Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a633030303a3a2f33342d3334203d3e20323632393733.roa
File:                     323830343a6563343a633030303a3a2f33342d3334203d3e20323632393733.roa (raw, json)
Hash identifier:          f9Wqt6r7Yrj9ZOJplplMUbt/msb1DjHkiqSZSOQfW1I=
Subject key identifier:   99:92:F8:C8:DB:A9:39:8C:CD:D3:A5:35:BC:C7:68:FD:F1:4C:31:C0
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       42E217FD5C0822A3759A80D732FE4B41E86A47D4
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a633030303a3a2f33342d3334203d3e20323632393733.roa
Signing time:             Wed 09 Oct 2024 13:08:58 +0000
ROA not before:           Wed 09 Oct 2024 13:03:58 +0000
ROA not after:            Wed 08 Oct 2025 13:08:58 +0000
asID:                     262973
IP address blocks:        2804:ec4:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 14:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e2:17:fd:5c:08:22:a3:75:9a:80:d7:32:fe:4b:41:e8:6a:47:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  9 13:03:58 2024 GMT
            Not After : Oct  8 13:08:58 2025 GMT
        Subject: CN=9992F8C8DBA9398CCDD3A535BCC768FDF14C31C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:52:2a:3f:2e:c2:bf:b5:8e:57:db:08:c7:
                    3e:88:85:09:fd:50:62:8d:cb:38:b2:35:95:14:e2:
                    ef:31:49:46:7e:9d:d8:db:ae:70:72:ef:32:21:23:
                    e6:e0:4f:c0:75:15:a8:26:d5:39:48:41:e1:d6:15:
                    07:61:e6:e4:cf:d9:c6:f5:df:7d:4e:a7:fc:7e:fe:
                    91:a7:e3:b3:f7:64:5f:bd:8b:97:21:4a:e0:a2:cf:
                    e5:f4:e5:2e:8e:a0:43:77:d9:46:4c:e6:08:b7:59:
                    af:fd:d6:6d:aa:9e:8f:ae:08:d7:e6:ce:81:4c:47:
                    15:25:34:bb:70:b4:62:9e:de:b6:ef:8e:27:da:c8:
                    91:8e:cb:d0:b4:ff:26:56:06:f1:bb:4a:c8:b6:aa:
                    ea:ac:60:27:48:86:be:cb:0d:d1:63:f1:56:c0:7f:
                    8c:69:28:3b:9b:48:29:85:f5:37:01:5f:89:ce:7f:
                    b5:e8:96:51:5c:08:7e:0f:5c:05:f1:c1:01:eb:05:
                    51:3e:8f:63:fc:67:fc:d1:3d:07:08:07:07:12:7b:
                    6a:56:b5:58:7d:92:34:22:e1:8f:71:46:e5:d2:a6:
                    e7:d8:e4:09:1d:2e:83:fa:28:95:eb:ac:e9:74:8f:
                    4f:2b:36:fc:76:0d:92:3e:d8:32:a4:6e:bd:37:e0:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:F8:C8:DB:A9:39:8C:CD:D3:A5:35:BC:C7:68:FD:F1:4C:31:C0
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a633030303a3a2f33342d3334203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:27:c5:92:6a:09:22:35:28:83:2d:01:38:bd:e1:1b:1b:
         27:b2:91:80:d9:d9:37:c4:ac:0f:b6:47:0e:9c:ae:1b:09:4b:
         30:72:c4:8e:ba:24:fd:15:46:dc:64:47:29:b5:bd:f3:a8:19:
         33:ac:3a:39:a1:d0:81:7d:d4:09:bb:03:90:3e:54:14:6f:7c:
         db:42:e3:6d:39:5f:c1:eb:5d:19:dd:d0:79:c9:cc:38:ef:ca:
         60:0b:94:f4:fc:39:c7:91:11:e6:81:0e:14:c2:8a:06:e9:23:
         92:d0:13:21:84:b3:60:11:16:92:df:82:46:50:2b:b3:8e:54:
         fe:2e:b8:b0:8a:93:ed:83:a8:d8:d7:53:8e:56:dc:31:0d:a6:
         b4:d4:17:65:50:92:f0:ff:ec:7a:1f:ab:eb:9f:84:e1:01:de:
         7c:c8:ad:dc:b3:ba:60:67:e8:15:17:c3:31:80:60:30:68:88:
         ee:38:ad:f6:b2:f1:f4:c3:c6:df:17:66:63:b3:92:20:06:bc:
         22:43:ba:95:fc:57:8b:01:14:18:d7:42:6e:32:0a:6b:77:ef:
         14:95:07:b4:bf:a3:45:6e:2a:68:91:24:f6:51:e7:54:c6:f4:
         34:a3:58:d0:7e:64:c2:30:c4:88:10:6c:1e:b9:c3:95:28:3a:
         68:77:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 16:32:36 2024 by rpki-client on console-fra.rpki-client.org