Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3830303a3a2f33382d3338203d3e203532393136.roa
File:                     323830343a326231303a3830303a3a2f33382d3338203d3e203532393136.roa (raw, json)
Hash identifier:          pEjIoJWd7vxK6BPH5J009IgkkLs6REFCwjBNf/IT7bk=
Subject key identifier:   67:90:7C:B1:07:ED:61:D6:25:F0:D9:CF:20:F5:C6:B4:CA:03:71:D1
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       10C7FCADFB91A80ED2EE0F123E2C81FFBD9559D7
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3830303a3a2f33382d3338203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:33 +0000
ROA not before:           Wed 03 Apr 2024 20:46:33 +0000
ROA not after:            Wed 02 Apr 2025 20:51:33 +0000
asID:                     52916
IP address blocks:        2804:2b10:800::/38 maxlen: 38

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 14:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:fc:ad:fb:91:a8:0e:d2:ee:0f:12:3e:2c:81:ff:bd:95:59:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:33 2024 GMT
            Not After : Apr  2 20:51:33 2025 GMT
        Subject: CN=67907CB107ED61D625F0D9CF20F5C6B4CA0371D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:a5:fa:59:e0:c3:11:43:ee:8f:9e:7d:26:
                    6b:d8:80:98:23:2e:fa:33:d4:a6:21:58:05:ef:92:
                    21:c9:83:1f:d7:8e:98:46:ed:7d:ee:0b:bf:37:8a:
                    3b:cc:c2:29:f7:c0:32:bd:6c:32:54:5b:8e:fb:e5:
                    20:49:53:08:7f:65:fa:52:36:3f:73:b6:a0:a6:16:
                    d3:35:34:83:32:0e:57:78:58:3f:14:e4:51:bc:6f:
                    1a:b1:90:82:ad:ef:58:cb:8e:fc:d3:e1:69:36:d3:
                    5e:57:d4:f5:73:4f:cc:e0:3d:14:24:b6:14:17:03:
                    f7:43:ba:eb:2a:f8:d4:e0:f8:00:21:5a:53:a0:1d:
                    a9:0f:b1:1c:9e:05:a1:e5:2b:e0:3c:34:a9:1f:5e:
                    d8:21:92:07:16:54:b1:7b:e8:76:0d:ab:4f:db:0a:
                    d4:f7:7b:88:a9:54:35:0d:7e:88:e5:5d:8e:65:61:
                    3c:88:53:44:7e:79:00:45:b8:7a:05:bf:4c:fb:85:
                    96:bc:f2:3e:51:76:57:60:e0:6c:d7:a6:8e:36:24:
                    d7:02:81:0d:cf:8e:42:da:7c:c0:a9:6d:fc:7a:e1:
                    9e:29:dd:5e:71:e1:de:64:16:84:1b:a2:2b:f5:50:
                    d5:7e:31:ba:09:a2:56:e5:9b:3b:66:1f:e3:b4:80:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:90:7C:B1:07:ED:61:D6:25:F0:D9:CF:20:F5:C6:B4:CA:03:71:D1
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3830303a3a2f33382d3338203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:ba:85:29:79:4a:06:21:8e:a2:61:c3:4d:75:7a:2f:3d:
         e0:a0:87:1c:6f:73:ec:d9:ba:b4:86:ad:b6:62:af:43:bd:e5:
         8a:4f:ca:a0:c1:96:19:86:c7:54:af:e0:eb:3e:b5:34:09:77:
         9e:db:f9:00:7e:dd:1f:30:eb:d3:b2:c4:40:5c:1c:cf:1e:cc:
         01:4c:ef:26:8c:40:18:1b:63:ca:75:73:4a:bf:98:45:0c:85:
         57:38:52:5e:d2:8e:f5:cb:29:e8:b1:58:10:e1:b6:3d:31:0e:
         ca:7d:2d:cb:c8:c1:11:54:d8:fd:e6:bb:fc:b7:9a:1c:55:3d:
         39:5c:39:85:86:ca:cc:0f:f3:fd:29:98:4f:d1:6b:2c:e4:fb:
         86:f8:20:e8:00:a4:9b:c5:1e:ab:1b:be:0b:78:0f:0d:0f:83:
         15:03:8f:9b:f5:2f:0a:88:6d:b8:2a:9c:55:33:39:48:83:1c:
         25:ce:6b:52:f8:41:fa:8a:84:d7:60:54:fc:95:ed:ce:5a:3f:
         23:fe:d0:09:f1:b1:f5:b8:0f:e4:5d:bf:16:85:b9:ec:e3:4d:
         2d:c9:47:4d:f0:a8:32:74:59:cf:d4:39:69:7d:29:a0:ed:3b:
         13:bd:bf:d9:a9:8d:f2:9d:a4:2a:10:0e:29:91:c3:73:f7:b4:
         ad:1d:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:48:34 2024 by rpki-client on console-fra.rpki-client.org