Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33322d3332203d3e20323731373332.roa
File:                     323830343a383032343a3a2f33322d3332203d3e20323731373332.roa (raw, json)
Hash identifier:          lTl5NrA+thVVOw3kLkc6NY6MqMpBbxLA8fEu1X4bqO8=
Subject key identifier:   33:0E:B2:95:D7:A9:A2:67:2B:D5:45:45:97:39:47:00:6C:A1:FC:C9
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       1A8860071A7807D7F40371C4CF83DE663242055F
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33322d3332203d3e20323731373332.roa
Signing time:             Sat 25 May 2024 14:18:27 +0000
ROA not before:           Sat 25 May 2024 14:13:27 +0000
ROA not after:            Sat 24 May 2025 14:18:27 +0000
asID:                     271732
IP address blocks:        2804:8024::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 21:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:88:60:07:1a:78:07:d7:f4:03:71:c4:cf:83:de:66:32:42:05:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: May 25 14:13:27 2024 GMT
            Not After : May 24 14:18:27 2025 GMT
        Subject: CN=330EB295D7A9A2672BD54545973947006CA1FCC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:26:5a:9c:38:e5:46:c3:94:22:71:77:f6:
                    5e:52:33:f4:d6:74:6e:df:2f:af:c3:44:38:1f:07:
                    65:84:9a:32:71:3b:88:ce:21:f4:01:53:3d:42:d5:
                    a0:7e:e4:1a:17:8d:ec:3a:39:c2:6a:e3:81:23:30:
                    54:7f:61:16:24:2d:cf:5d:c2:47:8a:bd:be:d6:36:
                    07:aa:c9:87:6a:bf:e4:76:7f:c3:7d:24:66:1f:ff:
                    1a:98:34:d2:58:d7:23:2b:e0:7b:97:e4:8e:61:9b:
                    6e:b1:17:cd:bc:4a:3a:fa:0e:51:ac:07:2b:9c:09:
                    46:5e:db:7e:54:85:c0:bf:4e:e9:06:79:1a:66:29:
                    c9:4c:74:32:e3:d1:d0:5e:95:d4:cb:aa:fe:4e:70:
                    cd:35:36:b6:9b:59:c7:e1:ef:a1:4b:d2:0e:ad:87:
                    31:f8:1b:cb:fe:fd:11:29:47:a1:56:81:c7:8e:f5:
                    cf:68:06:b6:bb:b4:b2:15:77:58:ce:4c:e0:eb:db:
                    17:0f:8d:1a:c7:24:a3:34:ef:bd:a0:b9:0b:c5:b8:
                    7f:d8:b8:b9:7a:ee:af:55:5f:7f:a1:53:77:f1:23:
                    e2:9d:60:40:0f:41:f0:93:d8:10:47:fc:c3:e1:48:
                    f4:41:05:59:4b:65:0e:14:bd:47:a9:ea:a6:0c:90:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:B2:95:D7:A9:A2:67:2B:D5:45:45:97:39:47:00:6C:A1:FC:C9
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33322d3332203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8024::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:cc:72:ec:5a:a8:71:8c:64:06:42:8b:25:d5:27:33:84:
         4c:26:fa:bc:06:3f:89:82:9f:de:d8:c7:6b:bd:3f:78:7d:1d:
         e8:c9:f3:7b:2d:75:84:2c:64:40:5b:b2:8d:11:6e:92:85:05:
         23:10:d2:4b:37:dd:96:92:ce:4c:82:ad:2f:b2:9c:49:d5:58:
         ad:74:b0:f8:e0:c7:d9:5f:9a:83:64:6e:1a:ef:a7:bf:4c:01:
         1b:85:bf:85:ef:b6:55:e1:0b:34:b4:6b:2a:09:ce:ae:92:37:
         3a:25:29:80:6a:9c:f2:e2:38:30:3e:e2:b8:23:dc:2b:69:9b:
         aa:d7:d5:5a:99:4d:dc:5d:cc:a1:0a:03:1b:6a:2f:b9:6b:32:
         58:14:34:32:b5:38:3e:c1:96:0b:4f:90:5d:f5:ea:15:5a:59:
         b5:5d:52:84:b1:29:8b:a5:5d:aa:53:68:51:62:f5:cd:16:28:
         9a:94:45:94:38:1c:87:8d:f6:b8:98:ae:4c:b6:cf:56:21:ac:
         24:f2:54:4c:2d:57:c5:c4:69:55:5f:e2:5c:ed:9d:c1:49:cb:
         1e:4b:b5:94:8c:f4:6c:56:1d:e9:1d:9f:c8:6b:17:c3:ac:c9:
         a3:6f:d4:83:84:7e:b2:74:1f:f4:7e:0c:3c:a6:e6:8a:39:0b:
         63:9b:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:10:04 2024 by rpki-client on console-fra.rpki-client.org