Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3332203d3e20323639323139.roa
File:                     323830343a363133303a3a2f33322d3332203d3e20323639323139.roa (raw, json)
Hash identifier:          rXryiJhTPv9plIHMM9fPkWc5XtORarBu40J5bErMMDM=
Subject key identifier:   24:87:4D:8F:C6:F6:6F:DB:AA:23:20:52:F0:9B:B5:2C:83:01:89:61
Certificate issuer:       /CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Certificate serial:       176C15646C0094B228FCB78FA32F7C41628F9F23
Authority key identifier: 97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3332203d3e20323639323139.roa
Signing time:             Wed 03 Apr 2024 20:25:00 +0000
ROA not before:           Wed 03 Apr 2024 20:20:00 +0000
ROA not after:            Wed 02 Apr 2025 20:25:00 +0000
asID:                     269219
IP address blocks:        2804:6130::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 17:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6c:15:64:6c:00:94:b2:28:fc:b7:8f:a3:2f:7c:41:62:8f:9f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
        Validity
            Not Before: Apr  3 20:20:00 2024 GMT
            Not After : Apr  2 20:25:00 2025 GMT
        Subject: CN=24874D8FC6F66FDBAA232052F09BB52C83018961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:f9:9f:cc:56:8a:72:51:17:a1:c5:fc:2e:
                    d1:81:db:ab:eb:d9:6f:7e:8b:25:a0:4e:8a:9e:73:
                    19:e3:c6:17:ca:2b:bc:f2:d8:32:82:c2:27:79:4e:
                    e5:65:e3:86:70:9a:ef:14:09:51:26:30:c2:e8:d2:
                    f6:ff:09:40:0b:77:dc:c2:4b:b9:d9:01:40:49:c4:
                    f1:c5:83:63:fa:b7:1a:24:47:f7:b3:7b:5c:01:9d:
                    8b:6d:e6:95:c0:bb:3d:7b:80:bc:cb:4e:f2:e5:dd:
                    45:b7:53:2c:61:2a:16:90:ad:5f:a1:1d:60:c0:f7:
                    77:62:72:22:6a:70:1f:10:3a:d4:4b:3d:7e:ab:00:
                    b4:91:96:5b:dd:fa:d8:2c:d3:23:3d:a2:39:1d:f1:
                    d7:46:70:a8:62:a9:73:b5:7e:f8:a5:65:12:06:97:
                    a9:f4:a0:e2:88:4d:f0:f8:56:5f:85:8f:9a:e2:78:
                    75:20:c7:d3:0d:7c:b2:a5:09:27:a0:ac:bf:21:16:
                    f1:ba:dc:8d:fd:06:25:5a:51:57:1b:fb:d2:d2:4e:
                    a2:09:10:02:f8:24:8c:f5:4a:9c:29:d7:3b:cd:fb:
                    c0:e2:bc:74:ea:44:55:b2:44:ec:b9:f1:d2:91:e3:
                    46:53:d4:a0:47:ba:f2:bd:b1:d3:d9:61:b6:6f:77:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:87:4D:8F:C6:F6:6F:DB:AA:23:20:52:F0:9B:B5:2C:83:01:89:61
            X509v3 Authority Key Identifier:
                keyid:97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3332203d3e20323639323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6130::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:21:d8:c6:47:11:f1:3f:fb:94:6f:a2:32:0d:09:f8:17:57:
         15:08:f8:92:be:3f:84:94:43:95:83:d0:fe:f4:9a:29:b1:e0:
         7e:44:64:89:42:43:10:a5:2c:98:f1:07:2c:04:7c:18:7d:5e:
         9a:a8:fb:aa:65:5d:55:81:c4:60:16:51:dd:77:8d:ec:1c:dd:
         b5:a6:0e:d7:c8:03:a4:e9:73:13:c1:6f:f9:ea:d6:e1:39:6f:
         55:ef:35:19:5a:bd:f6:df:25:b3:33:d3:b4:d9:ec:46:8f:94:
         bb:88:31:92:d0:38:2b:28:fb:97:7c:bc:20:95:63:0f:4b:d1:
         08:fb:da:46:33:ae:4a:98:b4:fb:eb:4a:df:6b:4b:be:32:74:
         d7:f7:3f:78:89:64:b3:a8:c7:f8:f2:fa:5d:06:e1:d3:98:61:
         42:fb:8d:ff:51:1f:08:41:ad:22:9c:16:a8:af:69:a5:53:60:
         02:ab:d1:58:a0:e4:44:70:ec:a7:f7:c4:15:6e:4e:7f:4b:ba:
         d6:1d:f2:81:5d:cd:9c:0b:56:c3:d5:97:b8:22:80:a7:90:95:
         86:7f:71:bb:9c:61:d3:80:60:2d:7f:b2:f0:88:7d:d5:68:b0:
         41:a1:1c:7d:69:f7:be:7f:40:f2:7a:fd:7a:f5:ef:f1:65:0d:
         48:7f:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org