Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3166303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          T7EWlhp8Gy9+JA60+Ny3WsgfVOpjuYotBkJWAiK5FkE=
Subject key identifier:   CD:86:79:F9:C8:C8:BD:2F:9A:F2:B4:AB:D2:B6:71:3B:45:11:77:CC
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       3FC6BCDA7503E1825DD6C2C7C28A25D20A470230
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:35 +0000
ROA not before:           Fri 30 Aug 2024 14:21:35 +0000
ROA not after:            Fri 29 Aug 2025 14:26:35 +0000
asID:                     272710
IP address blocks:        2804:8774:1f0::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 16:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c6:bc:da:75:03:e1:82:5d:d6:c2:c7:c2:8a:25:d2:0a:47:02:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:35 2024 GMT
            Not After : Aug 29 14:26:35 2025 GMT
        Subject: CN=CD8679F9C8C8BD2F9AF2B4ABD2B6713B451177CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:d3:ac:b7:90:0f:6d:ab:f6:b2:0c:9c:c3:
                    ab:17:3f:3b:fb:75:a4:93:14:d4:10:8c:c2:89:3d:
                    46:bc:84:d8:20:25:fc:dc:06:15:dd:9a:02:e6:bf:
                    db:b3:95:52:6b:0b:af:d6:5c:a2:43:81:f2:8f:8f:
                    21:90:53:d5:01:48:d9:96:a5:d2:1c:85:26:23:02:
                    32:25:88:ce:c9:56:b2:b1:ae:ce:f7:fc:31:02:21:
                    95:c1:43:82:9a:04:ab:0c:57:30:6f:9a:3f:1e:24:
                    e1:23:ec:1d:f5:38:95:ce:ae:e1:78:e8:c7:d3:57:
                    94:ad:12:3f:d5:79:90:f9:ae:f5:34:88:46:29:e6:
                    ca:69:e5:a7:5a:b1:27:20:5a:de:ca:4a:c8:49:ca:
                    2e:da:dc:fd:dc:11:e7:92:44:5e:60:08:0a:f7:7a:
                    cd:2a:26:c1:88:92:f8:02:eb:45:ba:a8:14:eb:fa:
                    f8:c5:9e:fc:94:75:dc:09:9f:09:39:63:1a:3e:c1:
                    5a:49:19:86:f1:21:1b:d7:ce:65:4c:74:cc:61:f4:
                    12:71:09:2c:34:c1:ca:fe:05:9a:c3:a8:c5:2e:65:
                    03:38:fa:9b:b2:f3:a3:2d:42:12:88:02:5b:2b:9c:
                    5d:07:7d:6a:d6:9c:1f:90:cb:ad:f5:00:7a:ab:1f:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:86:79:F9:C8:C8:BD:2F:9A:F2:B4:AB:D2:B6:71:3B:45:11:77:CC
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3166303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:1f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         36:12:72:af:6f:4b:32:c9:9f:f1:49:91:bf:9d:a3:e3:1b:33:
         65:3f:ea:01:73:c5:98:99:1e:d3:cc:46:19:b1:21:b4:27:b9:
         8e:a3:ce:7c:e7:96:6e:52:f4:40:0a:72:f6:c2:ea:67:5b:4c:
         f2:63:c8:44:32:51:9f:f4:2c:1b:25:5a:06:ea:4f:24:52:e0:
         66:f0:6d:de:6e:91:f7:93:01:60:c3:6e:3f:3c:dc:86:23:1e:
         6c:a5:43:a9:b0:5b:59:ed:13:fa:25:54:75:6f:c3:e7:5f:3e:
         15:64:ef:95:f9:35:a2:5c:42:8c:85:c5:e6:76:ea:16:ff:81:
         e2:71:f5:06:92:08:7a:01:fe:c2:5b:d3:03:fc:3a:89:40:e1:
         6b:47:c6:62:43:69:77:94:ba:f2:b7:d5:47:97:f4:40:63:0d:
         49:d8:c2:f5:d8:09:59:08:bf:f8:e3:86:ed:63:ba:c6:db:c8:
         01:fe:94:05:ef:61:0a:da:5b:65:2c:5d:fe:b4:7e:4b:c0:f3:
         e2:39:fc:d8:59:4c:c7:b3:ee:e5:be:54:95:13:47:24:91:bb:
         25:da:8d:2a:bc:00:d9:d7:41:03:02:c1:c6:bb:28:23:a7:54:
         cc:01:1f:72:9f:8c:9d:81:e7:6f:b6:2b:a0:57:fe:99:71:ae:
         c6:2a:0f:3c
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUP8a82nUD4YJd1sLHwool0gpHAjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDIxMzVaFw0yNTA4MjkxNDI2MzVaMDMxMTAvBgNV
BAMTKENEODY3OUY5QzhDOEJEMkY5QUYyQjRBQkQyQjY3MTNCNDUxMTc3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCR9Ost5APbav2sgycw6sXPzv7
daSTFNQQjMKJPUa8hNggJfzcBhXdmgLmv9uzlVJrC6/WXKJDgfKPjyGQU9UBSNmW
pdIchSYjAjIliM7JVrKxrs73/DECIZXBQ4KaBKsMVzBvmj8eJOEj7B31OJXOruF4
6MfTV5StEj/VeZD5rvU0iEYp5spp5adasScgWt7KSshJyi7a3P3cEeeSRF5gCAr3
es0qJsGIkvgC60W6qBTr+vjFnvyUddwJnwk5Yxo+wVpJGYbxIRvXzmVMdMxh9BJx
CSw0wcr+BZrDqMUuZQM4+puy86MtQhKIAlsrnF0HfWrWnB+Qy631AHqrH/KRAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUzYZ5+cjIvS+a8rSr0rZxO0URd8wwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTY2MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AfAwDQYJKoZIhvcNAQELBQAD
ggEBADYScq9vSzLJn/FJkb+do+MbM2U/6gFzxZiZHtPMRhmxIbQnuY6jznznlm5S
9EAKcvbC6mdbTPJjyEQyUZ/0LBslWgbqTyRS4Gbwbd5ukfeTAWDDbj883IYjHmyl
Q6mwW1ntE/olVHVvw+dfPhVk75X5NaJcQoyFxeZ26hb/geJx9QaSCHoB/sJb0wP8
OolA4WtHxmJDaXeUuvK31UeX9EBjDUnYwvXYCVkIv/jjhu1jusbbyAH+lAXvYQra
W2UsXf60fkvA8+I5/NhZTMez7uW+VJUTRySRuyXajSq8ANnXQQMCwca7KCOnVMwB
H3KfjJ2B52+2K6BX/plxrsYqDzw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:59:31 2024 by rpki-client on console-ams.rpki-client.org