Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3165303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3165303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          e13VPmQH4N11L2EAAf00eNH+wjC4c7tpNWDjtDz5uqM=
Subject key identifier:   20:E7:65:DE:66:62:1E:A6:EF:5D:23:14:C6:21:BA:6E:3D:8C:FB:20
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       6EE2376A6835250695A6963C07B6F495E5C0C407
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3165303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:34 +0000
ROA not before:           Fri 30 Aug 2024 14:21:34 +0000
ROA not after:            Fri 29 Aug 2025 14:26:34 +0000
asID:                     272710
IP address blocks:        2804:8774:1e0::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 16:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e2:37:6a:68:35:25:06:95:a6:96:3c:07:b6:f4:95:e5:c0:c4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:34 2024 GMT
            Not After : Aug 29 14:26:34 2025 GMT
        Subject: CN=20E765DE66621EA6EF5D2314C621BA6E3D8CFB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:fe:0d:52:b2:9c:d3:73:a6:03:09:9f:4c:
                    cd:97:ff:be:46:a2:6d:72:82:20:06:79:a8:57:f7:
                    f4:78:9b:90:4d:b9:1f:fa:06:77:17:1b:f6:5e:48:
                    99:70:9b:63:01:32:14:bf:78:a6:73:25:a8:87:d7:
                    33:61:26:f9:5d:4d:2c:ba:a7:ba:f3:29:91:5b:8e:
                    3e:06:15:d8:1f:8d:68:0f:5e:66:13:06:ed:24:57:
                    db:1b:5c:21:97:4d:fb:00:8b:bd:43:82:cb:8b:15:
                    ce:c2:ff:94:a1:80:5a:b0:ee:5d:77:0e:0d:60:f7:
                    3a:e6:34:90:9d:0e:fe:70:8a:1c:0b:90:12:40:ed:
                    fb:ea:a7:e6:d9:3d:36:11:ff:34:c6:51:7d:b8:1b:
                    7e:c6:0b:2a:7b:cb:d2:02:e0:72:00:68:d7:5b:09:
                    83:c7:80:f1:66:33:64:83:8c:9d:a7:26:fd:0c:5f:
                    16:84:31:2c:03:31:fd:10:ce:49:87:de:61:28:28:
                    0b:b4:e8:4f:5d:57:52:7a:4e:01:bb:44:91:66:ca:
                    e2:62:f1:02:b2:4b:51:33:4c:b1:21:a8:a1:91:cb:
                    a9:e9:f6:c5:af:72:ca:b3:bc:dc:36:aa:be:19:45:
                    17:67:cf:26:40:21:9c:1c:6f:57:70:be:8d:25:c2:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E7:65:DE:66:62:1E:A6:EF:5D:23:14:C6:21:BA:6E:3D:8C:FB:20
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3165303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:1e0::/45

    Signature Algorithm: sha256WithRSAEncryption
         c8:bf:26:1c:12:40:c1:92:a6:72:27:46:f5:fb:20:b3:28:f1:
         d3:65:06:77:44:ee:21:c8:1d:66:72:c7:66:18:75:a2:60:a8:
         e6:0e:df:dc:44:75:1b:b3:82:86:d0:57:2a:6d:76:7b:fc:53:
         36:5c:fe:b1:b9:f8:a7:90:88:de:87:0e:72:1d:36:55:d8:d4:
         21:0b:b8:fc:4d:48:0a:81:d6:72:c1:91:d4:0e:58:e3:87:42:
         fa:0e:3b:ec:72:9d:68:c4:52:72:13:e9:68:c0:36:57:72:8a:
         4c:05:5b:9f:d2:6f:58:48:3e:99:78:4d:a0:a0:45:f2:77:19:
         09:48:09:c5:3f:0f:9a:7b:f4:8b:bf:04:39:2b:43:3d:0e:57:
         aa:fa:f3:3a:8d:23:38:63:2d:49:ab:32:c4:a0:69:96:a2:8e:
         0b:20:a8:51:ec:02:67:71:e0:dc:b5:85:89:ce:bb:5f:8d:95:
         61:7a:01:e4:b2:2b:12:7a:03:7a:3b:8a:82:c1:ca:8c:69:90:
         c2:3b:ea:ba:8a:b5:18:89:46:c3:46:3b:4b:73:6f:fe:5e:e6:
         cc:c9:48:1d:79:f8:c1:f8:5e:f8:fa:d7:79:e1:2f:97:44:21:
         b9:41:4b:6d:07:0e:6e:cb:eb:24:d0:0a:96:7a:a5:13:80:e9:
         a9:18:0a:0c
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUbuI3amg1JQaVppY8B7b0leXAxAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDIxMzRaFw0yNTA4MjkxNDI2MzRaMDMxMTAvBgNV
BAMTKDIwRTc2NURFNjY2MjFFQTZFRjVEMjMxNEM2MjFCQTZFM0Q4Q0ZCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3f4NUrKc03OmAwmfTM2X/75G
om1ygiAGeahX9/R4m5BNuR/6BncXG/ZeSJlwm2MBMhS/eKZzJaiH1zNhJvldTSy6
p7rzKZFbjj4GFdgfjWgPXmYTBu0kV9sbXCGXTfsAi71DgsuLFc7C/5ShgFqw7l13
Dg1g9zrmNJCdDv5wihwLkBJA7fvqp+bZPTYR/zTGUX24G37GCyp7y9IC4HIAaNdb
CYPHgPFmM2SDjJ2nJv0MXxaEMSwDMf0QzkmH3mEoKAu06E9dV1J6TgG7RJFmyuJi
8QKyS1EzTLEhqKGRy6np9sWvcsqzvNw2qr4ZRRdnzyZAIZwcb1dwvo0lwt1LAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUIOdl3mZiHqbvXSMUxiG6bj2M+yAwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTY1MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AeAwDQYJKoZIhvcNAQELBQAD
ggEBAMi/JhwSQMGSpnInRvX7ILMo8dNlBndE7iHIHWZyx2YYdaJgqOYO39xEdRuz
gobQVyptdnv8UzZc/rG5+KeQiN6HDnIdNlXY1CELuPxNSAqB1nLBkdQOWOOHQvoO
O+xynWjEUnIT6WjANldyikwFW5/Sb1hIPpl4TaCgRfJ3GQlICcU/D5p79Iu/BDkr
Qz0OV6r68zqNIzhjLUmrMsSgaZaijgsgqFHsAmdx4Ny1hYnOu1+NlWF6AeSyKxJ6
A3o7ioLByoxpkMI76rqKtRiJRsNGO0tzb/5e5szJSB15+MH4Xvj613nhL5dEIblB
S20HDm7L6yTQCpZ6pROA6akYCgw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:59:31 2024 by rpki-client on console-ams.rpki-client.org