Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a383030303a3a2f33332d3333203d3e20323730383236.roa
File:                     323830343a373230303a383030303a3a2f33332d3333203d3e20323730383236.roa (raw, json)
Hash identifier:          dqJAa1tUpgIvmvY6BV8IV85a89KqNgpOkftvLVOT+tU=
Subject key identifier:   72:C8:F2:93:22:A5:CF:45:F5:23:F1:73:52:DD:8F:69:15:82:BC:4C
Certificate issuer:       /CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
Certificate serial:       5A1590E615BCABDA855D6ABC17A16095BC6A20B6
Authority key identifier: D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a383030303a3a2f33332d3333203d3e20323730383236.roa
Signing time:             Thu 18 Apr 2024 17:34:30 +0000
ROA not before:           Thu 18 Apr 2024 17:29:30 +0000
ROA not after:            Thu 17 Apr 2025 17:34:30 +0000
asID:                     270826
IP address blocks:        2804:7200:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 19:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:15:90:e6:15:bc:ab:da:85:5d:6a:bc:17:a1:60:95:bc:6a:20:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
        Validity
            Not Before: Apr 18 17:29:30 2024 GMT
            Not After : Apr 17 17:34:30 2025 GMT
        Subject: CN=72C8F29322A5CF45F523F17352DD8F691582BC4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:8a:62:59:54:ea:2c:7d:35:09:f1:7c:a2:
                    9a:cc:b7:0c:2d:52:c2:6c:60:74:e2:09:23:f0:79:
                    1c:e2:1d:74:c6:c7:a7:ff:97:28:42:9e:4f:0d:d7:
                    78:84:aa:7d:bc:c7:65:8e:1c:e5:73:6b:00:e0:2e:
                    39:f8:15:84:2c:1b:80:45:02:94:e0:5f:9d:f8:aa:
                    fd:08:65:5c:d9:af:a7:c2:70:e1:25:17:d1:8f:5d:
                    7b:26:3e:13:62:69:78:b6:67:d8:c1:66:25:3c:66:
                    7b:c0:38:b6:2d:52:71:3e:2b:16:ea:d9:87:16:9d:
                    b3:ad:a0:c9:4c:c7:7e:a9:75:8a:d3:b3:bf:78:19:
                    f4:51:51:d0:2c:f1:c9:a9:ae:4f:4c:dd:1f:14:45:
                    18:9c:72:68:35:1d:4f:ea:4f:c2:ef:b8:a6:4b:d3:
                    78:74:ef:94:d8:32:71:9e:80:8c:5c:dd:42:a0:0a:
                    d9:3c:9d:22:43:48:32:1d:2e:9e:71:0a:cd:bd:3f:
                    42:6b:64:13:cf:2d:27:46:24:7f:70:f7:09:d6:56:
                    cf:6e:83:9f:b7:ed:d6:79:d5:a1:cd:8a:e5:e2:63:
                    f7:46:21:14:47:57:d2:cf:a8:ea:d2:38:62:80:70:
                    89:1c:17:47:ab:bd:5b:cc:16:f7:0e:94:14:b5:22:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C8:F2:93:22:A5:CF:45:F5:23:F1:73:52:DD:8F:69:15:82:BC:4C
            X509v3 Authority Key Identifier:
                keyid:D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a383030303a3a2f33332d3333203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7200:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         91:27:0e:06:ab:b9:ca:f9:4e:a7:e5:da:0e:dc:49:14:e3:4f:
         46:df:3c:12:71:3a:66:11:fb:b1:c3:21:f4:2e:43:af:ce:1d:
         65:f0:d8:78:a5:b7:ea:b4:d4:e3:f3:27:e6:1a:c1:2e:65:dc:
         f7:26:ed:fc:d2:8c:ac:11:b7:d1:24:13:28:fd:a6:bf:5d:84:
         3a:ad:b8:ff:cf:2e:84:67:52:ef:ef:05:10:5f:dd:7e:78:41:
         37:55:50:66:9e:64:e5:03:86:71:06:c4:d6:52:52:e0:23:3f:
         fa:db:46:5f:db:25:68:0d:05:62:6e:78:df:5d:ab:20:0d:ed:
         99:2d:fe:59:c2:54:64:24:1c:d1:0d:e4:60:0c:32:27:c9:03:
         a7:f7:21:63:51:ec:1e:3c:0f:11:b2:8f:ed:9a:2f:b9:c0:21:
         ff:6b:26:3f:2f:5f:a3:be:bb:01:a6:30:ab:d3:7f:b8:4c:ef:
         2a:73:08:f8:84:41:5a:e1:df:36:84:25:32:95:ea:cb:29:1f:
         b1:aa:77:e4:b7:3b:b9:98:b9:a4:ec:d8:9d:6a:39:b1:6c:ea:
         d1:b7:e7:fb:86:1c:44:13:76:c4:ba:68:3e:8a:f2:d7:72:66:
         6a:cf:f2:a7:ca:04:54:96:52:f5:05:0f:8e:ac:42:bb:08:90:
         59:95:68:24
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWhWQ5hW8q9qFXWq8F6FglbxqILYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcxNjA2QjFBNkYyNUVEQ0Y2MzIzRjdGNUU3RDE2MTUx
NkUxOTNDNDAeFw0yNDA0MTgxNzI5MzBaFw0yNTA0MTcxNzM0MzBaMDMxMTAvBgNV
BAMTKDcyQzhGMjkzMjJBNUNGNDVGNTIzRjE3MzUyREQ4RjY5MTU4MkJDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjX4piWVTqLH01CfF8oprMtwwt
UsJsYHTiCSPweRziHXTGx6f/lyhCnk8N13iEqn28x2WOHOVzawDgLjn4FYQsG4BF
ApTgX534qv0IZVzZr6fCcOElF9GPXXsmPhNiaXi2Z9jBZiU8ZnvAOLYtUnE+Kxbq
2YcWnbOtoMlMx36pdYrTs794GfRRUdAs8cmprk9M3R8URRiccmg1HU/qT8LvuKZL
03h075TYMnGegIxc3UKgCtk8nSJDSDIdLp5xCs29P0JrZBPPLSdGJH9w9wnWVs9u
g5+37dZ51aHNiuXiY/dGIRRHV9LPqOrSOGKAcIkcF0ervVvMFvcOlBS1IpEnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcsjykyKlz0X1I/FzUt2PaRWCvEwwHwYDVR0j
BBgwFoAU1xYGsabyXtz2Mj9/Xn0WFRbhk8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWExVDRZbjlrWWViSm1TZ0Y2dVRuTXdROWtHTmdmUFhScWJFU2dyNkRp
djYvMC9ENzE2MDZCMUE2RjI1RURDRjYzMjNGN0Y1RTdEMTYxNTE2RTE5M0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MTYwNkIxQTZGMjVFRENG
NjMyM0Y3RjVFN0QxNjE1MTZFMTkzQzQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhMVQ0WW45a1llYkptU2dGNnVUbk13UTlrR05nZlBYUnFiRVNncjZEaXY2LzAv
MzIzODMwMzQzYTM3MzIzMDMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM4MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEcgCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCRJw4Gq7nK+U6n5doO3EkU409G3zwScTpmEfuxwyH0LkOvzh1l8Nh4pbfq
tNTj8yfmGsEuZdz3Ju380oysEbfRJBMo/aa/XYQ6rbj/zy6EZ1Lv7wUQX91+eEE3
VVBmnmTlA4ZxBsTWUlLgIz/620Zf2yVoDQVibnjfXasgDe2ZLf5ZwlRkJBzRDeRg
DDInyQOn9yFjUewePA8Rso/tmi+5wCH/ayY/L1+jvrsBpjCr03+4TO8qcwj4hEFa
4d82hCUylerLKR+xqnfktzu5mLmk7NidajmxbOrRt+f7hhxEE3bEumg+ivLXcmZq
z/KnygRUllL1BQ+OrEK7CJBZlWgk
-----END CERTIFICATE-----
Generated at Fri Aug 2 21:24:07 2024 by rpki-client on console-ams.rpki-client.org