Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33332d3333203d3e20323731373332.roa
File:                     323830343a383032343a3a2f33332d3333203d3e20323731373332.roa (raw, json)
Hash identifier:          PbH4A5NgjkLCttRtDu2YOSCDrY7fRDdgCs812BcrqW0=
Subject key identifier:   9D:9F:F3:EA:FE:87:EC:F7:4F:FE:C8:0C:A7:26:B4:EC:2C:42:3B:AB
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       096B40924EB3C806AAB94B815ECBEFF81B78DC7E
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33332d3333203d3e20323731373332.roa
Signing time:             Mon 27 May 2024 13:52:47 +0000
ROA not before:           Mon 27 May 2024 13:47:47 +0000
ROA not after:            Mon 26 May 2025 13:52:47 +0000
asID:                     271732
IP address blocks:        2804:8024::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 21:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6b:40:92:4e:b3:c8:06:aa:b9:4b:81:5e:cb:ef:f8:1b:78:dc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: May 27 13:47:47 2024 GMT
            Not After : May 26 13:52:47 2025 GMT
        Subject: CN=9D9FF3EAFE87ECF74FFEC80CA726B4EC2C423BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:0e:a4:ca:01:4d:a5:bd:f4:44:84:b4:bb:
                    ba:2a:e1:49:cc:85:f8:65:a6:63:a7:2b:9f:b3:9c:
                    74:9d:e9:40:1e:93:7c:c7:f8:f6:16:0a:6c:d4:dc:
                    0c:72:99:ad:45:16:d0:e8:0b:44:a1:03:05:52:f7:
                    f7:dd:8d:b3:b1:75:ea:30:4d:12:94:c6:a4:0b:a0:
                    99:1e:86:e0:94:d5:88:9a:2c:6c:42:0a:7a:c0:b2:
                    c0:14:3e:df:96:a6:a7:de:ad:b9:cd:89:bd:e5:68:
                    c0:23:84:2b:ac:fb:ea:0d:41:ec:eb:fd:db:d0:5b:
                    28:e2:6c:bd:62:57:d2:8f:29:ec:fc:06:c5:47:11:
                    dd:75:ef:c3:86:21:eb:3e:c8:3d:fb:fb:91:2a:f1:
                    b8:c3:11:e7:7a:83:45:b5:c2:8f:e9:77:c6:9d:a2:
                    8e:b1:00:97:d4:02:5e:04:d0:54:da:e7:4e:7e:ce:
                    ca:40:4a:5e:4a:9f:c4:f5:d8:60:e3:5d:e1:71:de:
                    b6:0a:96:73:c6:f0:bd:36:07:1c:fa:67:f4:12:ce:
                    db:10:a9:75:da:69:dd:36:c8:06:dd:16:b2:ba:64:
                    aa:20:7e:d4:ab:16:34:49:07:57:d5:d4:d0:1d:31:
                    f5:98:3d:a9:9d:f8:75:cd:74:fe:52:d2:3b:a6:bc:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9F:F3:EA:FE:87:EC:F7:4F:FE:C8:0C:A7:26:B4:EC:2C:42:3B:AB
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33332d3333203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8024::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:2a:34:b9:3e:7f:82:9f:3f:39:fb:aa:13:13:78:c7:18:
         ba:0c:b2:e0:44:94:69:7f:e3:93:8c:c7:46:5e:21:6d:63:6e:
         c8:5a:fb:c9:0a:dc:ef:ba:92:6c:b3:d0:85:5b:d2:62:fb:f3:
         da:71:cc:17:1a:aa:46:35:b6:af:96:87:d6:ce:3a:1c:96:af:
         50:7f:c8:1e:26:2c:ff:43:37:aa:5e:e4:cb:0a:11:d9:5e:c4:
         f0:20:1d:1b:5c:af:94:0f:44:d3:68:df:a1:a6:fe:b7:08:72:
         42:6d:2b:50:03:a6:68:ec:63:7f:6b:7b:53:86:e9:70:69:ec:
         7c:c8:dc:56:30:d8:20:77:1a:29:84:45:ef:41:30:b7:80:fe:
         03:3f:22:b4:f5:92:87:5c:33:67:2d:c5:bb:46:12:78:3d:36:
         8b:54:ce:4b:ea:54:77:30:35:35:9b:fc:82:5a:1e:42:55:c1:
         c4:13:ff:9e:99:48:d6:52:ff:7e:42:a2:4f:51:0a:fd:8a:f2:
         b1:c5:16:b7:c2:f1:48:3f:f4:fc:41:e6:e8:9f:d3:c6:d7:4d:
         c9:f9:5c:fa:aa:96:5e:98:79:7e:93:22:ef:bf:a1:65:4d:7d:
         af:a1:a9:96:10:a9:90:1a:a2:34:af:84:6e:45:6f:5d:5d:4e:
         0f:88:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:17 2024 by rpki-client on console-ams.rpki-client.org