Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a653030303a3a2f33362d3336203d3e20323731353636.roa
File:                     323830343a376438343a653030303a3a2f33362d3336203d3e20323731353636.roa (raw, json)
Hash identifier:          3qlsU6gr3Y/46UmkegozQw4F/HP6jyOD8mHIYsp6w0M=
Subject key identifier:   2B:55:82:3A:78:B4:2A:DD:22:9F:12:6B:E0:8C:69:DE:55:C1:25:53
Certificate issuer:       /CN=8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521
Certificate serial:       70972316C235A1F85060D6D1EFA1F02FEFF9AD35
Authority key identifier: 8C:3A:73:A3:F4:E7:E3:89:1D:0D:C6:F8:E4:5F:E4:7C:B0:3D:85:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a653030303a3a2f33362d3336203d3e20323731353636.roa
Signing time:             Tue 20 Feb 2024 17:14:42 +0000
ROA not before:           Tue 20 Feb 2024 17:09:42 +0000
ROA not after:            Tue 18 Feb 2025 17:14:42 +0000
asID:                     271566
IP address blocks:        2804:7d84:e000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 13:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:97:23:16:c2:35:a1:f8:50:60:d6:d1:ef:a1:f0:2f:ef:f9:ad:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521
        Validity
            Not Before: Feb 20 17:09:42 2024 GMT
            Not After : Feb 18 17:14:42 2025 GMT
        Subject: CN=2B55823A78B42ADD229F126BE08C69DE55C12553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:8c:0b:97:74:a7:cc:94:90:ac:6f:63:44:
                    ca:7c:6e:62:dd:9b:4c:75:be:6e:da:d2:e1:29:de:
                    de:ca:64:4d:44:09:70:ad:90:83:01:63:5b:58:e3:
                    d4:90:0d:6d:84:e3:05:fc:0e:bd:ea:53:ac:a9:29:
                    73:ba:40:99:85:e2:5a:d5:dc:32:5e:13:ed:93:5e:
                    aa:d6:cf:68:f5:2f:2e:f5:c5:eb:b6:7c:77:f5:4f:
                    2d:5b:da:4b:71:0c:46:c2:b0:e0:bb:f9:29:27:86:
                    89:54:d3:7c:53:f2:0c:99:51:a7:5b:b7:75:82:e9:
                    f4:cf:59:d1:39:15:21:e5:92:a5:4b:5b:d4:ca:08:
                    88:2a:7e:b5:c1:a3:44:72:de:8e:e7:10:b3:49:90:
                    35:43:02:f3:f6:fd:4c:b9:d7:2c:b1:fd:c3:60:7c:
                    14:9f:a6:3a:7b:21:a7:4e:bc:19:83:0e:73:90:76:
                    f3:28:4e:9e:60:cd:da:b5:7d:71:7c:6f:11:29:24:
                    25:d5:75:7a:91:f4:8a:75:65:12:e7:7b:c8:e7:60:
                    ec:30:ae:b7:98:0a:a5:01:1f:30:39:3a:1d:a5:55:
                    f7:ca:32:d8:90:7a:f6:79:a2:4e:9f:c3:13:0e:35:
                    a8:8b:28:f1:a2:0b:20:78:f0:d9:ef:68:55:99:9f:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:55:82:3A:78:B4:2A:DD:22:9F:12:6B:E0:8C:69:DE:55:C1:25:53
            X509v3 Authority Key Identifier:
                keyid:8C:3A:73:A3:F4:E7:E3:89:1D:0D:C6:F8:E4:5F:E4:7C:B0:3D:85:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/323830343a376438343a653030303a3a2f33362d3336203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d84:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a9:c8:0a:1c:fa:9d:60:11:87:20:c4:31:2f:47:7a:57:20:dd:
         06:e6:f2:7e:6f:5b:b5:8a:7c:0a:b7:52:1e:6b:e1:cb:71:f6:
         e7:20:c0:14:af:36:17:3b:f8:4d:ec:2e:01:0d:f5:62:f7:fd:
         ed:61:aa:e9:aa:e8:ae:d6:05:6a:85:4b:f9:60:ec:c3:cf:c6:
         8c:19:8b:c4:a3:aa:45:e6:c4:82:26:b5:c8:e8:b5:b7:26:b2:
         ea:4b:81:50:63:2f:37:f6:97:11:02:ef:6c:03:ea:1a:78:ea:
         16:80:f1:8c:aa:7e:24:a5:11:62:99:c9:79:16:0b:a3:09:fc:
         a9:45:65:86:61:22:0d:8c:a2:d6:33:80:52:ad:f2:db:78:c2:
         00:fc:fb:d1:99:24:eb:79:eb:a7:4a:97:fd:60:cd:ab:3b:d1:
         9a:47:e4:e9:b0:d9:69:77:9f:7d:42:6b:8b:88:64:4a:5e:1d:
         d3:7a:65:50:8c:ee:ee:40:b2:cc:7d:50:ea:3d:9a:1c:79:60:
         11:af:d6:da:6a:9b:bb:42:f3:79:1f:8c:0b:8a:c4:75:77:1e:
         be:17:7a:2c:27:a9:07:39:6a:15:97:f7:29:05:2c:d8:05:76:
         44:6c:bf:7b:c3:47:99:f6:6a:53:db:f1:56:7c:ec:25:aa:9c:
         2f:73:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----