Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa
File:                     323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa (raw, json)
Hash identifier:          41n3z1peed2NKgPxwKrbo3F0O4sD+3xLmUPYtSYQNJg=
Subject key identifier:   F6:2C:EA:A3:A8:DB:DF:3C:C4:32:64:DD:82:35:7D:9F:BA:9D:63:E9
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       3371A916A5584DB4D3985773F97A6F2C784224D1
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa
Signing time:             Thu 04 Apr 2024 15:34:16 +0000
ROA not before:           Thu 04 Apr 2024 15:29:16 +0000
ROA not after:            Thu 03 Apr 2025 15:34:16 +0000
asID:                     267668
IP address blocks:        2804:4508:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 20:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:71:a9:16:a5:58:4d:b4:d3:98:57:73:f9:7a:6f:2c:78:42:24:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Apr  4 15:29:16 2024 GMT
            Not After : Apr  3 15:34:16 2025 GMT
        Subject: CN=F62CEAA3A8DBDF3CC43264DD82357D9FBA9D63E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:95:6b:ad:45:38:c2:58:f5:9e:77:88:ed:
                    f1:31:0e:31:bb:45:e1:85:21:04:3d:4a:a7:a7:cb:
                    65:5d:86:52:e2:04:7e:a0:08:c8:2f:3c:d7:61:e1:
                    de:6b:6e:5c:12:a8:1a:4c:05:d1:d7:82:b6:b0:f1:
                    e0:78:88:8a:89:29:e0:04:32:f9:fc:82:28:81:ae:
                    10:82:60:37:12:2f:37:35:44:c1:a3:a8:3b:02:4f:
                    2c:7b:e0:ba:ab:45:3f:c1:83:e1:a8:17:d9:27:61:
                    fa:ca:15:15:ba:7d:3b:db:21:d3:f1:1a:bd:0c:68:
                    c5:46:ca:87:11:7f:a9:b1:1e:7a:55:38:f6:46:3e:
                    e2:ba:1e:e3:41:99:28:65:24:62:08:13:03:d4:19:
                    97:7a:a7:f4:51:2a:04:45:91:22:a9:0e:38:28:11:
                    ad:a1:84:a8:b8:40:ef:de:82:da:8d:c8:a2:38:57:
                    dc:a7:8e:22:67:1e:59:10:88:5e:5c:56:43:f7:08:
                    14:a6:61:03:01:df:0b:09:62:de:3e:47:ba:76:65:
                    c4:bd:08:06:dd:ea:f5:ec:9a:96:37:a3:3b:94:a7:
                    14:0e:bb:07:c3:25:fb:7e:ab:ea:7f:02:34:90:81:
                    e6:c2:58:93:b0:4d:63:eb:98:b7:49:22:71:3a:82:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2C:EA:A3:A8:DB:DF:3C:C4:32:64:DD:82:35:7D:9F:BA:9D:63:E9
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         be:76:b4:ee:ec:42:30:f6:24:50:6b:85:d7:7d:d5:9d:7c:91:
         43:8c:bd:e4:51:55:7f:f7:33:55:72:9a:80:0b:c9:e7:02:f5:
         1b:45:10:73:d5:34:05:b3:bd:73:13:9a:ba:90:99:5b:09:75:
         67:f0:83:c2:56:b5:b1:07:0e:07:20:27:a2:f3:bd:73:16:7e:
         45:75:22:98:97:cf:97:ec:94:10:49:06:5e:6a:30:a3:58:4c:
         97:27:ed:72:e6:d8:9c:96:25:f6:9f:0c:de:3f:c3:cb:d9:93:
         96:cf:78:ad:88:40:d0:bd:91:0d:dd:29:4a:d6:4d:2a:17:89:
         70:38:86:ff:22:fc:c3:1d:01:c7:89:64:c3:da:15:1f:bb:28:
         22:08:b9:d2:ef:9f:ee:c8:0e:8d:23:74:e1:a6:f0:8c:cc:ab:
         d8:48:9d:47:55:51:20:6e:32:9e:94:b8:69:5e:68:35:0a:00:
         b4:f2:a7:ae:e0:56:4b:0a:9b:d3:b5:4a:4e:2b:ef:1c:59:9d:
         71:48:47:4b:ed:ab:c5:ed:48:b5:10:5e:bc:ea:af:22:3b:bf:
         9b:0a:a7:46:58:e2:d0:d8:0a:23:80:2c:73:99:ea:8c:a6:1a:
         bf:e0:9b:f2:58:96:95:0a:9e:2a:c9:ed:af:b4:47:f1:e7:24:
         41:a8:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:42:48 2024 by rpki-client on console-ams.rpki-client.org