Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3333203d3e20323730393330.roa
File:                     323830343a373361633a3a2f33322d3333203d3e20323730393330.roa (raw, json)
Hash identifier:          EcF4BLv+SItEq3zHqyQE9ZNzH1/7tamYYaBR7P76VB8=
Subject key identifier:   E9:D9:DA:06:97:71:2A:DC:CF:67:6C:1C:68:D1:0F:68:80:B3:B5:03
Certificate issuer:       /CN=1EE4D67FA010E491BFEDFB7AA592F824EBBC5208
Certificate serial:       1D60CD802ED2D3E3D1B8400BEA80FD9A579848F2
Authority key identifier: 1E:E4:D6:7F:A0:10:E4:91:BF:ED:FB:7A:A5:92:F8:24:EB:BC:52:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3333203d3e20323730393330.roa
Signing time:             Fri 04 Oct 2024 03:08:05 +0000
ROA not before:           Fri 04 Oct 2024 03:03:05 +0000
ROA not after:            Fri 03 Oct 2025 03:08:05 +0000
asID:                     270930
IP address blocks:        2804:73ac::/32 maxlen: 33

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 11:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:60:cd:80:2e:d2:d3:e3:d1:b8:40:0b:ea:80:fd:9a:57:98:48:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE4D67FA010E491BFEDFB7AA592F824EBBC5208
        Validity
            Not Before: Oct  4 03:03:05 2024 GMT
            Not After : Oct  3 03:08:05 2025 GMT
        Subject: CN=E9D9DA0697712ADCCF676C1C68D10F6880B3B503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:0d:71:e2:c4:69:06:83:fd:e3:1d:39:28:
                    80:41:be:5a:83:b4:eb:c6:53:a3:1b:16:d8:5d:f0:
                    85:14:88:15:f6:4f:09:0b:d9:07:eb:a9:c5:5d:bb:
                    61:a8:10:45:c8:88:8a:ca:fe:a6:50:21:66:00:66:
                    12:39:8b:57:8e:90:84:db:0a:7d:c2:06:12:b0:68:
                    7f:cb:70:b5:ed:5d:74:8a:48:26:f4:93:98:44:22:
                    c8:b2:d3:86:ae:94:98:7c:93:80:25:50:e2:bf:8c:
                    46:60:cc:16:42:4e:c3:7c:07:b9:88:7c:df:c7:58:
                    56:04:05:cc:3c:69:d5:28:8a:3f:6b:20:ff:26:b0:
                    05:fa:bf:6b:c4:cd:43:f0:ce:7e:74:91:be:0e:7b:
                    06:a8:1f:06:fd:35:f8:5d:e2:9a:67:e1:cd:98:97:
                    88:51:ff:21:77:ee:61:2d:a4:f1:64:5c:e6:3f:b9:
                    97:d3:dc:15:cd:49:d0:69:15:83:2d:a2:06:77:f7:
                    40:a0:1d:8a:04:a8:6e:41:7e:fe:57:b4:11:96:e8:
                    52:35:bc:46:80:ca:9f:aa:78:a0:49:c6:98:50:f6:
                    98:e1:be:5a:f5:d7:c2:27:fb:8e:c3:c1:9d:64:34:
                    cf:7e:da:60:b8:d6:26:3c:46:96:88:ad:39:23:c4:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D9:DA:06:97:71:2A:DC:CF:67:6C:1C:68:D1:0F:68:80:B3:B5:03
            X509v3 Authority Key Identifier:
                keyid:1E:E4:D6:7F:A0:10:E4:91:BF:ED:FB:7A:A5:92:F8:24:EB:BC:52:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3333203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:f1:bb:d2:0d:f5:d7:c7:46:0f:8a:0d:10:87:98:05:c9:
         69:81:4f:5b:20:15:c8:df:66:8b:57:e9:3e:63:c8:28:93:97:
         3b:d7:80:38:bf:45:c0:eb:ff:9e:cc:f5:39:fc:5b:98:5d:9d:
         06:f7:2f:df:1e:67:43:a7:9b:c8:ff:cb:b4:2a:2a:74:f6:b3:
         c5:dc:72:4e:4c:3b:29:51:d1:56:db:3d:ac:cb:57:22:ea:ca:
         bd:3f:de:95:d8:94:21:f9:f6:c3:ea:5e:90:60:c5:31:05:9e:
         13:37:37:41:a9:3a:6c:22:65:43:79:30:d0:c2:5b:82:ff:92:
         01:48:f9:24:61:82:5b:8f:e1:0f:d5:a5:a6:48:50:6e:a9:2c:
         4e:9c:21:19:7e:4f:8e:05:6a:13:7a:0d:e9:a0:87:67:34:f5:
         f8:b8:0e:14:94:b3:3d:01:a5:ca:b2:98:e1:6d:8e:d9:d8:40:
         55:66:68:3d:a1:f3:8d:30:3c:fa:b0:72:a0:39:a8:31:b4:fd:
         d5:39:46:04:21:dd:e8:d7:16:1f:f7:45:c9:f2:01:05:02:89:
         f7:5d:c2:8c:61:78:26:a9:df:b5:97:7d:c5:59:0d:35:71:e9:
         01:1a:f6:5e:1b:f3:f2:7d:08:b4:a9:17:b9:0b:4a:7c:c0:77:
         13:2f:22:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHWDNgC7S0+PRuEAL6oD9mleYSPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVFNEQ2N0ZBMDEwRTQ5MUJGRURGQjdBQTU5MkY4MjRF
QkJDNTIwODAeFw0yNDEwMDQwMzAzMDVaFw0yNTEwMDMwMzA4MDVaMDMxMTAvBgNV
BAMTKEU5RDlEQTA2OTc3MTJBRENDRjY3NkMxQzY4RDEwRjY4ODBCM0I1MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWQ1x4sRpBoP94x05KIBBvlqD
tOvGU6MbFthd8IUUiBX2TwkL2QfrqcVdu2GoEEXIiIrK/qZQIWYAZhI5i1eOkITb
Cn3CBhKwaH/LcLXtXXSKSCb0k5hEIsiy04aulJh8k4AlUOK/jEZgzBZCTsN8B7mI
fN/HWFYEBcw8adUoij9rIP8msAX6v2vEzUPwzn50kb4OewaoHwb9Nfhd4ppn4c2Y
l4hR/yF37mEtpPFkXOY/uZfT3BXNSdBpFYMtogZ390CgHYoEqG5Bfv5XtBGW6FI1
vEaAyp+qeKBJxphQ9pjhvlr118In+47DwZ1kNM9+2mC41iY8RpaIrTkjxB/tAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6dnaBpdxKtzPZ2wcaNEPaICztQMwHwYDVR0j
BBgwFoAUHuTWf6AQ5JG/7ft6pZL4JOu8UggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhOQXNXaHBZR0Z1Y0sxcGVjQWV3TkZocTg5TmgzM0duakFCYlFzQzdr
QUEvMC8xRUU0RDY3RkEwMTBFNDkxQkZFREZCN0FBNTkyRjgyNEVCQkM1MjA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFRTRENjdGQTAxMEU0OTFC
RkVERkI3QUE1OTJGODI0RUJCQzUyMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4TkFzV2hwWUdGdWNLMXBlY0Fld05GaHE4OU5oMzNHbmpBQmJRc0M3a0FBLzAv
MzIzODMwMzQzYTM3MzM2MTYzM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMw
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARzrDANBgkqhkiG9w0BAQsFAAOCAQEAm9vxu9IN
9dfHRg+KDRCHmAXJaYFPWyAVyN9mi1fpPmPIKJOXO9eAOL9FwOv/nsz1OfxbmF2d
Bvcv3x5nQ6ebyP/LtCoqdPazxdxyTkw7KVHRVts9rMtXIurKvT/eldiUIfn2w+pe
kGDFMQWeEzc3Qak6bCJlQ3kw0MJbgv+SAUj5JGGCW4/hD9WlpkhQbqksTpwhGX5P
jgVqE3oN6aCHZzT1+LgOFJSzPQGlyrKY4W2O2dhAVWZoPaHzjTA8+rByoDmoMbT9
1TlGBCHd6NcWH/dFyfIBBQKJ913CjGF4JqnftZd9xVkNNXHpARr2Xhvz8n0ItKkX
uQtKfMB3Ey8iLA==
-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:29 2024 by rpki-client on console-ams.rpki-client.org