Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/323830343a313736633a3a2f33322d3336203d3e20323633303938.roa
File:                     323830343a313736633a3a2f33322d3336203d3e20323633303938.roa (raw, json)
Hash identifier:          UOjRpIhYJtRHzGGIyHuAcW629juMJUGwM8K/AP3yUvs=
Subject key identifier:   98:2A:8F:83:1A:96:84:3D:DE:04:F4:66:57:8E:65:2B:01:60:53:6F
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       13930275F365D04B6CB42E5AF87189E564062FFD
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/323830343a313736633a3a2f33322d3336203d3e20323633303938.roa
Signing time:             Wed 03 Apr 2024 19:04:35 +0000
ROA not before:           Wed 03 Apr 2024 18:59:35 +0000
ROA not after:            Wed 02 Apr 2025 19:04:35 +0000
asID:                     263098
IP address blocks:        2804:176c::/32 maxlen: 36

Validation:               Failed, certificate revoked on Thu 16 May 2024 17:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:93:02:75:f3:65:d0:4b:6c:b4:2e:5a:f8:71:89:e5:64:06:2f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Apr  3 18:59:35 2024 GMT
            Not After : Apr  2 19:04:35 2025 GMT
        Subject: CN=982A8F831A96843DDE04F466578E652B0160536F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:4b:11:53:53:c8:77:b8:20:9b:a3:fd:04:
                    93:f4:0c:50:42:88:5a:f4:a5:75:78:a2:b0:d5:ad:
                    43:db:c9:a7:36:1d:49:dc:7f:43:ea:2a:40:91:fa:
                    6b:21:e1:3f:99:98:b9:08:c0:2d:77:35:38:ba:3b:
                    70:0e:77:33:6c:b1:38:6c:31:5a:7c:d8:c6:1a:67:
                    4e:6c:58:1f:9e:83:b3:c4:31:5c:e2:db:54:40:13:
                    c0:79:00:96:c9:ed:b8:ca:09:f5:79:ba:e8:a2:51:
                    33:21:60:8f:19:28:38:1e:89:a5:65:f7:42:22:e3:
                    80:41:0c:b1:62:83:ca:f1:d4:b8:6d:42:90:cd:b1:
                    d7:6a:63:ee:a3:af:34:50:cc:43:b9:8d:66:82:4a:
                    c0:05:a2:95:a7:f8:45:f0:0f:ee:a2:ba:c4:58:53:
                    36:34:e4:bf:24:cc:e7:76:ef:0e:d1:25:a8:2d:79:
                    ff:89:1e:0c:3f:6c:ce:16:ca:e1:ae:27:9d:1d:2c:
                    2e:bb:6b:71:4d:8c:81:28:86:63:84:8a:ba:6d:f1:
                    23:13:f8:80:01:d2:32:9d:2b:82:58:ba:9a:61:de:
                    b9:4f:f2:53:cd:5f:77:23:a9:68:f5:1b:a4:c3:94:
                    a3:1c:da:d7:64:5d:0c:31:f2:dd:33:1a:a5:e2:33:
                    2c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2A:8F:83:1A:96:84:3D:DE:04:F4:66:57:8E:65:2B:01:60:53:6F
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/323830343a313736633a3a2f33322d3336203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:176c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:bc:03:36:d9:cd:41:f4:55:35:38:99:02:9b:e7:b9:be:
         16:6e:7d:6e:08:fd:69:dc:a9:d5:70:fb:05:0b:2e:7c:8b:00:
         7e:0b:df:53:3c:1b:7e:17:63:5c:2d:d3:fe:aa:32:50:06:36:
         e2:b9:3e:48:70:d2:4e:0d:4f:52:46:91:2b:db:0f:a9:61:11:
         0b:d1:92:25:17:7f:5e:61:5e:d7:6d:36:c8:18:36:b4:bc:29:
         98:be:f5:76:79:b3:58:c8:95:06:c8:ed:9f:c2:e6:fc:94:37:
         86:0d:18:f9:01:13:7b:7e:8a:c6:d1:7d:f3:f9:55:17:67:20:
         b5:51:a3:76:9b:d3:59:fd:71:8b:83:d8:bf:2d:53:06:29:4f:
         9e:9a:f4:c3:4c:c5:96:f3:8d:52:f3:dd:f5:50:33:22:5a:8d:
         f4:33:ad:e8:98:c0:ef:28:5f:73:7b:73:45:c6:d2:f6:6e:78:
         5d:39:f0:ca:6a:27:4b:93:bc:a3:b2:5c:80:ca:89:02:09:41:
         f4:da:63:c5:e2:5c:cb:72:0c:06:57:f8:58:cc:2a:42:8d:0c:
         de:97:1e:a1:da:cf:b5:f2:91:2a:a0:4d:41:25:ad:82:9f:fb:
         df:d7:d7:18:ac:1f:14:94:be:85:44:d3:f2:79:77:cd:c6:98:
         e0:96:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org