Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a383030303a3a2f33342d3334203d3e20323731353030.roa
File:                     323830343a376338303a383030303a3a2f33342d3334203d3e20323731353030.roa (raw, json)
Hash identifier:          WLfHi1KS+vDEyvxNBkFkf/DKgGdkpSqvxVZF1rIUbxo=
Subject key identifier:   F2:CD:7E:22:D0:BB:37:42:45:41:20:B7:B3:DC:9A:B3:A2:13:A7:5E
Certificate issuer:       /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial:       2F9C02712FADF2387CA4420E22CB69656AFE6ACD
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a383030303a3a2f33342d3334203d3e20323731353030.roa
Signing time:             Tue 30 Apr 2024 08:05:32 +0000
ROA not before:           Tue 30 Apr 2024 08:00:32 +0000
ROA not after:            Tue 29 Apr 2025 08:05:32 +0000
asID:                     271500
IP address blocks:        2804:7c80:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 03:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9c:02:71:2f:ad:f2:38:7c:a4:42:0e:22:cb:69:65:6a:fe:6a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
        Validity
            Not Before: Apr 30 08:00:32 2024 GMT
            Not After : Apr 29 08:05:32 2025 GMT
        Subject: CN=F2CD7E22D0BB3742454120B7B3DC9AB3A213A75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:e8:e0:a0:e8:4c:93:d8:b1:a1:7b:3e:e6:
                    c4:42:c7:d2:7f:a0:80:cf:99:cf:71:ae:b1:7c:0f:
                    98:ec:4a:75:c4:2e:0c:89:a1:34:30:d2:02:51:36:
                    e8:63:e1:fc:d9:f1:74:cf:b7:7a:bd:fd:bb:05:3d:
                    25:09:88:b0:6e:99:2a:c9:7b:26:a3:d5:76:98:bb:
                    9a:00:fd:0a:9a:e8:e5:1a:18:35:96:6f:6d:41:2e:
                    8d:e7:d1:9c:ac:d2:58:5a:1e:63:ea:43:5e:55:fc:
                    09:f7:f4:75:11:24:f2:b4:a8:a2:3a:e0:31:8f:74:
                    23:77:d6:5d:7d:3d:22:69:34:f1:c8:3f:c4:ef:38:
                    25:82:a0:62:b5:20:9b:6e:87:7a:eb:3b:fe:1f:a8:
                    a9:61:76:82:4b:47:d0:8a:ae:f4:d9:98:62:f7:85:
                    86:4f:b6:bf:0a:d6:67:f4:a4:a9:6e:58:27:8c:6a:
                    26:21:43:9a:72:a1:ee:be:f1:33:e8:5e:b9:4e:c0:
                    e9:fd:65:a6:c2:cf:1d:6a:73:67:b3:9e:64:d0:c7:
                    a9:0b:7f:49:75:62:3d:52:7e:bf:fa:0a:ab:8d:54:
                    ce:bf:db:a1:85:91:67:aa:03:26:e4:52:e2:2f:92:
                    a7:8d:6e:db:a2:96:e1:41:3a:d6:42:cf:58:70:ea:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:7E:22:D0:BB:37:42:45:41:20:B7:B3:DC:9A:B3:A2:13:A7:5E
            X509v3 Authority Key Identifier:
                keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a383030303a3a2f33342d3334203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c80:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         20:1b:27:7a:59:3d:bc:4e:a5:a0:77:6a:35:3d:d5:8a:0d:17:
         b5:56:24:0a:f5:87:6c:db:1d:a6:be:60:91:d5:50:d6:83:45:
         dc:5f:cb:35:fc:23:9d:28:03:d6:95:e1:40:9b:29:3d:ea:40:
         d2:08:96:6b:3e:23:dd:df:69:55:a1:e0:c7:0e:00:40:cc:a7:
         b8:b5:fd:5f:b0:97:0f:1e:55:26:8c:93:b3:99:3d:e7:ad:c7:
         77:1b:94:63:98:0b:a4:7d:a6:62:2b:e2:80:17:56:6f:2a:5c:
         e9:20:e4:5d:76:a6:b4:1f:24:c8:00:4f:a8:ef:4b:a1:c7:12:
         81:0e:bb:b6:6b:e5:e7:05:1b:55:0b:64:0d:2c:f9:f3:2c:15:
         73:76:22:4e:d7:e9:37:fa:77:7f:85:be:fc:d9:77:52:6e:f4:
         bc:2f:bd:2d:81:5c:ed:29:4e:d4:3c:2e:56:f9:69:1d:35:b7:
         e2:da:c2:f3:9e:9f:a0:6e:1f:b6:ae:a8:9e:95:b7:04:3a:29:
         41:bc:d2:8e:e0:0f:a2:f8:ec:ac:75:83:96:c4:c4:8e:4a:82:
         a9:d2:5c:dd:b2:d6:fd:39:e9:8c:9b:a7:c3:7e:21:50:f6:65:
         5e:ed:ce:7f:a6:7c:29:c0:70:a8:de:17:86:42:ed:a9:2b:a5:
         f2:58:cf:58
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUL5wCcS+t8jh8pEIOIstpZWr+as0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ5OTgyQTQxNERDNzgxOEIzREQwQkUwOEY1NDIxMUY3
NkRDMjA2MTAeFw0yNDA0MzAwODAwMzJaFw0yNTA0MjkwODA1MzJaMDMxMTAvBgNV
BAMTKEYyQ0Q3RTIyRDBCQjM3NDI0NTQxMjBCN0IzREM5QUIzQTIxM0E3NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkejgoOhMk9ixoXs+5sRCx9J/
oIDPmc9xrrF8D5jsSnXELgyJoTQw0gJRNuhj4fzZ8XTPt3q9/bsFPSUJiLBumSrJ
eyaj1XaYu5oA/Qqa6OUaGDWWb21BLo3n0Zys0lhaHmPqQ15V/An39HURJPK0qKI6
4DGPdCN31l19PSJpNPHIP8TvOCWCoGK1IJtuh3rrO/4fqKlhdoJLR9CKrvTZmGL3
hYZPtr8K1mf0pKluWCeMaiYhQ5pyoe6+8TPoXrlOwOn9ZabCzx1qc2eznmTQx6kL
f0l1Yj1Sfr/6CquNVM6/26GFkWeqAybkUuIvkqeNbtuiluFBOtZCz1hw6oMvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU8s1+ItC7N0JFQSC3s9yas6ITp14wHwYDVR0j
BBgwFoAUJJmCpBTceBiz3Qvgj1QhH3bcIGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRBOGt5Mm5oOHB0YXNyVW5rcGlNQUF6MUs2ZHd5TTJmNno3czZXeHdK
TDYvMC8yNDk5ODJBNDE0REM3ODE4QjNERDBCRTA4RjU0MjExRjc2REMyMDYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0OTk4MkE0MTREQzc4MThC
M0REMEJFMDhGNTQyMTFGNzZEQzIwNjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0QThreTJuaDhwdGFzclVua3BpTUFBejFLNmR3eU0yZjZ6N3M2V3h3Skw2LzAv
MzIzODMwMzQzYTM3NjMzODMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEfICAMA0GCSqGSIb3DQEBCwUA
A4IBAQAgGyd6WT28TqWgd2o1PdWKDRe1ViQK9Yds2x2mvmCR1VDWg0XcX8s1/COd
KAPWleFAmyk96kDSCJZrPiPd32lVoeDHDgBAzKe4tf1fsJcPHlUmjJOzmT3nrcd3
G5RjmAukfaZiK+KAF1ZvKlzpIORddqa0HyTIAE+o70uhxxKBDru2a+XnBRtVC2QN
LPnzLBVzdiJO1+k3+nd/hb782XdSbvS8L70tgVztKU7UPC5W+WkdNbfi2sLznp+g
bh+2rqielbcEOilBvNKO4A+i+OysdYOWxMSOSoKp0lzdstb9OemMm6fDfiFQ9mVe
7c5/pnwpwHCo3heGQu2pK6XyWM9Y
-----END CERTIFICATE-----
Generated at Sat Aug 10 05:08:21 2024 by rpki-client on console-fra.rpki-client.org