Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a383030303a3a2f33342d3334203d3e20323632393733.roa
File:                     323830343a6563343a383030303a3a2f33342d3334203d3e20323632393733.roa (raw, json)
Hash identifier:          Xv+sqCA5N9nZTMFuKseFOV+7RMZPfpzz+2q3yD+qLR8=
Subject key identifier:   70:6E:AA:96:B2:7C:47:1B:FF:DC:3F:6F:D6:0A:0A:65:C7:45:9C:7B
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       0942FC7F65E6F5004187B25301EB8618E13B2CE9
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a383030303a3a2f33342d3334203d3e20323632393733.roa
Signing time:             Wed 09 Oct 2024 13:08:57 +0000
ROA not before:           Wed 09 Oct 2024 13:03:57 +0000
ROA not after:            Wed 08 Oct 2025 13:08:57 +0000
asID:                     262973
IP address blocks:        2804:ec4:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 14:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:42:fc:7f:65:e6:f5:00:41:87:b2:53:01:eb:86:18:e1:3b:2c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  9 13:03:57 2024 GMT
            Not After : Oct  8 13:08:57 2025 GMT
        Subject: CN=706EAA96B27C471BFFDC3F6FD60A0A65C7459C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:5d:67:72:f9:bc:23:ed:36:bf:56:09:95:
                    b5:11:48:f5:c7:01:12:c8:7b:d6:38:6a:74:d3:c7:
                    2b:13:d6:0d:a1:5a:6f:e3:5e:bb:8e:13:3c:d2:9a:
                    c9:d8:5d:7e:98:38:12:84:b0:cf:ba:b6:ae:d7:5e:
                    0e:d1:bf:cd:03:df:b6:6a:35:5a:9d:79:95:e8:58:
                    bf:36:8a:e0:68:50:8c:ce:71:1a:ff:a3:35:9f:d7:
                    e2:8d:44:a3:eb:a6:80:af:05:ad:d0:0c:52:13:a9:
                    67:41:c7:95:e6:07:ed:65:b6:a8:22:37:60:8c:6f:
                    4a:9a:14:b4:e0:f3:f9:b9:e0:0f:14:51:27:6f:8d:
                    a9:2c:51:9e:dd:5a:12:b2:f8:37:91:89:6f:ae:00:
                    1a:02:f3:1b:c7:09:3c:8d:fa:db:45:2d:10:10:c0:
                    cd:64:e8:8c:99:cc:d1:c1:7d:ca:fa:22:5b:6b:c9:
                    81:e5:6d:f2:31:d6:58:c8:7a:b8:02:c5:79:65:60:
                    e1:9a:8f:3b:85:f0:d7:1d:35:78:f9:8a:31:9c:4f:
                    cd:b8:66:46:4f:3c:c1:bd:1f:94:9a:a3:87:a7:fd:
                    9b:eb:f5:26:29:8c:72:ac:d3:78:18:06:16:69:6e:
                    e9:33:16:d4:35:bc:c5:a4:9c:fe:61:78:a1:f0:e4:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6E:AA:96:B2:7C:47:1B:FF:DC:3F:6F:D6:0A:0A:65:C7:45:9C:7B
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a383030303a3a2f33342d3334203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:97:f4:a5:6b:b3:09:95:ad:49:b5:a8:04:74:c3:c7:b2:
         1e:ff:78:40:15:d4:49:b5:b1:69:3f:bc:a9:6e:43:22:83:cd:
         d9:86:43:2e:b2:b3:50:5e:e3:30:5f:bd:6b:d4:65:74:52:69:
         6e:b3:cb:cc:22:f8:03:d1:a7:ab:84:4a:63:53:81:e1:01:c9:
         bd:6e:bd:87:ea:0b:fa:6a:df:cd:92:ba:f3:20:64:fd:9a:c3:
         74:77:a4:c1:d1:a7:01:c9:9e:67:37:f4:87:0e:56:2f:79:f3:
         d3:17:a3:a4:2d:5c:5c:d7:d1:2f:a4:f3:fd:36:8a:50:6a:cd:
         d5:db:8a:7a:ba:64:72:d0:ac:7b:25:7b:93:d9:07:7e:ba:fa:
         39:5e:7a:d7:0d:b8:e0:fd:e8:40:01:d5:f5:e7:1c:0c:c9:cb:
         02:51:bc:a4:ce:36:73:41:51:f3:ce:dc:c1:a8:17:86:8e:66:
         f5:f6:3c:37:e8:fa:12:ed:00:ec:73:30:03:a0:d6:e4:f0:54:
         d4:0d:ab:30:f8:26:ce:7f:42:48:cb:4a:15:be:dc:30:27:0d:
         34:e9:85:8a:47:39:0e:9c:4d:95:22:32:56:5e:ec:37:f8:fb:
         0f:78:36:cd:38:5a:63:30:27:d1:e0:c9:5a:db:75:48:d9:2e:
         89:e5:10:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCUL8f2Xm9QBBh7JTAeuGGOE7LOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDEwMDkxMzAzNTdaFw0yNTEwMDgxMzA4NTdaMDMxMTAvBgNV
BAMTKDcwNkVBQTk2QjI3QzQ3MUJGRkRDM0Y2RkQ2MEEwQTY1Qzc0NTlDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQl1ncvm8I+02v1YJlbURSPXH
ARLIe9Y4anTTxysT1g2hWm/jXruOEzzSmsnYXX6YOBKEsM+6tq7XXg7Rv80D37Zq
NVqdeZXoWL82iuBoUIzOcRr/ozWf1+KNRKPrpoCvBa3QDFITqWdBx5XmB+1ltqgi
N2CMb0qaFLTg8/m54A8UUSdvjaksUZ7dWhKy+DeRiW+uABoC8xvHCTyN+ttFLRAQ
wM1k6IyZzNHBfcr6IltryYHlbfIx1ljIergCxXllYOGajzuF8NcdNXj5ijGcT824
ZkZPPMG9H5Sao4en/Zvr9SYpjHKs03gYBhZpbukzFtQ1vMWknP5heKHw5A2BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcG6qlrJ8Rxv/3D9v1goKZcdFnHswHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzIzODMwMzQzYTY1NjMzNDNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzIzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA7EgDANBgkqhkiG9w0BAQsFAAOC
AQEARLyX9KVrswmVrUm1qAR0w8eyHv94QBXUSbWxaT+8qW5DIoPN2YZDLrKzUF7j
MF+9a9RldFJpbrPLzCL4A9Gnq4RKY1OB4QHJvW69h+oL+mrfzZK68yBk/ZrDdHek
wdGnAcmeZzf0hw5WL3nz0xejpC1cXNfRL6Tz/TaKUGrN1duKerpkctCseyV7k9kH
frr6OV561w244P3oQAHV9eccDMnLAlG8pM42c0FR887cwagXho5m9fY8N+j6Eu0A
7HMwA6DW5PBU1A2rMPgmzn9CSMtKFb7cMCcNNOmFikc5DpxNlSIyVl7sN/j7D3g2
zThaYzAn0eDJWtt1SNkuieUQOQ==
-----END CERTIFICATE-----
Generated at Wed Oct 30 16:32:36 2024 by rpki-client on console-fra.rpki-client.org