Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/323830343a393032633a3a2f33322d3332203d3e20323734353932.roa
File:                     323830343a393032633a3a2f33322d3332203d3e20323734353932.roa (raw, json)
Hash identifier:          R9xwGs0ZcXzEdEtfzHW7Wt+5jRZzZbEQ6h1D5rzB7+g=
Subject key identifier:   BF:37:17:94:34:C8:4A:B9:0E:15:11:50:F9:A3:E7:94:A8:7C:CB:85
Certificate issuer:       /CN=E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B
Certificate serial:       6A0CC3C661041C8DD7B46E32429947051BDD8CA4
Authority key identifier: E6:DE:35:A8:79:ED:E5:C8:C5:F3:56:38:2A:AC:3C:CA:0D:61:D7:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/323830343a393032633a3a2f33322d3332203d3e20323734353932.roa
Signing time:             Wed 26 Jun 2024 20:39:50 +0000
ROA not before:           Wed 26 Jun 2024 20:34:50 +0000
ROA not after:            Wed 25 Jun 2025 20:39:50 +0000
asID:                     274592
IP address blocks:        2804:902c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 19:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0c:c3:c6:61:04:1c:8d:d7:b4:6e:32:42:99:47:05:1b:dd:8c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B
        Validity
            Not Before: Jun 26 20:34:50 2024 GMT
            Not After : Jun 25 20:39:50 2025 GMT
        Subject: CN=BF37179434C84AB90E151150F9A3E794A87CCB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:4a:1c:94:25:95:42:09:2c:56:b1:e0:08:
                    55:61:21:44:02:10:49:d4:07:50:1a:6a:90:0e:76:
                    bb:c8:c5:52:26:42:fe:c4:f3:a3:32:06:46:59:c5:
                    4d:2e:dd:39:32:d7:1b:3c:00:ab:9f:fc:93:e7:3a:
                    5a:7b:1e:55:ff:70:9c:2a:2a:28:15:fa:16:97:38:
                    ba:5f:2d:71:24:3a:69:19:db:c8:91:b2:26:19:0c:
                    d4:a6:f7:0d:0e:ea:7b:b9:40:96:97:cb:ae:25:6c:
                    ed:36:83:e8:34:f1:ea:5d:fe:18:82:51:1e:3b:74:
                    b0:c9:f7:bc:44:50:23:e5:1b:11:c1:0f:ab:b3:51:
                    08:0c:e4:85:7b:4b:1f:91:f0:56:16:fa:47:85:b3:
                    03:f0:99:bc:23:19:9a:ab:75:ab:92:c8:dd:2c:8d:
                    2b:e3:a7:cb:eb:0a:0b:ff:44:45:83:d6:74:2c:87:
                    45:d1:a5:01:69:2a:19:64:c2:c8:87:bf:c9:8c:ae:
                    77:bb:ee:02:c2:ad:9e:10:d7:be:b0:8d:70:65:e9:
                    17:4c:bd:17:8c:5b:87:dd:1b:57:9f:47:fd:30:ab:
                    fb:3b:10:cb:bf:41:cd:e2:57:d0:ae:42:33:81:ab:
                    12:58:cc:69:fc:b7:78:1c:5d:cf:83:40:2d:70:0f:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:37:17:94:34:C8:4A:B9:0E:15:11:50:F9:A3:E7:94:A8:7C:CB:85
            X509v3 Authority Key Identifier:
                keyid:E6:DE:35:A8:79:ED:E5:C8:C5:F3:56:38:2A:AC:3C:CA:0D:61:D7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/323830343a393032633a3a2f33322d3332203d3e20323734353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:902c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:3c:54:17:f7:7c:b7:2b:9d:fb:81:6c:49:f1:45:e6:23:e6:
         c0:ae:c5:3a:b4:68:c5:de:08:a9:63:cc:a7:8d:6f:a2:af:ef:
         8c:32:25:a5:c2:a2:f8:4b:59:d7:ee:55:7e:46:de:37:ef:dd:
         3e:89:01:8c:73:44:46:5a:1f:54:3e:f1:7e:af:cc:28:a4:4c:
         5a:65:84:76:79:54:30:41:e0:6e:a2:cf:48:6e:71:3a:b9:a0:
         f1:19:39:16:ba:08:ea:81:f7:b4:0e:17:86:ed:ca:2a:4c:25:
         8e:5c:93:fd:b4:30:5d:8d:fc:7a:b9:e5:3a:1a:d6:a2:c8:6a:
         d4:a9:92:84:74:4f:b8:fa:13:e3:73:cd:dc:52:28:e9:d5:0f:
         95:63:60:0c:ec:36:26:15:fa:f4:ba:12:d3:74:f2:16:1e:8b:
         8f:b5:95:8e:8f:e4:8d:62:26:ba:e4:52:36:c3:5b:7b:11:4b:
         8d:22:0d:56:a8:21:f3:c2:fc:55:5d:43:07:dc:bd:03:38:b7:
         a4:44:d1:1d:ef:8b:48:44:d6:93:7e:19:22:40:23:64:e9:5d:
         97:47:5b:4d:c0:dd:ed:43:ba:19:fd:26:bf:25:b2:85:ec:95:
         1a:09:5d:3d:a6:fb:d8:40:36:ed:d5:74:8b:66:28:dc:81:a8:
         0a:33:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----