Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a626562613a3a2f34382d3438203d3e20323637353934.roa
File:                     323830343a343364383a626562613a3a2f34382d3438203d3e20323637353934.roa (raw, json)
Hash identifier:          BWNvV1tBA/J7xWs5ha9n46N1wub6VeNsjnYAnXCJUcs=
Subject key identifier:   B4:FD:D4:44:66:1F:46:99:05:94:6D:F8:C7:03:4A:39:2A:75:D3:56
Certificate issuer:       /CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
Certificate serial:       1AA6C72422E224734BB886056CAFE47E803990EA
Authority key identifier: 5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a626562613a3a2f34382d3438203d3e20323637353934.roa
Signing time:             Fri 24 Mar 2023 01:47:11 +0000
ROA not before:           Fri 24 Mar 2023 01:42:11 +0000
ROA not after:            Fri 22 Mar 2024 01:47:11 +0000
asID:                     267594
IP address blocks:        2804:43d8:beba::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 21:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a6:c7:24:22:e2:24:73:4b:b8:86:05:6c:af:e4:7e:80:39:90:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
        Validity
            Not Before: Mar 24 01:42:11 2023 GMT
            Not After : Mar 22 01:47:11 2024 GMT
        Subject: CN=B4FDD444661F469905946DF8C7034A392A75D356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:46:2b:df:3a:f9:66:b6:3c:c7:e2:77:29:
                    bf:f1:5c:bb:ed:29:2c:e5:be:94:d6:62:a6:ac:04:
                    08:ce:8f:2e:dc:fd:64:31:5b:1a:b0:73:cb:dc:e1:
                    f5:ac:b7:db:54:5e:0e:4e:7f:50:e1:b8:63:15:a2:
                    30:fa:41:6e:df:84:29:3c:e8:e2:1e:3f:18:bf:2c:
                    6f:28:8f:87:45:db:ee:5c:6c:cc:2c:c4:6e:e8:1f:
                    db:84:4e:33:ad:7f:eb:89:e9:1a:ab:f8:40:93:fc:
                    c9:79:72:f0:cf:ce:5f:3d:0a:d8:9c:ad:9f:dd:a8:
                    52:3d:02:20:34:75:20:1b:c1:27:b0:c4:35:25:5e:
                    a0:13:12:c6:f2:4d:76:52:1d:8b:dc:33:69:d1:37:
                    83:8a:96:5b:7c:c6:3c:55:c3:29:79:cb:ab:b0:a7:
                    b9:01:2c:80:24:70:a2:1c:ed:c8:e3:af:62:f9:65:
                    29:57:9e:c3:8e:f9:44:ba:1d:37:fe:02:07:6a:a8:
                    1a:6b:05:9f:64:d2:3a:40:02:95:e5:15:5f:24:5e:
                    8f:03:64:81:5a:58:11:1a:34:0a:49:b6:2f:1c:c0:
                    26:30:40:6a:ce:c5:9e:77:77:91:31:32:72:a8:13:
                    38:dc:83:c0:49:f0:ec:56:fd:3f:70:6f:47:07:63:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:D4:44:66:1F:46:99:05:94:6D:F8:C7:03:4A:39:2A:75:D3:56
            X509v3 Authority Key Identifier:
                keyid:5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a626562613a3a2f34382d3438203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d8:beba::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:7c:61:14:af:b8:13:86:4b:fc:ea:d6:18:ec:e5:f0:a7:
         f2:de:74:5d:91:59:79:09:68:8a:94:a6:2b:19:6a:88:c4:8b:
         94:71:8b:22:a3:79:e1:6d:1c:41:39:57:8f:f3:50:a9:ff:87:
         7a:62:c4:d5:85:cf:09:4e:17:ac:f2:d3:29:1c:4c:b1:ac:a1:
         e4:bc:7a:e4:c3:04:5c:dc:b5:b5:81:b4:d7:49:52:1d:83:e6:
         ae:38:9a:01:d0:0a:1a:68:2a:94:93:69:cb:3d:f7:8a:2d:de:
         c8:72:c8:75:fd:73:0f:81:21:bb:f9:8e:27:0f:95:43:c2:c9:
         da:37:37:80:77:3b:05:57:a9:f4:b9:37:c1:52:5c:1f:a0:b3:
         2a:52:58:8b:ac:e5:70:16:66:6e:29:aa:e9:47:ea:a6:3e:46:
         93:8a:af:d0:0d:f7:61:4a:df:e3:3c:94:7b:85:d4:81:89:b8:
         29:64:da:9f:ef:4e:5a:6d:a1:be:02:32:ad:82:9d:29:59:ef:
         12:a3:25:e8:28:04:de:24:fe:80:27:91:8b:a6:d7:a0:34:c2:
         79:93:1c:03:ad:08:fd:d3:97:05:ac:b9:73:a4:2a:39:e6:6b:
         13:4f:81:76:88:06:51:73:f7:39:7f:43:1d:60:ee:69:de:0a:
         05:17:5e:07
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUGqbHJCLiJHNLuIYFbK/kfoA5kOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVGMEUyNTk4QjcxOEY1NzkzREYzOENFRjNBNjhFRTM4
RTAxN0MwNjAeFw0yMzAzMjQwMTQyMTFaFw0yNDAzMjIwMTQ3MTFaMDMxMTAvBgNV
BAMTKEI0RkRENDQ0NjYxRjQ2OTkwNTk0NkRGOEM3MDM0QTM5MkE3NUQzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZEYr3zr5ZrY8x+J3Kb/xXLvt
KSzlvpTWYqasBAjOjy7c/WQxWxqwc8vc4fWst9tUXg5Of1DhuGMVojD6QW7fhCk8
6OIePxi/LG8oj4dF2+5cbMwsxG7oH9uETjOtf+uJ6Rqr+ECT/Ml5cvDPzl89Ctic
rZ/dqFI9AiA0dSAbwSewxDUlXqATEsbyTXZSHYvcM2nRN4OKllt8xjxVwyl5y6uw
p7kBLIAkcKIc7cjjr2L5ZSlXnsOO+US6HTf+AgdqqBprBZ9k0jpAApXlFV8kXo8D
ZIFaWBEaNApJti8cwCYwQGrOxZ53d5ExMnKoEzjcg8BJ8OxW/T9wb0cHYxu3AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUtP3URGYfRpkFlG34xwNKOSp101YwHwYDVR0j
BBgwFoAUXvDiWYtxj1eT3zjO86aO444BfAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1hxRzVZUE5CYUFCRkJkTmdjVndKN2piZGVpSnpCZHpFY3pKTk1zdTRN
UHIvMC81RUYwRTI1OThCNzE4RjU3OTNERjM4Q0VGM0E2OEVFMzhFMDE3QzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFRjBFMjU5OEI3MThGNTc5
M0RGMzhDRUYzQTY4RUUzOEUwMTdDMDYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dYcUc1WVBOQmFBQkZCZE5nY1Z3SjdqYmRlaUp6QmR6RWN6Sk5Nc3U0TVByLzAv
MzIzODMwMzQzYTM0MzM2NDM4M2E2MjY1NjI2MTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNzM1MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEQ9i+ujANBgkqhkiG9w0BAQsF
AAOCAQEAcLh8YRSvuBOGS/zq1hjs5fCn8t50XZFZeQloipSmKxlqiMSLlHGLIqN5
4W0cQTlXj/NQqf+HemLE1YXPCU4XrPLTKRxMsayh5Lx65MMEXNy1tYG010lSHYPm
rjiaAdAKGmgqlJNpyz33ii3eyHLIdf1zD4Ehu/mOJw+VQ8LJ2jc3gHc7BVep9Lk3
wVJcH6CzKlJYi6zlcBZmbimq6Ufqpj5Gk4qv0A33YUrf4zyUe4XUgYm4KWTan+9O
Wm2hvgIyrYKdKVnvEqMl6CgE3iT+gCeRi6bXoDTCeZMcA60I/dOXBay5c6QqOeZr
E0+BdogGUXP3OX9DHWDuad4KBRdeBw==
-----END CERTIFICATE-----
Generated at Mon Feb 19 22:14:54 2024 by rpki-client on console-fra.rpki-client.org