Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a383030303a3a2f33332d3333203d3e20323731373332.roa
File:                     323830343a383032343a383030303a3a2f33332d3333203d3e20323731373332.roa (raw, json)
Hash identifier:          ihK5OsK7GolfBDTvbQhtT0NodWkHrfgD9Z1MKFG1tKc=
Subject key identifier:   D5:D1:6A:9B:52:F6:72:C2:33:3A:71:08:64:E0:96:F7:B9:19:9B:59
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       7EBFFE00080B89CD1A020328B202378D19DCAC7E
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a383030303a3a2f33332d3333203d3e20323731373332.roa
Signing time:             Mon 27 May 2024 13:53:06 +0000
ROA not before:           Mon 27 May 2024 13:48:06 +0000
ROA not after:            Mon 26 May 2025 13:53:06 +0000
asID:                     271732
IP address blocks:        2804:8024:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 21:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bf:fe:00:08:0b:89:cd:1a:02:03:28:b2:02:37:8d:19:dc:ac:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: May 27 13:48:06 2024 GMT
            Not After : May 26 13:53:06 2025 GMT
        Subject: CN=D5D16A9B52F672C2333A710864E096F7B9199B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:13:7d:d4:7c:9d:89:21:87:1a:cc:04:05:
                    17:15:50:42:b8:8f:2c:88:aa:53:60:4c:8b:ac:8b:
                    d1:83:89:98:ed:36:0e:83:1f:40:59:f0:50:51:d8:
                    c0:11:74:0c:2b:4e:1b:51:87:74:06:03:1a:b9:65:
                    a0:ce:06:b4:50:91:d5:b6:6e:2d:6c:59:c5:f4:49:
                    33:49:0d:e6:a6:3a:85:29:37:c4:11:9f:9e:de:8a:
                    49:dd:82:b2:10:00:93:95:20:1b:ef:84:a6:74:c9:
                    1a:ef:f9:1a:35:3a:ba:e9:0e:cf:c1:3c:70:d2:a4:
                    3c:a8:47:d0:ce:04:b2:bb:70:38:23:0c:62:a1:a1:
                    2b:60:03:9f:98:9e:30:bb:91:c1:47:89:29:23:48:
                    3a:ef:93:c3:73:1f:54:df:a8:29:6a:92:93:79:5b:
                    c8:a6:db:7a:67:d0:c5:12:b0:5b:8a:e4:6b:73:a0:
                    f2:cb:9a:7d:01:28:03:1f:8d:d4:d3:1c:e4:a8:2d:
                    50:2c:f9:99:33:c1:b3:35:95:15:bd:53:db:cd:d3:
                    b3:12:0e:ee:f5:84:e8:66:e5:b2:cf:5c:0e:ef:b1:
                    21:d2:93:df:3c:2e:88:42:6c:5f:86:34:c3:35:eb:
                    11:19:35:9e:f0:92:2a:2d:0a:98:c0:0f:fd:34:0b:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D1:6A:9B:52:F6:72:C2:33:3A:71:08:64:E0:96:F7:B9:19:9B:59
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a383030303a3a2f33332d3333203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8024:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:ad:44:83:91:f5:f3:f3:6a:0c:cf:39:1d:6a:15:19:f0:
         01:ae:19:b2:99:98:77:45:6c:f0:e2:bc:dd:1e:7d:45:4e:02:
         b8:1b:4d:d9:e0:db:0b:34:c4:98:43:58:30:78:01:3b:6c:bf:
         cb:67:43:2b:04:32:4b:4d:33:91:22:90:a7:33:ff:4d:56:a6:
         90:12:b6:5d:01:d8:25:1e:65:33:c6:ac:94:92:3e:94:5f:54:
         a4:c6:7a:90:15:20:c2:14:43:65:0a:d0:32:00:e6:ea:6f:8b:
         53:73:2d:f1:dc:a1:bf:9b:be:72:91:84:84:63:86:65:ee:f4:
         10:1d:7a:6f:9b:97:6d:ac:1a:65:c3:04:83:31:a4:75:51:ee:
         0f:bd:c2:ee:f9:bb:aa:5d:d0:62:65:ab:be:0a:ff:08:17:ef:
         8f:2b:cf:5b:48:25:be:61:b3:60:1c:b8:5b:98:cf:1e:58:cd:
         7a:62:10:fa:f9:43:86:d7:8a:aa:0b:f9:dc:ca:91:41:3f:61:
         a3:aa:95:05:9c:93:c2:be:a8:c6:18:4b:c7:c8:69:a5:e1:e0:
         d6:c8:a2:77:95:bd:35:a7:23:4e:50:58:88:db:d8:82:d1:1e:
         02:46:99:29:54:96:98:91:87:2c:38:2b:c3:7a:00:ab:d3:34:
         7b:d3:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:17 2024 by rpki-client on console-ams.rpki-client.org