Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a383030303a3a2f33332d3333203d3e203631383035.roa
File:                     323830343a313939383a383030303a3a2f33332d3333203d3e203631383035.roa (raw, json)
Hash identifier:          6ONSv/byz2LcPn4LJHxN1l6QPk7WvYrLB1UvnTT8FBs=
Subject key identifier:   53:D2:D2:3F:CD:B6:F0:49:5E:71:AF:F4:12:5C:24:D9:68:71:71:DF
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       0D1938C67A7FD56131E2F6A81A73BC9DA605C069
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a383030303a3a2f33332d3333203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:32:32 +0000
ROA not before:           Thu 25 Apr 2024 19:27:32 +0000
ROA not after:            Thu 24 Apr 2025 19:32:32 +0000
asID:                     61805
IP address blocks:        2804:1998:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:19:38:c6:7a:7f:d5:61:31:e2:f6:a8:1a:73:bc:9d:a6:05:c0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:27:32 2024 GMT
            Not After : Apr 24 19:32:32 2025 GMT
        Subject: CN=53D2D23FCDB6F0495E71AFF4125C24D9687171DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:3f:3d:21:d4:8a:88:d0:aa:d6:7e:68:d2:
                    d6:f5:dd:1a:cd:cc:e4:c2:28:f4:87:58:d9:19:03:
                    a7:6c:a7:d9:e8:0f:32:90:7b:cb:a0:2f:e2:17:e4:
                    d1:75:50:96:09:e5:d8:4d:13:2d:70:d5:61:28:ea:
                    93:ee:e1:28:9e:58:59:40:4b:53:6d:a4:8f:87:f9:
                    72:ad:89:5c:30:54:89:e6:ba:db:38:29:d4:fd:c4:
                    fb:3e:2e:95:d9:99:80:b7:dd:d3:65:7d:8b:ca:ab:
                    ac:41:04:6d:71:ed:21:57:9b:b9:99:3c:39:06:1d:
                    67:09:2a:a7:c7:c1:2b:06:af:3f:40:22:c0:d7:cd:
                    79:22:a8:b9:5b:d1:b6:f7:11:82:cc:57:e3:8d:b8:
                    61:d5:13:76:4b:92:3e:ef:50:2c:bc:5f:af:fb:fb:
                    97:ed:a4:de:8c:19:95:12:d1:65:43:32:24:ae:a7:
                    ed:85:a6:01:dc:ea:ab:dc:05:06:75:c0:12:52:6b:
                    1f:d7:ae:1b:67:38:d0:a3:9b:be:19:1a:ca:3c:44:
                    0d:f9:1b:6a:e9:d6:8f:5f:31:82:45:8a:4b:4c:b8:
                    f3:cc:ca:63:75:cd:10:4f:bb:83:13:a1:4e:ac:da:
                    1b:4b:74:df:7b:2b:25:66:9d:b8:83:6d:5f:0c:9d:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:D2:3F:CD:B6:F0:49:5E:71:AF:F4:12:5C:24:D9:68:71:71:DF
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a383030303a3a2f33332d3333203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1998:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:90:92:a2:76:80:48:b1:5c:ff:ae:78:96:7d:5c:5d:bf:
         29:a0:ce:38:45:14:c4:0e:21:d8:38:f4:ac:be:b5:4d:5b:83:
         e7:e2:18:50:26:11:11:3b:7e:d6:94:c8:ae:d6:58:a2:3e:af:
         11:b3:23:75:24:e2:38:b8:0d:85:c9:f2:d3:7a:c9:b9:dd:d7:
         ef:5c:4d:4c:3c:48:9c:01:f6:8d:d6:a4:21:36:0d:b4:64:cd:
         03:66:07:69:b2:d5:48:0d:8a:7c:24:2c:8c:62:4c:1f:56:43:
         98:21:2f:7e:3e:ac:a3:c3:c5:e7:ad:bd:b4:f1:02:8a:a0:7f:
         25:b7:1f:47:35:5b:0f:c2:ef:f2:a8:4f:78:b9:c7:95:ae:de:
         d8:51:7d:19:04:33:ba:de:98:f3:22:29:4e:e8:07:70:cd:d4:
         1b:7a:b0:b4:ad:c1:3e:d6:82:2d:10:db:3c:de:b5:72:f6:d4:
         c0:d5:a9:e2:ef:0e:01:a7:4f:71:70:83:bf:71:34:32:b0:5d:
         4b:ab:2e:ab:2a:c3:3b:d9:67:74:5f:07:40:09:e1:57:c3:e4:
         d8:9e:73:94:e3:75:de:80:ca:d1:6b:75:ab:65:eb:2e:51:e6:
         83:15:78:1b:c8:7b:66:73:93:0f:58:bf:e1:8d:1f:70:e9:6d:
         58:c9:9f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org