Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a3a2f33342d3334203d3e20323636303039.roa
File:                     323830343a343133303a3a2f33342d3334203d3e20323636303039.roa (raw, json)
Hash identifier:          zGFhfiXVV0LAm3ELzt4lsr0K1h7Rw9j3xVACGah2/ME=
Subject key identifier:   26:9B:E8:53:21:0E:B6:96:EA:A5:A4:00:B9:89:45:CA:5F:B8:09:EB
Certificate issuer:       /CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
Certificate serial:       1A71066C77CA080F6D3E6590111E566F5119BC9D
Authority key identifier: E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a3a2f33342d3334203d3e20323636303039.roa
Signing time:             Thu 04 Apr 2024 13:41:05 +0000
ROA not before:           Thu 04 Apr 2024 13:36:05 +0000
ROA not after:            Thu 03 Apr 2025 13:41:05 +0000
asID:                     266009
IP address blocks:        2804:4130::/34 maxlen: 34

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 17:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:06:6c:77:ca:08:0f:6d:3e:65:90:11:1e:56:6f:51:19:bc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
        Validity
            Not Before: Apr  4 13:36:05 2024 GMT
            Not After : Apr  3 13:41:05 2025 GMT
        Subject: CN=269BE853210EB696EAA5A400B98945CA5FB809EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:43:46:83:7d:20:a8:42:5f:14:cd:f6:58:
                    4d:d9:87:63:0f:80:5c:58:12:2e:60:f0:e8:77:ab:
                    6a:4c:99:a8:62:3b:27:94:b9:fb:fb:af:95:5c:df:
                    2c:68:3e:61:27:fc:f4:ba:73:89:92:4f:f3:52:e7:
                    9e:e4:49:1e:d2:02:3e:90:7d:39:94:fd:6d:f7:a4:
                    1d:53:40:d8:e9:49:20:76:6f:10:7c:66:7d:15:b1:
                    f1:98:e0:30:ae:30:81:35:08:b8:58:0d:4f:fb:a8:
                    fa:6d:9b:9d:78:01:67:c3:33:5e:ca:87:e2:b5:b7:
                    4a:51:69:d3:73:64:7e:7e:90:3d:1e:49:19:97:6b:
                    c4:2f:17:84:44:de:87:16:7b:8c:8d:8e:48:5e:69:
                    c1:6d:10:4e:70:90:ad:99:45:a0:ec:e5:3f:bb:83:
                    7e:e5:0b:bf:ba:4c:42:c2:53:2b:1a:72:da:03:00:
                    2b:61:6d:f5:86:81:21:1d:ab:f1:32:86:46:80:ee:
                    58:e2:a1:f8:8e:70:b1:8b:e0:39:4a:f3:40:84:e2:
                    84:02:1d:1f:6b:d4:8b:f7:2c:00:64:28:65:1f:4c:
                    be:ac:43:07:dd:c8:62:0b:d5:6b:f9:04:c6:c8:9f:
                    52:ca:99:e4:c9:91:e7:3f:df:67:36:1f:0f:12:7b:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:E8:53:21:0E:B6:96:EA:A5:A4:00:B9:89:45:CA:5F:B8:09:EB
            X509v3 Authority Key Identifier:
                keyid:E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/323830343a343133303a3a2f33342d3334203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4130::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:e4:9a:13:1a:a1:e7:fb:a9:3b:8f:90:e6:da:e9:a5:1f:89:
         ac:63:41:53:c2:51:8a:57:40:4f:de:10:59:60:df:10:28:7e:
         f1:3e:fe:7a:a3:a1:04:c9:6e:18:76:f8:0c:d8:42:3d:82:51:
         7e:b0:7f:4b:5b:ef:92:41:a8:a2:a7:85:bd:08:de:88:0a:ff:
         ab:f0:28:b4:91:8d:d4:ab:5c:1d:63:7c:77:1f:d5:ce:fe:61:
         5c:fa:db:4e:01:e2:92:9e:a7:d2:57:25:9b:83:ee:f9:ad:e8:
         45:03:30:2e:d2:17:38:20:0b:79:bb:8e:c0:bd:0c:df:f1:a4:
         3e:c0:dc:20:9d:97:21:36:e5:94:63:54:4f:36:e5:10:3c:81:
         27:01:33:8d:85:43:96:65:61:4a:38:78:14:bf:97:d3:95:4e:
         45:cc:79:06:07:78:4d:a1:99:ad:24:d8:36:4d:63:de:8f:65:
         fe:12:9d:aa:cc:6c:83:3b:91:56:58:1c:7f:07:e2:7a:18:3e:
         37:0a:e0:fa:79:5d:ed:67:a0:58:dd:1d:f9:97:b4:ff:eb:d3:
         0a:d6:57:d6:89:16:a5:a0:00:09:68:fb:4c:17:c1:af:86:0b:
         49:e6:32:42:4a:22:d1:cf:bb:94:fb:28:62:2d:e8:71:71:cf:
         d6:38:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 19:11:19 2024 by rpki-client on console-fra.rpki-client.org