Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a633030303a3a2f33342d3334203d3e20323637363638.roa
File:                     323830343a343530383a633030303a3a2f33342d3334203d3e20323637363638.roa (raw, json)
Hash identifier:          KhEudHLONodCGZQr0LHGeA53TaBUHoFrV/U1fDBciDE=
Subject key identifier:   04:45:A0:28:6E:DD:41:56:C4:C9:9F:4C:CC:30:73:E1:FF:9A:55:4E
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       57EEB6E271920D09922B986F1391F7A065A80D9F
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a633030303a3a2f33342d3334203d3e20323637363638.roa
Signing time:             Thu 04 Apr 2024 15:34:17 +0000
ROA not before:           Thu 04 Apr 2024 15:29:17 +0000
ROA not after:            Thu 03 Apr 2025 15:34:17 +0000
asID:                     267668
IP address blocks:        2804:4508:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 20:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ee:b6:e2:71:92:0d:09:92:2b:98:6f:13:91:f7:a0:65:a8:0d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Apr  4 15:29:17 2024 GMT
            Not After : Apr  3 15:34:17 2025 GMT
        Subject: CN=0445A0286EDD4156C4C99F4CCC3073E1FF9A554E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0c:ed:e9:f8:28:dd:7e:bc:7a:94:9f:c8:d9:
                    bf:52:c2:76:23:ba:af:01:5d:35:23:26:f6:8b:08:
                    60:fa:0c:74:f1:77:03:48:90:02:2a:29:c5:95:85:
                    22:d6:92:50:58:09:21:74:b5:8b:79:3b:1f:a2:06:
                    ec:c7:2f:e0:0b:25:78:60:2b:e7:d7:67:f1:c0:f7:
                    67:88:c8:9c:a2:5e:40:46:b0:b7:4c:f1:f5:a0:96:
                    82:90:af:c5:a0:a7:69:75:2c:3e:50:1d:d6:d0:5c:
                    24:d7:5d:80:cc:95:7a:7e:bf:ed:28:38:ee:3f:0e:
                    eb:71:11:f2:07:73:52:7a:22:7f:5b:9c:f4:ef:88:
                    68:f2:27:11:4d:4f:e1:83:06:7d:32:88:e3:0b:85:
                    26:f8:30:c2:37:b0:62:4d:e9:73:42:6e:4a:93:64:
                    af:73:3b:d7:75:01:55:88:13:d1:13:e0:cd:0d:1d:
                    a8:71:9f:35:93:40:8e:cb:5e:97:83:e2:7d:db:7c:
                    e4:64:f0:91:59:9a:f2:f6:70:ac:53:81:31:9d:aa:
                    3b:79:09:3a:c0:90:34:3a:b0:79:9a:67:82:bc:2b:
                    47:dd:99:38:58:f6:e9:10:96:b5:0b:df:08:b9:88:
                    4d:4c:7e:8c:76:c0:23:9e:ff:9e:8c:bf:06:4a:ff:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:45:A0:28:6E:DD:41:56:C4:C9:9F:4C:CC:30:73:E1:FF:9A:55:4E
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a633030303a3a2f33342d3334203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:66:bb:0e:5b:d3:1d:e8:06:28:c3:c3:9e:09:51:62:58:
         85:0c:3a:65:26:ab:5c:0e:30:2a:57:7b:f7:ce:fb:6b:b3:78:
         9c:3a:b6:b9:1b:4c:3a:04:99:92:7f:26:b4:d6:8e:71:3c:5a:
         aa:1e:65:fb:a2:ad:ee:5e:68:eb:07:61:e2:d6:9d:cc:8a:fa:
         1b:4e:51:de:d0:3f:1b:1c:c1:b4:3f:7f:23:bd:74:39:40:99:
         b4:a1:64:45:b5:a4:61:c2:ff:31:4c:2c:0a:41:b1:0e:b6:62:
         1a:ef:cd:a4:df:49:81:72:36:f3:1b:e2:66:05:93:03:46:d7:
         eb:d3:83:6c:09:1c:d7:1f:72:9a:fd:b4:61:a6:b3:72:c9:b0:
         55:d6:c8:e5:84:42:dc:3e:c0:d6:d2:7e:be:fa:f2:67:9a:51:
         c9:a9:c1:4f:97:7d:e5:2b:52:d3:7f:54:73:63:5c:8c:96:0e:
         35:0a:ee:90:e5:e7:54:77:44:b1:be:fc:fd:2d:2a:08:fd:e8:
         78:f0:3b:3e:c9:d2:3e:8d:88:7e:93:81:fa:d2:d0:33:6b:13:
         6e:24:ba:ae:3f:16:53:58:5d:74:eb:b9:49:d1:51:c2:60:cd:
         1c:f2:0e:b3:a7:f2:41:a8:27:e2:04:0b:fb:74:70:85:31:a0:
         07:8d:15:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org