Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3236303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3236303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          o3KMvOW6cTiNk51KrGYEVIzv9I9WQiYcfZ6+KM9QT64=
Subject key identifier:   D9:AE:A3:34:E3:7B:65:48:C9:8C:37:D9:07:20:B7:F0:AF:16:45:FF
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       3D67C86D08E75AC0E39215842D5E367697F6AB1A
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3236303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774:260::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:67:c8:6d:08:e7:5a:c0:e3:92:15:84:2d:5e:36:76:97:f6:ab:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=D9AEA334E37B6548C98C37D90720B7F0AF1645FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:44:bf:14:60:59:16:02:20:c2:15:d2:c4:
                    09:cc:c5:40:6c:16:54:4c:19:59:e4:94:78:df:22:
                    43:e0:db:d7:5a:cc:0a:b3:8a:56:b4:fc:e4:b0:92:
                    e5:24:da:27:b9:db:6e:02:56:e4:a5:43:1a:d1:66:
                    76:55:a3:14:06:a7:94:d8:a0:d2:e8:54:ae:db:30:
                    7c:7a:ee:e8:2d:01:b8:4c:5d:56:e3:77:cb:2f:74:
                    61:29:01:b1:53:f3:92:4f:a2:3e:bc:d1:09:12:e7:
                    e9:06:54:42:31:62:5d:7e:55:2c:68:81:54:9b:1f:
                    ef:1e:97:76:71:c5:5b:db:d2:50:5b:6f:51:ea:11:
                    4c:3f:94:ca:78:d0:49:f7:d5:44:c6:ab:b7:0b:06:
                    85:15:e8:1a:1f:5b:05:fb:30:2a:2d:66:ae:51:8e:
                    27:c7:64:6f:bc:c7:67:39:53:96:c2:67:10:03:82:
                    ff:c6:0e:71:bf:81:d0:61:bf:28:a8:2c:2e:f1:91:
                    c0:90:53:f8:2b:bb:04:21:37:16:db:1f:dc:74:4e:
                    b9:dc:af:c9:23:ee:94:be:f6:8b:cc:88:ae:56:68:
                    e1:29:61:a7:92:96:ee:6a:ff:56:8e:c6:41:cc:9c:
                    52:51:65:d8:17:56:99:c1:14:de:4a:76:4d:47:cc:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AE:A3:34:E3:7B:65:48:C9:8C:37:D9:07:20:B7:F0:AF:16:45:FF
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3236303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:260::/45

    Signature Algorithm: sha256WithRSAEncryption
         b2:27:22:5d:be:5f:44:91:62:56:68:3b:12:7a:70:e6:d5:1b:
         bb:7c:49:fa:ac:fb:52:68:cf:6b:d4:a8:2e:51:14:11:c4:3d:
         e9:61:08:24:a4:2a:84:02:12:80:56:76:0d:8b:33:66:a7:7b:
         a8:90:3e:57:7a:81:0a:f3:03:6f:08:91:54:4b:61:7a:16:91:
         7e:36:7e:7e:53:ae:2d:ee:54:3c:a7:f3:bb:a8:f7:5d:b9:88:
         4d:01:c2:74:52:da:e2:ad:f6:89:2e:ad:22:53:e0:5b:a6:49:
         b9:68:61:3d:9f:7f:8a:22:ef:88:ca:d7:83:c7:33:a7:10:89:
         58:5a:b1:bd:52:08:cd:5b:45:73:20:50:87:86:2a:10:41:56:
         9b:f4:a8:8e:19:b9:17:de:3e:41:0a:33:9b:50:b4:35:1a:f5:
         4f:20:b1:1a:d2:61:df:28:41:77:6f:90:8b:0e:63:3e:3a:37:
         a1:98:2a:60:78:1d:45:02:37:00:37:cd:96:ba:e7:20:5c:ef:
         9e:5b:26:95:c5:b7:79:61:32:fc:9e:51:ee:71:b7:a4:dc:fa:
         4a:45:72:84:ff:d4:9d:65:6d:d2:5b:2c:78:95:c0:f3:d7:41:
         a2:93:28:84:5f:da:d5:5b:de:ba:b5:cb:8a:26:ca:d1:cb:28:
         69:b4:87:cf
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUPWfIbQjnWsDjkhWELV42dpf2qxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDIxMzZaFw0yNTA4MjkxNDI2MzZaMDMxMTAvBgNV
BAMTKEQ5QUVBMzM0RTM3QjY1NDhDOThDMzdEOTA3MjBCN0YwQUYxNjQ1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9US/FGBZFgIgwhXSxAnMxUBs
FlRMGVnklHjfIkPg29dazAqzila0/OSwkuUk2ie5224CVuSlQxrRZnZVoxQGp5TY
oNLoVK7bMHx67ugtAbhMXVbjd8svdGEpAbFT85JPoj680QkS5+kGVEIxYl1+VSxo
gVSbH+8el3ZxxVvb0lBbb1HqEUw/lMp40En31UTGq7cLBoUV6BofWwX7MCotZq5R
jifHZG+8x2c5U5bCZxADgv/GDnG/gdBhvyioLC7xkcCQU/gruwQhNxbbH9x0Trnc
r8kj7pS+9ovMiK5WaOEpYaeSlu5q/1aOxkHMnFJRZdgXVpnBFN5Kdk1HzN9bAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU2a6jNON7ZUjJjDfZByC38K8WRf8wHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMjM2MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AmAwDQYJKoZIhvcNAQELBQAD
ggEBALInIl2+X0SRYlZoOxJ6cObVG7t8Sfqs+1Joz2vUqC5RFBHEPelhCCSkKoQC
EoBWdg2LM2ane6iQPld6gQrzA28IkVRLYXoWkX42fn5Tri3uVDyn87uo9125iE0B
wnRS2uKt9okurSJT4FumSbloYT2ff4oi74jK14PHM6cQiVhasb1SCM1bRXMgUIeG
KhBBVpv0qI4ZuRfePkEKM5tQtDUa9U8gsRrSYd8oQXdvkIsOYz46N6GYKmB4HUUC
NwA3zZa65yBc755bJpXFt3lhMvyeUe5xt6Tc+kpFcoT/1J1lbdJbLHiVwPPXQaKT
KIRf2tVb3rq1y4omytHLKGm0h88=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:39:38 2024 by rpki-client on console-fra.rpki-client.org