Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3235303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3235303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          wT84Js0WVVIGHadRlrfCYYLFGiX5pXyPdq7PF3PED/A=
Subject key identifier:   8A:02:D0:CA:98:CB:91:E7:6F:9B:F7:F1:52:47:8B:12:9B:AB:DD:3B
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       6F1E6BFEC073A6256DE05C01D25F322A69E14B5D
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3235303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:37 +0000
ROA not before:           Fri 30 Aug 2024 14:21:37 +0000
ROA not after:            Fri 29 Aug 2025 14:26:37 +0000
asID:                     272710
IP address blocks:        2804:8774:250::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 16:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:6b:fe:c0:73:a6:25:6d:e0:5c:01:d2:5f:32:2a:69:e1:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:37 2024 GMT
            Not After : Aug 29 14:26:37 2025 GMT
        Subject: CN=8A02D0CA98CB91E76F9BF7F152478B129BABDD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:10:6a:3e:cb:3c:ad:07:d3:5a:d2:dc:b5:
                    b7:d9:32:23:bd:25:fe:b7:3a:3d:0e:46:a9:52:2e:
                    6a:9f:01:3c:3d:c7:19:0d:69:28:f8:5f:2d:c1:af:
                    90:51:26:f4:c0:3b:01:ad:b8:41:34:95:e3:ed:21:
                    68:b4:54:4f:89:ac:2c:e8:a3:a6:23:08:b6:98:2b:
                    ba:66:e5:f8:8c:9f:c8:2a:99:05:ca:ef:0d:61:bb:
                    c5:4f:eb:65:97:2b:4a:b9:82:e8:e4:f2:11:e6:da:
                    c8:73:51:38:ce:3b:74:66:7c:b2:22:e0:23:bc:ae:
                    9d:81:7e:04:33:f3:3c:47:42:ed:b6:a4:c5:c3:b6:
                    39:f0:12:76:a8:f4:43:07:50:e7:6e:f0:2e:77:72:
                    6e:ff:bf:7f:51:5d:de:f8:a9:7d:2e:57:f4:bd:57:
                    6f:83:b1:bd:1b:c0:4d:17:d8:9c:fd:09:d7:b5:ae:
                    96:2b:f7:3a:64:7c:09:18:58:7b:3e:59:76:6b:3c:
                    07:3a:3d:66:99:7e:af:71:0d:03:d4:02:ab:2a:c9:
                    8f:96:dc:0a:74:5b:28:0e:86:99:f7:79:06:fa:70:
                    da:28:7b:a9:39:a3:bb:86:42:c8:b4:f6:ac:cb:6f:
                    0e:16:39:f1:a1:24:b0:8c:74:0c:f6:78:db:cf:5f:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:02:D0:CA:98:CB:91:E7:6F:9B:F7:F1:52:47:8B:12:9B:AB:DD:3B
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3235303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:250::/45

    Signature Algorithm: sha256WithRSAEncryption
         28:5c:d4:d5:d0:05:9e:7e:0e:7f:6b:94:0b:2b:a9:11:73:86:
         1a:01:a9:91:df:0c:94:ed:d7:60:6f:ec:29:52:4d:6d:fe:ba:
         db:3e:47:4d:01:3d:be:40:10:ca:55:c9:5c:0b:a7:be:0e:3f:
         b0:6e:9e:48:ef:e1:d9:4a:3a:20:20:4f:81:16:4b:62:12:55:
         e4:36:df:40:0d:aa:14:87:61:c7:71:92:f9:9e:ef:20:0a:fd:
         c0:fb:fb:ee:d5:3d:90:26:67:ea:f8:58:a2:d7:67:86:de:a5:
         5b:00:10:81:7b:f2:4a:d6:c2:f8:38:81:5f:ee:f2:32:63:65:
         9a:7d:14:2d:c3:c9:87:3b:34:b6:14:d9:f6:a5:74:4a:f3:4d:
         66:ef:c7:fe:be:a3:b0:2c:08:b1:35:ff:6d:47:a4:d8:92:5b:
         bd:fd:a8:a0:02:fe:ef:97:7f:03:80:e1:d5:3e:e2:28:59:2a:
         b7:43:66:df:29:68:0a:52:5b:17:d2:44:0a:fb:1d:20:ca:b4:
         58:d2:5e:6c:d0:28:d8:ca:7a:7b:d5:5e:af:f1:5a:db:a3:a9:
         12:47:bb:8a:78:fa:2b:97:5f:91:29:a8:18:5f:ec:97:42:1b:
         ff:bd:3f:41:8e:75:6b:c6:b4:04:ed:8c:e2:16:75:17:56:4f:
         08:aa:65:4a
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUbx5r/sBzpiVt4FwB0l8yKmnhS10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDIxMzdaFw0yNTA4MjkxNDI2MzdaMDMxMTAvBgNV
BAMTKDhBMDJEMENBOThDQjkxRTc2RjlCRjdGMTUyNDc4QjEyOUJBQkREM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlBBqPss8rQfTWtLctbfZMiO9
Jf63Oj0ORqlSLmqfATw9xxkNaSj4Xy3Br5BRJvTAOwGtuEE0lePtIWi0VE+JrCzo
o6YjCLaYK7pm5fiMn8gqmQXK7w1hu8VP62WXK0q5gujk8hHm2shzUTjOO3RmfLIi
4CO8rp2BfgQz8zxHQu22pMXDtjnwEnao9EMHUOdu8C53cm7/v39RXd74qX0uV/S9
V2+Dsb0bwE0X2Jz9Cde1rpYr9zpkfAkYWHs+WXZrPAc6PWaZfq9xDQPUAqsqyY+W
3Ap0WygOhpn3eQb6cNooe6k5o7uGQsi09qzLbw4WOfGhJLCMdAz2eNvPX9sNAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUigLQypjLkedvm/fxUkeLEpur3TswHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMjM1MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AlAwDQYJKoZIhvcNAQELBQAD
ggEBAChc1NXQBZ5+Dn9rlAsrqRFzhhoBqZHfDJTt12Bv7ClSTW3+uts+R00BPb5A
EMpVyVwLp74OP7Bunkjv4dlKOiAgT4EWS2ISVeQ230ANqhSHYcdxkvme7yAK/cD7
++7VPZAmZ+r4WKLXZ4bepVsAEIF78krWwvg4gV/u8jJjZZp9FC3DyYc7NLYU2fal
dErzTWbvx/6+o7AsCLE1/21HpNiSW739qKAC/u+XfwOA4dU+4ihZKrdDZt8paApS
WxfSRAr7HSDKtFjSXmzQKNjKenvVXq/xWtujqRJHu4p4+iuXX5EpqBhf7JdCG/+9
P0GOdWvGtATtjOIWdRdWTwiqZUo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:39:38 2024 by rpki-client on console-fra.rpki-client.org