Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33342d3334203d3e20323637363638.roa
File:                     323830343a343530383a383030303a3a2f33342d3334203d3e20323637363638.roa (raw, json)
Hash identifier:          iu9HsgOhPUeklU1BdMjy/5hOTUN5dbOSTp/NvJA0+Sw=
Subject key identifier:   70:66:52:57:8D:B7:03:C4:1A:49:33:BD:9A:F2:2F:C5:DE:A6:DE:80
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       766083F57A706550579A96D298AE60E529588CFD
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33342d3334203d3e20323637363638.roa
Signing time:             Thu 04 Apr 2024 15:34:17 +0000
ROA not before:           Thu 04 Apr 2024 15:29:17 +0000
ROA not after:            Thu 03 Apr 2025 15:34:17 +0000
asID:                     267668
IP address blocks:        2804:4508:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 20:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:60:83:f5:7a:70:65:50:57:9a:96:d2:98:ae:60:e5:29:58:8c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Apr  4 15:29:17 2024 GMT
            Not After : Apr  3 15:34:17 2025 GMT
        Subject: CN=706652578DB703C41A4933BD9AF22FC5DEA6DE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:2a:d4:8b:db:18:a9:36:b6:4c:49:fa:9d:
                    27:8a:ab:43:b1:40:2d:93:bd:46:08:b0:71:a3:42:
                    40:9f:89:a0:ae:0e:a2:5d:b2:f4:07:10:ca:92:6d:
                    d2:e0:cd:e7:7e:0f:c5:0c:ee:a0:9e:ae:eb:47:d7:
                    5f:62:2c:fa:d5:ba:e5:4b:08:73:0b:9e:65:fc:20:
                    17:18:4d:2a:20:ac:70:62:94:d1:ce:6b:0a:b9:ef:
                    bb:c5:a7:d3:36:a5:b3:76:ba:43:40:c3:e2:13:70:
                    ef:e4:53:65:7c:c9:be:58:1d:12:d5:53:3d:52:06:
                    b9:b6:55:94:62:db:53:9b:a1:72:4d:ef:58:f6:52:
                    1a:59:c8:8b:6a:2a:45:f2:6d:37:2d:8f:94:90:c9:
                    2e:59:39:94:8c:58:b0:79:c1:f3:59:fb:c6:2b:4b:
                    e6:54:a3:56:f8:5f:6a:3c:49:f2:86:a7:53:3c:99:
                    fe:b4:3e:31:60:24:06:16:19:18:26:ab:af:53:74:
                    50:08:36:71:d7:23:06:d3:08:55:1c:e7:5f:8b:26:
                    01:c8:f0:d5:81:09:9d:58:08:e0:56:3a:de:d4:d1:
                    d4:85:85:da:12:00:d8:74:f0:81:c2:83:12:ea:11:
                    6f:2e:47:dc:85:45:db:03:8f:f7:98:20:31:fb:20:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:66:52:57:8D:B7:03:C4:1A:49:33:BD:9A:F2:2F:C5:DE:A6:DE:80
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33342d3334203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:03:4d:03:64:5f:69:c2:e7:40:90:c4:fd:ee:28:5c:2f:
         05:cf:40:ac:e9:32:ad:6b:8d:e2:a3:46:44:f4:c0:6f:60:2c:
         5d:7c:2f:0b:44:37:77:d2:5e:31:fe:2e:af:80:1a:40:29:a6:
         58:67:27:8d:35:fc:ef:e5:41:bf:1f:39:ba:87:5c:4d:04:ac:
         54:f5:c3:67:b3:55:16:e0:b8:eb:7c:c5:b9:cb:19:e8:a9:8b:
         f1:aa:c3:eb:26:bb:76:b8:f7:49:37:fb:19:42:76:33:55:8e:
         13:c1:0c:a1:d0:d0:16:bd:4a:a3:95:a4:1b:24:22:e7:e3:4f:
         3b:bf:69:eb:60:44:1d:1d:17:ab:47:db:8e:b1:60:82:f5:c1:
         62:03:09:4f:f8:5a:63:ec:fb:10:86:bc:20:b5:3c:a5:89:e0:
         df:e0:e6:d9:96:94:3a:6c:cf:c6:dd:34:57:7e:c7:0d:82:f0:
         7c:f1:90:cd:77:c1:53:c7:49:ca:0a:88:75:79:ce:00:7a:59:
         37:83:3a:5f:8e:34:4b:2f:69:95:40:32:b4:71:49:96:48:0c:
         66:25:fd:ae:17:73:a3:8b:92:7d:03:d5:a0:ee:e0:ee:40:c5:
         bf:23:8d:d9:ea:d1:5b:76:e1:59:a9:eb:b5:68:b5:f6:a9:24:
         9b:d2:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org