Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33322d3332203d3e20323731353030.roa
File:                     323830343a376338303a3a2f33322d3332203d3e20323731353030.roa (raw, json)
Hash identifier:          OKT6gNcakn5ZmIcHl4eZAalvv4tE4Gc1z7dO2bnJhbw=
Subject key identifier:   62:C2:F2:DC:E2:43:77:B9:40:3A:EC:CB:27:9D:56:D8:D4:08:57:41
Certificate issuer:       /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial:       7E168386A07D4F32A526154F5E50050482F8779F
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33322d3332203d3e20323731353030.roa
Signing time:             Tue 30 Apr 2024 08:05:31 +0000
ROA not before:           Tue 30 Apr 2024 08:00:31 +0000
ROA not after:            Tue 29 Apr 2025 08:05:31 +0000
asID:                     271500
IP address blocks:        2804:7c80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 03:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:16:83:86:a0:7d:4f:32:a5:26:15:4f:5e:50:05:04:82:f8:77:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
        Validity
            Not Before: Apr 30 08:00:31 2024 GMT
            Not After : Apr 29 08:05:31 2025 GMT
        Subject: CN=62C2F2DCE24377B9403AECCB279D56D8D4085741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:a6:f8:22:b4:1a:53:1c:43:ae:f4:83:7f:
                    27:1b:08:11:02:17:ba:d8:e5:40:ca:26:ef:32:81:
                    fe:ee:19:71:e2:0d:3e:48:2f:5a:1d:81:0a:cc:30:
                    12:11:c2:19:9f:8c:bd:1d:26:21:e2:b9:5a:6f:37:
                    8b:f1:c5:ac:8e:2d:20:3b:ba:56:bb:04:e8:76:4a:
                    d8:09:95:53:c7:79:0d:25:38:bb:a2:8f:16:8d:54:
                    28:8e:71:3a:1e:d8:0a:bb:25:b3:27:4b:62:c3:d1:
                    8e:d8:e9:15:b9:00:9e:7e:82:e3:6d:d6:65:60:7e:
                    44:d1:a3:be:68:a0:00:88:32:e7:50:71:66:21:da:
                    32:af:76:44:29:69:b2:dd:1a:5e:18:fc:55:e4:b9:
                    77:67:c6:8c:34:77:02:4b:8c:0f:bd:34:88:d5:0f:
                    c9:5d:aa:b7:50:9c:d9:82:27:7b:c7:6d:c1:c4:ca:
                    63:32:77:cb:b4:d0:a3:fd:05:be:59:93:9b:1b:33:
                    34:99:6f:88:4b:a7:66:e3:81:1c:3c:bb:a8:03:60:
                    98:e4:ac:17:45:5c:02:5b:00:fa:bb:b1:e6:32:16:
                    2f:78:2e:f1:91:11:23:ff:bf:6d:2d:2d:d3:0a:ff:
                    d5:c4:c5:c4:07:ab:7c:b0:c2:b3:ae:fc:e7:22:38:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:F2:DC:E2:43:77:B9:40:3A:EC:CB:27:9D:56:D8:D4:08:57:41
            X509v3 Authority Key Identifier:
                keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33322d3332203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:69:7a:3f:e5:f7:af:30:f4:7c:54:d7:a6:cc:4b:15:1e:28:
         99:43:df:68:07:71:0f:a7:16:00:17:fd:4d:1b:98:8e:45:5d:
         fe:e3:ec:05:2c:fa:23:09:8c:66:d8:3d:a6:a7:18:d8:79:21:
         ea:88:46:40:87:9e:38:bf:86:85:65:c4:d7:15:19:cb:46:20:
         15:5d:25:57:f6:49:2a:5f:8d:ff:64:9a:fd:7e:49:07:d8:b1:
         4b:0c:33:27:5f:50:4b:97:e5:dd:13:a6:62:fb:fb:37:4f:ab:
         97:c3:a0:46:2c:7c:e2:fb:e7:24:b9:fe:ad:70:64:a0:db:7a:
         16:54:df:bb:18:ca:43:69:0d:e1:a8:28:e8:ad:b2:1e:1e:23:
         0e:82:aa:fb:51:f1:63:25:32:10:fa:75:88:88:3b:29:95:61:
         5d:4a:7f:31:2d:d0:e2:e2:1c:e5:59:fc:c2:8f:84:af:b1:4f:
         25:a4:7c:ea:bd:d2:f8:b7:3f:e0:58:7e:95:72:d9:03:df:49:
         b8:f1:2e:80:7b:79:dc:81:09:7b:42:d5:12:f5:9a:87:fa:e6:
         d9:a3:14:16:b4:67:b7:58:38:f9:e0:72:ba:9a:d7:d2:e4:d5:
         c8:72:f3:ea:66:a1:0a:e3:26:98:26:82:3c:a6:d3:4d:12:b6:
         14:40:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 05:08:21 2024 by rpki-client on console-fra.rpki-client.org