Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3634203d3e203631363634.roa
File:                     323830343a316339383a3a2f33322d3634203d3e203631363634.roa (raw, json)
Hash identifier:          SBerwKr34OLVC6N277uSE0otn/SB3hBmyreJWwdOZYE=
Subject key identifier:   17:1B:52:63:B5:9A:DE:6B:E4:48:30:F8:16:1A:3D:E8:F6:EF:56:D3
Certificate issuer:       /CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
Certificate serial:       29E8434C62034D63DAB9964D8C8AB9256B57FE17
Authority key identifier: A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3634203d3e203631363634.roa
Signing time:             Mon 22 Jul 2024 12:03:19 +0000
ROA not before:           Mon 22 Jul 2024 11:58:19 +0000
ROA not after:            Mon 21 Jul 2025 12:03:19 +0000
asID:                     61664
IP address blocks:        2804:1c98::/32 maxlen: 64

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 15:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e8:43:4c:62:03:4d:63:da:b9:96:4d:8c:8a:b9:25:6b:57:fe:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
        Validity
            Not Before: Jul 22 11:58:19 2024 GMT
            Not After : Jul 21 12:03:19 2025 GMT
        Subject: CN=171B5263B59ADE6BE44830F8161A3DE8F6EF56D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:40:33:4b:66:1f:e7:96:2e:8d:72:58:72:bc:
                    dc:4e:eb:87:4e:73:6b:1e:ec:b5:df:f0:2b:41:39:
                    34:e4:8e:4a:f9:08:9b:5b:d6:20:c3:ba:4f:f0:6b:
                    bf:fb:f1:31:79:9b:5d:f5:12:cf:41:88:e5:2c:44:
                    e3:8a:5d:a5:75:7c:f4:15:58:d2:37:61:bb:8a:18:
                    4c:9a:8e:92:e3:3a:2e:d0:05:a2:f8:ea:62:46:ab:
                    8e:04:78:ee:26:c4:09:86:6e:3c:94:8b:9e:46:3b:
                    f3:51:ab:98:da:75:83:ff:e2:e3:f3:05:81:17:29:
                    36:77:3e:12:83:30:67:8f:3c:14:e5:1a:94:35:06:
                    9a:e3:86:72:d7:64:7f:4d:02:91:05:85:82:8f:c9:
                    bd:3b:71:3b:da:78:19:10:3c:93:ef:e8:48:e0:8a:
                    d6:00:80:8a:f7:bd:41:52:c7:ba:f3:e7:7f:95:39:
                    09:e2:c0:4a:e7:a8:49:3a:7b:0f:f8:b2:bf:21:b6:
                    12:75:ad:79:e3:a6:7c:d4:bf:2f:96:f5:79:d7:df:
                    32:f6:30:29:a9:b3:33:5a:1e:91:2d:56:a5:25:eb:
                    bf:d2:e1:55:0f:ea:3a:aa:b9:0e:3c:67:e9:c8:a0:
                    70:46:b0:e4:24:d7:6f:49:10:f0:d5:85:dd:d3:8d:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1B:52:63:B5:9A:DE:6B:E4:48:30:F8:16:1A:3D:E8:F6:EF:56:D3
            X509v3 Authority Key Identifier:
                keyid:A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/323830343a316339383a3a2f33322d3634203d3e203631363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c98::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:19:1c:8c:3b:2d:70:f8:9a:18:33:28:d1:f3:87:82:b0:0b:
         17:64:25:26:79:1f:a2:ad:61:e0:cc:1f:c4:39:0a:ef:59:d5:
         6c:2d:33:53:48:df:1d:06:c8:29:eb:8b:bd:8e:67:df:d5:22:
         ca:f0:9e:5b:c1:03:f0:a9:47:aa:a5:8d:ae:a1:0e:cf:27:55:
         80:41:40:d5:ef:3d:10:ee:2c:2e:40:13:58:66:c2:24:48:6f:
         c3:79:59:1c:a8:50:91:23:31:09:14:6a:34:64:2f:64:27:8a:
         cb:e8:21:76:13:f9:ce:8b:c8:e0:59:39:30:f6:57:7f:8c:fb:
         ce:51:2f:33:a3:ad:4c:3f:36:14:ff:50:c4:48:97:35:16:4b:
         cb:ff:b3:5f:fa:78:aa:0d:e9:78:44:11:c6:eb:d3:68:fb:5a:
         a0:28:20:a7:91:68:6b:12:96:d5:d5:8e:cc:6e:76:37:33:5e:
         bd:1d:93:c6:d6:45:ae:ac:9b:6f:4b:02:1e:7e:fc:21:15:3a:
         a2:4d:fd:bd:06:43:4f:e4:30:23:08:aa:07:6b:25:f8:18:75:
         13:66:a3:f3:03:02:6f:29:14:da:bf:1c:74:c9:85:e1:96:f7:
         79:f6:c8:9c:23:6f:ad:27:14:d4:40:41:96:36:cb:15:81:ce:
         c2:39:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 19:51:40 2024 by rpki-client on console-ams.rpki-client.org