQjE3RkRDREU1MEMwQjlDNDMyRDQ0Mzc0MzU1Mzg5NzNDNUJDODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuHJXhFvd3GqmIAvYAnDVHE2WE
FUlhkAhHS+t+4sVSwNYAiUz/Q32c5mf16uPxpgNP9NLHuwmwoTCrGqsxHWC2zRNC
a6/fcHUVSfSk1lcfRhPPzEhc45lplLUl8acIALEXW/wDUKnCFre0XTLdk2wrH3pN
waI+h+VAeOfH52Imzh+TWK9Ix/Vv+qKAC4OkRwsB606JWB4KmcYMgMll3Pk4o2p4
i0oXo3L4k2+eo5xs0eqdaguhhh2QvsVVLKLakXQ/D9zqYAHHqcAfF56N6Ih6H4zB
/hWagWq2vMXEeeQS1xDJf73ptOitnF9IlaNTVjpyhuCB6VhxD1k6A074VLZtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPLF/3N5QwLnEMtRDdDVTiXPFvIUwHwYDVR0j
BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx
a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1
MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1b1ZVNHo5M1o3WmI1OUR6WGN4Y1h3ZFNhZ1JjS1ZWRlNOaUdIc1ppMWtKLzAv
MzIzODMwMzQzYTMxMzQ2MjM4M2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjMz
MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYFKAQUuAAwDQYJKoZIhvcNAQELBQADggEBAKcR1oqm
cApkJeFYE7DN1my0wxaAFSpfuhVEsyw9PKGAF639416CicdN4CiU5tCfTOpRled8
bTqroPmi0qKNrFDQkMiapwj5ns6JrhvIx9CTfnaDO0tLcgc+ekypXsNwaq473q/Y
uvtc+kV/5iykhOI3o85qvezB0kHm3D3ShRWKI5ogPR7Zw04CjfcfRQb45wtt1ILP
xxSK+wxcd0mFj5NLNMOiTa10O1U9wYdyG3x0MX6JHzlUWGs+hGjfYWQkNVNN/WDs
WSk6kpDyYKBTdcDjQwWf4BeV43gGgohs49Hh3yal97QLZ0+upIDgHR/Y6Gqg+z+k
zHiw3truFiHfvVY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org