Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33322d3332203d3e20323639313135.roa
File:                     323830343a356661383a3a2f33322d3332203d3e20323639313135.roa (raw, json)
Hash identifier:          dovi+uqeYSnVmKplHhRw3sTV4S5XKjapYO6GGwY3eSQ=
Subject key identifier:   21:66:24:E9:32:A9:CC:68:E4:A8:64:05:5C:8A:11:75:DC:05:CC:14
Certificate issuer:       /CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
Certificate serial:       0FEFADA88B701D402412409DC20678433E2A3E93
Authority key identifier: 37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33322d3332203d3e20323639313135.roa
Signing time:             Tue 23 Apr 2024 12:43:09 +0000
ROA not before:           Tue 23 Apr 2024 12:38:09 +0000
ROA not after:            Tue 22 Apr 2025 12:43:09 +0000
asID:                     269115
IP address blocks:        2804:5fa8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ef:ad:a8:8b:70:1d:40:24:12:40:9d:c2:06:78:43:3e:2a:3e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
        Validity
            Not Before: Apr 23 12:38:09 2024 GMT
            Not After : Apr 22 12:43:09 2025 GMT
        Subject: CN=216624E932A9CC68E4A864055C8A1175DC05CC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:f6:c9:91:95:82:81:67:3b:38:fa:ae:f6:
                    f2:67:37:fb:d8:83:94:a4:88:4b:bc:33:9a:6a:bd:
                    53:5b:cb:87:ea:b7:77:d3:aa:1c:fb:32:09:62:06:
                    9a:f3:71:66:c5:3d:6e:2a:9d:5b:f8:58:ee:e7:97:
                    3a:f6:99:95:07:02:66:31:04:7e:35:05:f6:bc:d7:
                    64:cc:13:57:e2:bb:6f:45:3c:e6:3b:2c:a8:02:60:
                    ad:f5:b9:b7:fa:dd:7a:77:17:f7:04:d0:db:95:d6:
                    5f:c8:22:77:5e:f8:58:75:75:4e:af:e2:b5:49:e2:
                    de:5b:11:43:d8:1a:aa:b3:84:95:24:c6:4e:f8:90:
                    b6:15:69:18:e5:5e:a1:33:31:52:64:ae:13:37:b3:
                    14:5d:ac:fc:ea:32:3d:05:2c:54:b4:7e:66:a5:d5:
                    2e:6f:b0:85:14:af:4e:0c:fc:c9:4b:de:28:dc:6c:
                    de:02:90:16:88:5e:18:5c:c5:55:5b:03:22:8e:3e:
                    66:21:b0:a6:fa:c2:4a:03:52:70:e3:8a:f9:c1:ff:
                    b8:bd:52:96:1f:61:08:33:bf:2e:ba:ad:9d:0d:e0:
                    12:23:1c:78:e5:b9:c9:78:0a:52:9f:dd:17:7d:5a:
                    55:e2:60:ec:9c:e4:9a:fc:c4:2d:9d:f8:f9:ca:ec:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:66:24:E9:32:A9:CC:68:E4:A8:64:05:5C:8A:11:75:DC:05:CC:14
            X509v3 Authority Key Identifier:
                keyid:37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33322d3332203d3e20323639313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:e0:e4:4e:67:d2:b1:ff:ce:63:75:2e:3d:d2:49:70:59:7c:
         8e:ca:75:de:be:1c:d2:25:77:b4:d0:e0:b1:5f:5d:d0:09:94:
         4f:cc:e6:ef:ba:1f:ef:83:1b:e1:5a:5f:00:08:8f:c4:20:1b:
         21:c0:3a:67:58:2c:be:cd:60:7f:fb:2b:21:c7:e4:ff:f1:12:
         49:07:93:9d:c6:36:0a:94:09:db:87:a0:9b:5d:74:2c:1e:61:
         dc:fa:ea:1c:24:91:44:a0:da:13:e9:12:37:0f:0d:d7:10:09:
         f2:ea:c8:eb:db:4e:fd:1f:78:2b:e7:07:f5:a3:fd:24:ef:05:
         6b:7e:2a:88:6a:4e:8d:5d:54:f5:8d:f8:ac:92:fc:46:6a:fa:
         85:22:75:e7:30:c6:65:af:90:b2:93:e2:a5:be:b2:24:b1:9c:
         c9:af:f7:9a:f2:d7:24:dc:65:3b:c3:56:b8:7a:02:9b:92:4a:
         26:cc:08:1e:7d:68:6f:0b:6b:32:1f:51:73:55:9f:22:60:bb:
         2a:34:5c:3f:fe:c9:e2:88:d4:57:b6:2f:d6:47:18:a6:c1:f3:
         87:6f:45:72:dc:60:5a:af:72:fd:3b:9e:98:03:e0:0c:d3:bd:
         97:1a:4e:e8:2c:89:d6:41:f8:7b:6d:7c:c8:5e:d9:46:24:34:
         95:bc:ae:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org