Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a343030303a3a2f33342d3334203d3e20323632393733.roa
File:                     323830343a6563343a343030303a3a2f33342d3334203d3e20323632393733.roa (raw, json)
Hash identifier:          6w/q/Fkrk8rnp2py4V2m35c+sEcqe2FXDNBMIJ9OXFw=
Subject key identifier:   FB:EF:8C:25:D7:2A:56:D5:FE:FF:7B:4F:45:A0:1A:FD:BA:E2:0F:BB
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       454BF0FBDF6A0549A37C4AEDC6F1B252F38C346D
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a343030303a3a2f33342d3334203d3e20323632393733.roa
Signing time:             Wed 09 Oct 2024 13:08:57 +0000
ROA not before:           Wed 09 Oct 2024 13:03:57 +0000
ROA not after:            Wed 08 Oct 2025 13:08:57 +0000
asID:                     262973
IP address blocks:        2804:ec4:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 14:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:f0:fb:df:6a:05:49:a3:7c:4a:ed:c6:f1:b2:52:f3:8c:34:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  9 13:03:57 2024 GMT
            Not After : Oct  8 13:08:57 2025 GMT
        Subject: CN=FBEF8C25D72A56D5FEFF7B4F45A01AFDBAE20FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d6:60:90:f1:59:47:05:c1:36:83:ab:ef:f1:
                    75:20:ba:73:73:3c:ee:48:56:15:45:05:5e:f7:e3:
                    0d:9e:81:64:e1:f3:d5:94:c6:fc:b8:65:3e:7e:22:
                    5b:a8:b5:d1:a6:4f:66:c2:b6:5f:89:cc:c0:d0:ed:
                    31:e3:e1:86:c0:9a:7d:4c:e0:91:ed:39:93:4a:8b:
                    22:88:54:c5:8b:3e:d0:d8:4a:ba:0e:7a:ac:99:37:
                    67:fc:22:5c:09:c8:93:cd:e5:bc:ce:59:df:fb:bf:
                    73:e1:e3:05:c4:f0:3d:b4:7b:ae:05:14:b3:43:20:
                    2b:70:dc:6f:5b:9d:8f:c7:d1:4e:b8:0c:81:0a:fa:
                    89:5b:cc:df:eb:28:86:5b:bf:24:68:d6:b0:7b:66:
                    67:5d:db:3a:04:b7:46:8c:1e:23:2c:83:56:f5:92:
                    d8:6b:a2:d0:b6:e3:43:72:69:57:33:ed:a3:8c:11:
                    ca:bb:f8:b6:95:bc:48:30:af:79:be:96:e8:bc:49:
                    bb:f5:fa:0e:61:a3:58:fb:55:bc:0a:4e:c2:38:22:
                    d3:0e:55:77:2c:c7:66:31:b6:db:74:c6:6c:14:4f:
                    06:e7:1d:c2:8e:dd:f5:fe:d4:11:e3:f3:8c:47:58:
                    54:05:a3:09:96:fb:93:a8:09:3e:36:34:62:1c:8e:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EF:8C:25:D7:2A:56:D5:FE:FF:7B:4F:45:A0:1A:FD:BA:E2:0F:BB
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a343030303a3a2f33342d3334203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:6e:3a:36:94:d9:51:c6:9e:89:ab:a6:67:bb:ca:0e:28:
         f5:4b:f6:eb:10:82:77:f8:f7:4f:ff:56:0d:55:88:d5:7d:25:
         5d:b7:c3:da:8d:59:57:25:de:18:e9:4e:ac:ea:b7:23:fb:a2:
         21:69:2b:32:82:22:81:92:8e:1c:11:cc:ab:31:ce:93:ec:05:
         6f:30:1e:52:ac:4c:bf:81:d2:48:e0:4a:ce:66:cf:b1:2c:26:
         9b:6c:55:41:3f:4c:6d:7e:12:28:2f:1f:ac:e7:00:94:ce:af:
         a8:7c:8d:9d:38:6e:7b:d8:c5:6e:72:3e:7a:0f:40:7e:9a:0d:
         4f:7b:48:40:b0:63:c9:a6:34:2b:90:76:ca:f0:ba:14:7d:c0:
         fb:aa:e0:fc:c7:6d:e6:00:25:83:04:20:36:14:74:cc:99:5b:
         ab:95:fe:8e:43:11:d4:f6:16:74:4b:e0:32:80:f9:8c:ee:75:
         ee:4a:5c:da:4c:c3:18:0f:72:fe:86:e2:48:ab:bf:41:8b:05:
         34:78:64:10:be:cd:2c:38:90:7e:f8:1f:fb:8e:c8:de:b7:2c:
         c8:74:40:b2:c4:56:f1:4c:c9:34:d6:3b:cd:9e:72:c1:9f:b9:
         a8:5e:13:b7:7e:7e:99:80:45:c9:74:dc:a0:4a:8f:05:5f:63:
         03:dc:17:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURUvw+99qBUmjfErtxvGyUvOMNG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDEwMDkxMzAzNTdaFw0yNTEwMDgxMzA4NTdaMDMxMTAvBgNV
BAMTKEZCRUY4QzI1RDcyQTU2RDVGRUZGN0I0RjQ1QTAxQUZEQkFFMjBGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD81mCQ8VlHBcE2g6vv8XUgunNz
PO5IVhVFBV734w2egWTh89WUxvy4ZT5+IluotdGmT2bCtl+JzMDQ7THj4YbAmn1M
4JHtOZNKiyKIVMWLPtDYSroOeqyZN2f8IlwJyJPN5bzOWd/7v3Ph4wXE8D20e64F
FLNDICtw3G9bnY/H0U64DIEK+olbzN/rKIZbvyRo1rB7Zmdd2zoEt0aMHiMsg1b1
kthrotC240NyaVcz7aOMEcq7+LaVvEgwr3m+lui8Sbv1+g5ho1j7VbwKTsI4ItMO
VXcsx2Yxttt0xmwUTwbnHcKO3fX+1BHj84xHWFQFowmW+5OoCT42NGIcjqidAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+++MJdcqVtX+/3tPRaAa/briD7swHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzIzODMwMzQzYTY1NjMzNDNhMzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzIzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA7EQDANBgkqhkiG9w0BAQsFAAOC
AQEAKOhuOjaU2VHGnomrpme7yg4o9Uv26xCCd/j3T/9WDVWI1X0lXbfD2o1ZVyXe
GOlOrOq3I/uiIWkrMoIigZKOHBHMqzHOk+wFbzAeUqxMv4HSSOBKzmbPsSwmm2xV
QT9MbX4SKC8frOcAlM6vqHyNnThue9jFbnI+eg9AfpoNT3tIQLBjyaY0K5B2yvC6
FH3A+6rg/Mdt5gAlgwQgNhR0zJlbq5X+jkMR1PYWdEvgMoD5jO517kpc2kzDGA9y
/obiSKu/QYsFNHhkEL7NLDiQfvgf+47I3rcsyHRAssRW8UzJNNY7zZ5ywZ+5qF4T
t35+mYBFyXTcoEqPBV9jA9wXgw==
-----END CERTIFICATE-----
Generated at Wed Oct 30 19:19:39 2024 by rpki-client on console-ams.rpki-client.org