Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/323830343a353764303a3a2f33322d313238203d3e20323638303838.roa
File:                     323830343a353764303a3a2f33322d313238203d3e20323638303838.roa (raw, json)
Hash identifier:          ro9hR67DAUPzoftge2u+oE1jsRtckI8q3uYlrv5d9z0=
Subject key identifier:   47:08:32:E6:78:0A:34:48:52:A4:67:57:3A:2D:69:B2:87:9B:B1:71
Certificate issuer:       /CN=9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1
Certificate serial:       31BA52478471026C06B0F27E6C49D66165065F16
Authority key identifier: 9C:DD:5E:D9:F3:81:FA:7C:7C:F5:58:70:AB:5A:C7:1F:AB:D4:AD:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/323830343a353764303a3a2f33322d313238203d3e20323638303838.roa
Signing time:             Wed 03 Apr 2024 19:03:55 +0000
ROA not before:           Wed 03 Apr 2024 18:58:55 +0000
ROA not after:            Wed 02 Apr 2025 19:03:55 +0000
asID:                     268088
IP address blocks:        2804:57d0::/32 maxlen: 128

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 15:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ba:52:47:84:71:02:6c:06:b0:f2:7e:6c:49:d6:61:65:06:5f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1
        Validity
            Not Before: Apr  3 18:58:55 2024 GMT
            Not After : Apr  2 19:03:55 2025 GMT
        Subject: CN=470832E6780A344852A467573A2D69B2879BB171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:89:e9:33:9c:1b:48:97:93:99:7a:94:05:
                    0f:06:0c:08:c7:11:0b:19:a4:ce:42:fc:e2:c7:0d:
                    0c:6c:02:bb:bf:e4:64:1f:09:46:58:1b:2a:6c:c2:
                    7c:3f:45:d9:15:d5:e8:dc:c8:a4:de:c6:73:2d:70:
                    e2:51:55:27:ce:38:da:02:ef:2a:a2:9a:98:21:86:
                    6f:6d:1d:09:78:9c:1f:82:91:7c:b3:74:38:98:b9:
                    6c:d5:03:a3:a0:ca:91:24:f6:a9:c5:51:d7:90:a2:
                    95:b0:5a:bc:11:67:53:c3:eb:6e:1a:ee:a3:c5:b4:
                    fe:f0:8d:fd:9a:b5:31:1a:3a:6f:a9:19:61:80:9c:
                    47:e2:de:b4:bc:d2:66:60:4b:c4:63:c3:d9:c6:da:
                    89:b4:8f:32:f1:10:f7:60:b9:94:ca:d1:7b:d2:05:
                    86:17:b2:74:1e:61:ce:5d:80:8e:25:83:99:03:33:
                    ba:2f:ca:44:c8:33:5b:e0:c3:36:b4:02:12:ab:59:
                    91:5b:58:b5:02:65:4b:ba:86:24:80:f7:b6:30:af:
                    cb:fe:27:32:17:9d:d3:c3:a4:de:8c:d3:f3:1e:4d:
                    5a:ce:bc:15:e6:00:11:7d:c3:d3:bd:e0:4a:5d:fe:
                    07:37:65:e2:f9:9e:62:da:ce:82:7a:c1:5b:bd:36:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:08:32:E6:78:0A:34:48:52:A4:67:57:3A:2D:69:B2:87:9B:B1:71
            X509v3 Authority Key Identifier:
                keyid:9C:DD:5E:D9:F3:81:FA:7C:7C:F5:58:70:AB:5A:C7:1F:AB:D4:AD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/323830343a353764303a3a2f33322d313238203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:84:7c:23:81:61:81:ef:fd:d2:1c:65:bd:2a:9d:f4:59:
         67:15:fc:9a:b8:d5:2d:8a:d5:c7:b4:0a:74:04:3e:d4:1d:a8:
         cf:22:5a:59:df:d5:f7:c9:64:65:e9:b8:97:31:96:9f:57:fa:
         e0:e5:66:b0:58:ca:eb:2a:91:e5:67:a5:a1:33:db:df:4d:e2:
         16:95:68:49:75:d4:4d:48:09:92:7f:ec:7f:53:10:c9:db:b0:
         3a:f0:ab:d2:be:c2:da:b3:79:c3:dc:5e:c4:d6:5a:31:8a:b2:
         2b:37:55:a8:04:44:a7:6a:a8:69:81:c0:34:78:66:f7:0b:6b:
         c7:d2:b4:1f:ba:f4:75:69:40:7e:99:be:c4:95:6e:42:84:ca:
         40:2d:c0:da:1d:a8:c7:0d:aa:f0:6f:cc:39:a8:b5:34:fc:4a:
         04:b9:e9:0a:e1:a0:b5:d1:b0:b2:fe:92:b8:ac:34:be:59:97:
         c2:d2:4b:c4:ad:ee:89:93:fa:f6:65:14:9e:ca:62:3c:89:9c:
         1f:51:e7:fa:ac:d8:04:55:00:61:5b:32:11:8b:ae:a9:82:bc:
         3d:cd:b5:c5:c9:4a:20:78:5f:a2:db:e9:0b:62:78:ab:fb:0a:
         ee:29:80:bf:4a:68:18:92:76:61:9b:d7:fc:9b:22:c2:4a:70:
         f3:a4:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 20:37:31 2024 by rpki-client on console-fra.rpki-client.org