Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33332d3333203d3e20323639313135.roa
File:                     323830343a356661383a3a2f33332d3333203d3e20323639313135.roa (raw, json)
Hash identifier:          xn+mGxvjo7vJvv+MVkYbPCSHdNpne1dUMW7N6HdM3ec=
Subject key identifier:   22:3D:3F:EE:A7:D5:C9:63:4A:A1:51:D7:A5:C7:DD:55:33:EE:B2:CE
Certificate issuer:       /CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
Certificate serial:       6E6EFACF68902395511F2D903562FE4F4954B169
Authority key identifier: 37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33332d3333203d3e20323639313135.roa
Signing time:             Tue 23 Apr 2024 12:43:12 +0000
ROA not before:           Tue 23 Apr 2024 12:38:12 +0000
ROA not after:            Tue 22 Apr 2025 12:43:12 +0000
asID:                     269115
IP address blocks:        2804:5fa8::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6e:fa:cf:68:90:23:95:51:1f:2d:90:35:62:fe:4f:49:54:b1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
        Validity
            Not Before: Apr 23 12:38:12 2024 GMT
            Not After : Apr 22 12:43:12 2025 GMT
        Subject: CN=223D3FEEA7D5C9634AA151D7A5C7DD5533EEB2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:b0:9b:b4:39:82:f2:65:d8:dd:55:12:d7:
                    c5:38:1d:94:0e:39:a9:2f:a8:7a:9a:13:16:ca:3d:
                    20:20:ef:cd:3b:dc:98:73:92:40:40:74:1b:eb:dc:
                    ae:35:01:ef:7a:9d:87:7f:fe:03:f6:47:ee:8e:1b:
                    1b:5e:c9:1b:2b:a3:57:cf:f7:b6:f3:c8:7d:39:9a:
                    d2:0f:cc:40:42:3f:c2:6b:cf:ef:63:b8:95:48:19:
                    6d:5b:f2:8b:13:a2:5b:f4:3d:74:18:33:a1:f0:0b:
                    86:e5:80:e0:d0:86:01:a7:6c:52:8e:e7:77:a2:fe:
                    5e:a5:70:0d:78:54:e9:e5:98:5f:0b:04:15:20:03:
                    03:a5:47:67:0d:1b:4b:ae:59:02:97:10:4f:36:c9:
                    a7:cd:d2:84:5f:67:2c:4e:71:56:a8:7a:03:8f:61:
                    9d:48:b8:1f:d1:e6:bb:b1:bb:40:89:9e:8b:74:27:
                    d1:13:a7:fb:e3:a8:14:2a:a8:e6:32:af:01:d1:d4:
                    d6:e6:13:74:af:98:30:87:5f:5f:dd:81:a8:9e:db:
                    e5:e4:58:31:62:32:d1:47:22:b4:29:21:d0:c7:24:
                    74:d2:d7:61:6a:1f:4a:42:78:57:c2:72:cf:24:38:
                    30:1b:40:a1:cf:8d:57:39:4d:a7:bf:c6:41:73:d9:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3D:3F:EE:A7:D5:C9:63:4A:A1:51:D7:A5:C7:DD:55:33:EE:B2:CE
            X509v3 Authority Key Identifier:
                keyid:37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33332d3333203d3e20323639313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fa8::/33

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:b4:2c:e6:f9:19:1b:94:4f:01:98:66:2e:c4:7d:82:5e:
         04:a4:ff:44:c1:e3:53:a4:3a:e5:78:3c:b0:36:52:cb:f5:35:
         7e:e3:c8:0c:b2:7c:6a:30:59:bc:f5:f2:07:9a:ec:ef:20:d8:
         f1:c4:ee:94:d7:b5:fd:d1:ff:c0:7a:f8:43:cd:76:70:ab:d0:
         06:da:e1:81:96:41:ef:3e:fa:46:91:24:57:1b:f6:9a:15:9e:
         2c:8b:76:e1:60:84:4a:10:e6:74:5e:ed:88:69:c2:85:74:4a:
         9c:37:cc:07:6c:5a:65:7a:bf:5d:39:63:75:37:ee:b5:63:af:
         58:53:3b:0f:6b:b7:6d:24:6d:39:b1:02:b3:a4:90:a5:d5:23:
         5c:05:a3:c5:ba:12:37:09:c0:c8:11:63:18:64:af:43:1a:7a:
         b7:5e:6d:23:7b:49:ca:b9:aa:1e:e0:87:de:b7:a3:94:f9:84:
         0f:64:f9:3e:4a:cc:22:e1:9a:1e:c8:10:fe:b6:1f:ff:0f:0a:
         07:9e:f6:6e:c0:28:90:31:11:d3:1a:18:92:aa:ce:a7:7a:23:
         f7:4d:a3:33:8b:f0:82:a8:a3:b7:f5:f1:ec:77:68:43:20:78:
         5f:f4:5e:9d:56:90:6d:fe:f8:96:ee:f7:81:6c:31:30:e1:f8:
         00:bb:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org