Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386630303a3a2f34302d3430203d3e203532353336.roa
File:                     323830343a386337633a386630303a3a2f34302d3430203d3e203532353336.roa (raw, json)
Hash identifier:          97KoPdXcackUkbwOchwdajnmm+a3dN1sOlv7l1D8afM=
Subject key identifier:   B4:61:50:5E:F0:79:AD:C5:42:FA:7D:D1:AC:5C:D1:50:7B:02:73:23
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       7CE80E7B2E15A18F49E812E3DC304F227F8025EC
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386630303a3a2f34302d3430203d3e203532353336.roa
Signing time:             Thu 18 Apr 2024 18:01:08 +0000
ROA not before:           Thu 18 Apr 2024 17:56:08 +0000
ROA not after:            Thu 17 Apr 2025 18:01:08 +0000
asID:                     52536
IP address blocks:        2804:8c7c:8f00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e8:0e:7b:2e:15:a1:8f:49:e8:12:e3:dc:30:4f:22:7f:80:25:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:56:08 2024 GMT
            Not After : Apr 17 18:01:08 2025 GMT
        Subject: CN=B461505EF079ADC542FA7DD1AC5CD1507B027323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:6c:b8:e5:18:d4:be:97:7d:05:7d:8d:72:
                    1f:ed:fb:0d:f2:93:fc:e4:04:02:f3:81:72:0c:12:
                    eb:46:8d:75:31:2a:35:00:a9:dd:9b:9d:a9:55:bb:
                    d5:15:e6:5a:7f:cd:2a:a5:97:aa:e6:26:e4:e3:ed:
                    15:a9:c2:1a:45:f7:a8:a3:ae:00:a5:f0:88:42:cf:
                    42:18:43:7e:4c:58:c9:88:30:50:87:05:dc:29:5c:
                    d2:9a:85:2e:73:bd:5a:99:3b:10:ee:7b:85:de:c7:
                    d8:7f:25:14:d4:07:e2:98:42:6a:e8:55:a1:9b:18:
                    0b:de:3c:6c:d3:28:96:8e:7d:46:e7:1b:0c:dd:96:
                    ee:d2:84:98:ea:69:6d:69:a4:73:52:d5:5c:4d:e9:
                    96:b6:a8:1d:61:2a:16:10:4e:47:d2:06:ee:56:fa:
                    d8:8f:4e:4b:71:7a:c7:eb:87:de:9a:93:81:ea:f6:
                    e8:b5:dc:cd:af:9a:c8:83:0f:f1:f2:02:43:47:02:
                    48:ec:c9:df:29:e6:81:5a:f6:7e:57:f5:8d:d9:fd:
                    9e:46:8b:d7:87:34:e3:b9:71:9f:aa:17:fa:0f:e7:
                    a7:85:60:4d:a6:d5:6a:f7:90:6c:4c:d3:4d:af:3f:
                    bc:e1:dc:f4:d8:a0:ab:58:d9:1d:3b:87:a0:3c:da:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:61:50:5E:F0:79:AD:C5:42:FA:7D:D1:AC:5C:D1:50:7B:02:73:23
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a386630303a3a2f34302d3430203d3e203532353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:e1:5b:3c:c1:d2:75:fd:e5:96:5f:d7:79:94:b2:c8:25:af:
         d0:70:55:2d:cc:ce:74:f8:20:e4:68:ff:08:84:1d:e3:5b:97:
         24:13:9d:57:d8:03:98:17:6b:56:47:6f:66:7f:ce:10:80:5d:
         97:e2:ae:87:db:fa:45:b8:0f:4c:ee:a4:ae:b9:91:ac:5a:af:
         2d:1f:ef:26:27:16:17:34:70:e4:41:06:9a:8c:66:32:81:c1:
         41:e0:b2:c7:d3:f8:e1:b9:c8:28:0a:61:f9:8f:31:77:5c:b3:
         ff:d5:bd:b1:25:76:40:68:d6:b0:6c:0e:57:60:e1:e1:ad:98:
         b1:93:8a:70:e5:45:6c:ee:20:bc:41:40:da:3b:a2:27:fc:9f:
         80:21:5c:48:92:f2:50:36:4b:92:db:f0:5d:35:73:32:3c:c8:
         dd:f9:21:19:bd:18:39:f0:92:9a:8d:a9:98:d0:5b:c6:c9:43:
         85:9e:cf:55:61:e1:b8:17:ac:59:89:cf:19:c3:96:0b:58:59:
         27:1b:67:66:a8:dc:4e:03:74:bf:76:5e:45:58:76:22:d6:0a:
         5d:cc:63:e7:bc:8f:6c:9e:16:8b:d0:9a:85:a4:78:64:4c:5f:
         40:cb:fa:5b:6f:25:1c:44:20:bc:d8:fb:16:3c:fa:e0:a3:86:
         49:89:3c:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfOgOey4VoY9J6BLj3DBPIn+AJewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA0MTgxNzU2MDhaFw0yNTA0MTcxODAxMDhaMDMxMTAvBgNV
BAMTKEI0NjE1MDVFRjA3OUFEQzU0MkZBN0REMUFDNUNEMTUwN0IwMjczMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8my45RjUvpd9BX2Nch/t+w3y
k/zkBALzgXIMEutGjXUxKjUAqd2bnalVu9UV5lp/zSqll6rmJuTj7RWpwhpF96ij
rgCl8IhCz0IYQ35MWMmIMFCHBdwpXNKahS5zvVqZOxDue4Xex9h/JRTUB+KYQmro
VaGbGAvePGzTKJaOfUbnGwzdlu7ShJjqaW1ppHNS1VxN6Za2qB1hKhYQTkfSBu5W
+tiPTktxesfrh96ak4Hq9ui13M2vmsiDD/HyAkNHAkjsyd8p5oFa9n5X9Y3Z/Z5G
i9eHNOO5cZ+qF/oP56eFYE2m1Wr3kGxM002vP7zh3PTYoKtY2R07h6A82lpjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtGFQXvB5rcVC+n3RrFzRUHsCcyMwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzIzODMwMzQzYTM4NjMzNzYzM2EzODY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM1MzIzNTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBIx8jzANBgkqhkiG9w0BAQsFAAOC
AQEAF+FbPMHSdf3lll/XeZSyyCWv0HBVLczOdPgg5Gj/CIQd41uXJBOdV9gDmBdr
VkdvZn/OEIBdl+Kuh9v6RbgPTO6krrmRrFqvLR/vJicWFzRw5EEGmoxmMoHBQeCy
x9P44bnIKAph+Y8xd1yz/9W9sSV2QGjWsGwOV2Dh4a2YsZOKcOVFbO4gvEFA2jui
J/yfgCFcSJLyUDZLktvwXTVzMjzI3fkhGb0YOfCSmo2pmNBbxslDhZ7PVWHhuBes
WYnPGcOWC1hZJxtnZqjcTgN0v3ZeRVh2ItYKXcxj57yPbJ4Wi9CahaR4ZExfQMv6
W28lHEQgvNj7Fjz64KOGSYk8xg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org