Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a633030303a3a2f33352d3335203d3e20323633333436.roa
File:                     323830343a313462383a633030303a3a2f33352d3335203d3e20323633333436.roa (raw, json)
Hash identifier:          MxSISu9vCV4BxGy6vWsBykXZpch76ROOUno85xCVJ1U=
Subject key identifier:   AD:D2:C6:F5:FD:BE:D2:76:09:20:F2:5C:B6:7F:EA:CF:41:B3:31:1F
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       4AACEEF88BEBF458F07ECEA0EBB64B9D1A9830B4
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a633030303a3a2f33352d3335203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:49:29 +0000
ROA not before:           Tue 23 Apr 2024 18:44:29 +0000
ROA not after:            Tue 22 Apr 2025 18:49:29 +0000
asID:                     263346
IP address blocks:        2804:14b8:c000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ac:ee:f8:8b:eb:f4:58:f0:7e:ce:a0:eb:b6:4b:9d:1a:98:30:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:44:29 2024 GMT
            Not After : Apr 22 18:49:29 2025 GMT
        Subject: CN=ADD2C6F5FDBED2760920F25CB67FEACF41B3311F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:a4:aa:ec:85:20:f2:45:fd:53:0c:eb:f6:
                    9d:45:3b:c6:ef:02:3c:5a:54:bd:71:7a:17:c9:eb:
                    9d:97:5d:99:6c:07:28:d7:ce:6a:2e:2c:b1:4c:cd:
                    65:bd:fa:35:38:1a:71:30:8c:0d:90:d1:88:9d:4a:
                    6a:74:12:cd:c4:31:b1:5b:90:23:99:69:b7:c0:78:
                    c5:c8:b6:5b:7d:a7:9c:00:5e:dc:0d:54:15:6d:86:
                    73:8b:ac:bb:5c:ae:46:d9:70:b9:97:1b:e3:bd:40:
                    d8:64:2b:f7:98:b5:45:46:1d:03:e4:9c:d5:82:cd:
                    d5:ec:13:a4:0b:ff:eb:91:b6:03:78:14:21:62:a7:
                    c9:19:3e:86:53:5c:66:ad:df:ee:37:53:a1:f7:1b:
                    e8:f3:46:0d:a1:f4:e3:da:b6:0f:1f:34:a6:48:e9:
                    02:6c:62:62:aa:6f:3b:bc:e0:f8:13:58:55:34:3c:
                    a8:a8:bb:41:42:c6:6a:03:42:95:db:19:93:c4:a7:
                    ab:de:94:68:28:f4:90:18:4c:74:da:41:ff:8f:46:
                    60:5a:a2:db:3f:8d:91:31:18:55:e3:dc:f4:ac:70:
                    e0:4c:0c:63:1d:39:da:db:2b:40:55:db:de:f0:e3:
                    82:cf:a5:15:af:cf:9c:ad:e1:59:45:3f:71:59:2b:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D2:C6:F5:FD:BE:D2:76:09:20:F2:5C:B6:7F:EA:CF:41:B3:31:1F
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a633030303a3a2f33352d3335203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14b8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b6:04:ac:6f:b2:98:9d:9d:36:93:ab:8a:6e:de:a5:dd:22:dd:
         a4:f0:67:eb:95:46:56:89:78:c9:7a:b9:36:3b:00:f0:bc:7e:
         e7:dd:6d:d8:46:f5:1c:d0:c0:eb:74:17:e6:79:26:1b:f4:8d:
         cc:13:9b:74:67:d6:02:53:80:aa:8e:27:74:a7:c5:1c:dd:8e:
         07:a8:1a:30:cf:23:cb:08:08:bf:27:a3:b2:c9:47:5a:dd:f4:
         a5:c9:41:a0:3b:af:13:a6:83:a7:52:28:7e:9b:10:0a:ce:e9:
         16:37:57:78:e1:08:d1:ef:4b:54:cd:09:9c:8f:fc:01:af:0d:
         31:87:62:b2:b4:73:6a:6a:62:8f:04:62:96:09:03:2f:be:3a:
         cf:16:29:0c:45:58:69:cd:07:8a:d6:bf:0d:18:d0:8f:3b:b5:
         44:4f:d6:aa:2b:24:b1:9d:90:12:b4:7b:c0:dd:b5:f2:24:54:
         78:47:7c:fd:15:1e:58:a5:14:2b:05:3f:6b:21:c9:10:c7:f4:
         29:2f:c4:92:e4:bf:07:8f:41:ed:d3:7c:e2:50:41:dc:e4:4c:
         e4:b2:23:34:e4:59:57:9f:bb:d5:f0:9b:48:80:c1:e3:82:3f:
         4d:18:c4:9f:43:aa:19:de:40:16:4e:a9:3e:a6:61:5d:c7:3c:
         89:8f:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org