Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/323830343a336331383a3a2f33322d3332203d3e20323636313930.roa
File:                     323830343a336331383a3a2f33322d3332203d3e20323636313930.roa (raw, json)
Hash identifier:          yIbdTfbjtpP0QNOtGThzivx/7g8ExUQnBIUAgUNiZVM=
Subject key identifier:   35:79:42:81:22:3C:89:6D:62:85:A7:FD:8E:D5:E6:B1:C4:F0:6F:3D
Certificate issuer:       /CN=D38BB940B82325DF991DC304A7737E77B8C8E681
Certificate serial:       4622D7952DF277DD123D507103E6476766A7C457
Authority key identifier: D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/323830343a336331383a3a2f33322d3332203d3e20323636313930.roa
Signing time:             Thu 04 Apr 2024 05:20:48 +0000
ROA not before:           Thu 04 Apr 2024 05:15:48 +0000
ROA not after:            Thu 03 Apr 2025 05:20:48 +0000
asID:                     266190
IP address blocks:        2804:3c18::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:22:d7:95:2d:f2:77:dd:12:3d:50:71:03:e6:47:67:66:a7:c4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38BB940B82325DF991DC304A7737E77B8C8E681
        Validity
            Not Before: Apr  4 05:15:48 2024 GMT
            Not After : Apr  3 05:20:48 2025 GMT
        Subject: CN=35794281223C896D6285A7FD8ED5E6B1C4F06F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:3e:51:d8:7c:c9:1f:6a:7a:70:25:22:4b:
                    d1:57:99:d8:3e:c6:3c:9d:01:58:c0:9a:99:bf:2e:
                    67:de:1a:0f:e5:e4:ba:f6:0e:3d:9e:6f:96:69:71:
                    5f:14:f6:b1:8f:49:d9:79:37:4d:ab:4c:fd:ca:55:
                    d9:88:6c:68:f1:66:2b:a8:36:e8:a3:0b:76:0f:94:
                    93:c5:18:84:cd:10:c2:bf:42:3b:da:d6:17:88:a4:
                    ea:57:f1:38:e5:9b:37:19:d2:c4:43:f0:f7:5a:a3:
                    d5:07:01:72:16:4d:e0:fe:ef:3c:97:45:43:3d:e5:
                    c6:1e:7a:b7:a3:3b:25:fa:9d:91:60:ad:53:68:ff:
                    de:d0:f2:b5:69:5d:f2:ae:f7:64:39:ab:d8:c5:30:
                    af:c9:e1:36:b4:a6:5d:c2:3a:14:a9:d5:2f:2c:6d:
                    61:ea:08:6c:71:74:97:4a:86:b1:c5:5a:8e:e0:c4:
                    5a:e3:16:7c:41:bf:83:60:8c:40:85:4c:dd:78:d8:
                    fa:6f:2d:b4:5b:62:5c:b2:29:28:98:b0:20:b6:57:
                    e0:d1:e9:ea:07:79:ad:6c:2d:03:6b:ef:6b:43:fb:
                    1a:0a:f9:56:0b:19:e1:7d:c2:55:bc:63:86:23:35:
                    52:98:2f:37:61:78:20:d6:83:19:86:44:1a:dd:6d:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:79:42:81:22:3C:89:6D:62:85:A7:FD:8E:D5:E6:B1:C4:F0:6F:3D
            X509v3 Authority Key Identifier:
                keyid:D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/D38BB940B82325DF991DC304A7737E77B8C8E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/323830343a336331383a3a2f33322d3332203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:27:73:92:74:ba:c4:4a:c5:fe:58:6c:e1:84:a9:6f:13:
         ed:9a:e0:80:aa:cf:06:6b:d7:5a:61:9f:d7:e3:3a:73:0b:72:
         37:cf:f6:5a:54:5f:11:65:2e:58:46:bf:34:3f:f4:7e:2e:de:
         c4:a8:79:00:0b:b9:b6:18:22:0e:9c:fb:fc:93:59:9c:30:7c:
         9b:da:db:7d:99:4d:df:25:84:40:6f:1c:15:5e:4b:fe:21:78:
         48:35:62:a9:fb:5e:73:2b:8c:f5:e9:dc:e3:bd:15:8c:c1:e3:
         50:26:ef:ed:f6:bf:d1:47:a8:3b:6a:a2:ed:e7:bd:cd:2f:c4:
         84:a0:54:5b:e6:3e:a9:15:65:d4:45:20:55:14:d4:d4:ed:04:
         5c:ca:86:03:87:22:ca:80:4f:b5:f6:5b:d5:9c:7b:41:4d:85:
         b1:b9:21:6d:b5:97:4c:b2:ed:a4:9c:90:fc:df:b9:0b:f6:b0:
         23:0a:0a:20:de:64:e3:a2:d9:ec:38:23:65:d1:bd:e0:71:9c:
         94:c3:93:f9:23:39:2f:f8:4f:1b:9e:1d:f9:0e:3e:3b:d9:f1:
         a1:f3:29:b7:92:02:de:5b:29:d9:40:26:3f:18:a2:46:00:16:
         bc:69:77:46:a9:c3:e5:7a:8c:b8:ce:80:f2:3f:9e:ef:85:1e:
         99:5c:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org