Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/323830343a336331383a383030303a3a2f33332d3333203d3e20323636313930.roa
File:                     323830343a336331383a383030303a3a2f33332d3333203d3e20323636313930.roa (raw, json)
Hash identifier:          K5+njk7L27KYTpZJ2SeWhqS7BcClgGJZbWBq93wmFW8=
Subject key identifier:   B4:2F:EE:31:3D:35:81:29:F7:5A:39:52:A8:69:A0:F2:A2:A2:46:10
Certificate issuer:       /CN=D38BB940B82325DF991DC304A7737E77B8C8E681
Certificate serial:       3114D1AAB5F2D0A33E9D393B8E0432240A619BEC
Authority key identifier: D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/323830343a336331383a383030303a3a2f33332d3333203d3e20323636313930.roa
Signing time:             Thu 04 Apr 2024 05:20:49 +0000
ROA not before:           Thu 04 Apr 2024 05:15:49 +0000
ROA not after:            Thu 03 Apr 2025 05:20:49 +0000
asID:                     266190
IP address blocks:        2804:3c18:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:14:d1:aa:b5:f2:d0:a3:3e:9d:39:3b:8e:04:32:24:0a:61:9b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38BB940B82325DF991DC304A7737E77B8C8E681
        Validity
            Not Before: Apr  4 05:15:49 2024 GMT
            Not After : Apr  3 05:20:49 2025 GMT
        Subject: CN=B42FEE313D358129F75A3952A869A0F2A2A24610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:5a:1d:4a:ae:fc:63:4f:36:f8:f0:e4:64:
                    ca:5a:77:ea:60:a6:ee:0c:87:72:10:ec:96:d6:8b:
                    65:74:71:77:fb:39:1d:26:39:75:4f:ab:b8:f9:06:
                    ac:9b:1e:60:7b:6c:32:cb:72:30:66:f9:6a:5e:2f:
                    1c:ac:21:e4:2e:53:d2:a7:dc:f4:83:2c:a6:2b:ee:
                    f1:43:a9:01:49:a6:2b:3e:ab:6e:d5:33:ae:48:fb:
                    f2:88:3d:a4:8c:05:5d:8f:f1:64:6f:0f:e6:c0:53:
                    56:88:a8:a1:be:81:10:ce:5c:a6:03:ce:87:52:a8:
                    f7:3b:53:51:49:44:35:cf:19:c8:7f:bf:3b:0f:af:
                    ba:90:7a:5c:01:e1:a6:84:51:2c:af:74:ad:51:af:
                    5d:b6:73:7c:96:25:1a:2f:bb:d5:d8:da:b9:d6:f5:
                    35:36:37:f2:b7:02:6c:c9:52:69:9d:7f:02:31:a4:
                    2f:ad:7f:5b:1d:85:f1:1c:61:51:5e:1a:5d:8a:ef:
                    6a:12:53:fc:7b:51:a3:c2:27:cc:66:a8:eb:5b:19:
                    b7:94:f9:b3:f8:c9:5f:07:81:43:39:7a:4c:d3:89:
                    b4:d9:48:b3:78:12:fb:d7:32:37:64:69:34:32:4b:
                    34:fe:c9:ef:8d:f6:0a:73:14:26:8c:0e:ae:93:c2:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2F:EE:31:3D:35:81:29:F7:5A:39:52:A8:69:A0:F2:A2:A2:46:10
            X509v3 Authority Key Identifier:
                keyid:D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/D38BB940B82325DF991DC304A7737E77B8C8E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/323830343a336331383a383030303a3a2f33332d3333203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         79:50:cc:51:8c:1b:48:c1:4a:85:01:61:07:46:d7:31:51:ee:
         a4:ae:5b:d8:41:d2:6a:ef:93:98:d6:0e:f3:84:07:60:03:c9:
         ea:2d:ed:de:40:14:d2:1d:bb:21:8b:db:35:45:74:e0:63:4a:
         52:4c:31:78:24:3a:e5:6d:7f:c7:f8:19:1b:16:c8:ff:bf:f8:
         c6:e8:1a:b9:b8:ec:ae:36:a9:ce:0e:b8:24:cd:d9:7a:ca:b3:
         ce:3a:7a:7e:6b:49:22:51:f5:9d:b3:3b:fd:d8:09:2f:c4:02:
         df:b9:7c:a9:01:19:3c:51:4d:e3:ca:8a:0e:5c:0a:f7:5d:07:
         1d:ae:cc:0f:4f:53:af:87:27:fa:ed:f7:44:f1:21:56:b1:8a:
         48:bf:40:96:db:30:bb:4b:7d:c6:df:8c:41:ed:92:3b:81:3f:
         0e:32:89:51:17:3d:14:35:12:5b:55:3d:c3:a1:f7:9a:b9:75:
         40:b6:9c:59:d6:61:1b:ca:8e:9b:9d:15:4b:b0:35:e1:28:18:
         21:03:3b:76:25:c8:c8:91:81:ad:1b:41:8f:24:a3:a3:be:94:
         25:7d:c9:f7:4a:40:92:de:ac:33:25:20:1d:12:54:0e:47:05:
         46:8b:9b:26:37:d4:fc:03:b4:f7:bf:99:3e:a7:9a:7e:aa:97:
         28:a2:85:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org