Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/323830343a323936633a3a2f33322d3332203d3e20323634303134.roa
File:                     323830343a323936633a3a2f33322d3332203d3e20323634303134.roa (raw, json)
Hash identifier:          M/mFLqAxcuII/fqneZZFTEjefvd2863crteWmfZuB/I=
Subject key identifier:   12:BA:DA:3C:5D:17:06:80:3C:32:E0:20:EA:E2:D6:31:2C:3B:62:14
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       44357328A97A792AF2BF1574A0F3326B532FFA35
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/323830343a323936633a3a2f33322d3332203d3e20323634303134.roa
Signing time:             Thu 04 Apr 2024 05:35:47 +0000
ROA not before:           Thu 04 Apr 2024 05:30:47 +0000
ROA not after:            Thu 03 Apr 2025 05:35:47 +0000
asID:                     264014
IP address blocks:        2804:296c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 20:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:35:73:28:a9:7a:79:2a:f2:bf:15:74:a0:f3:32:6b:53:2f:fa:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Apr  4 05:30:47 2024 GMT
            Not After : Apr  3 05:35:47 2025 GMT
        Subject: CN=12BADA3C5D1706803C32E020EAE2D6312C3B6214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:4d:93:b0:07:b3:2f:85:4c:b9:48:36:35:
                    c7:30:80:24:22:31:17:46:91:16:02:28:cd:d1:81:
                    fa:81:6f:f6:c9:44:64:92:b1:46:c6:51:dd:a4:cc:
                    07:cb:9d:ee:bd:26:92:13:50:36:91:b6:7f:40:89:
                    0a:d8:9d:6f:8d:01:d0:1a:1d:01:ed:80:93:ca:8e:
                    1b:09:3e:b9:d6:9e:03:d1:a5:0e:c6:47:77:61:23:
                    e4:7a:0a:32:00:8c:39:64:0d:38:71:58:00:fa:10:
                    90:b4:06:20:b5:62:a4:e8:60:37:39:bb:84:fe:8a:
                    6c:b5:21:3c:df:82:09:75:f6:5c:e3:f7:12:a0:35:
                    06:71:a6:c9:ae:ca:76:e3:81:70:10:a1:4c:58:fb:
                    e9:e9:87:42:b3:d4:5f:f0:70:7e:b7:cd:84:ea:4d:
                    57:75:cc:f0:6a:11:78:ff:d7:52:8f:51:67:35:da:
                    21:08:54:6c:56:3e:e9:24:d6:8b:a4:38:64:8c:d4:
                    65:87:55:51:34:e7:0f:4b:8d:a2:43:43:cf:04:69:
                    a1:d1:ee:e1:7d:54:2a:13:eb:30:af:2a:ba:6c:d9:
                    0b:10:b7:e5:a4:98:1b:ba:51:93:0f:15:a4:62:6c:
                    5d:d5:68:08:29:19:53:59:a6:0e:1d:ef:40:e9:6d:
                    21:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BA:DA:3C:5D:17:06:80:3C:32:E0:20:EA:E2:D6:31:2C:3B:62:14
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/323830343a323936633a3a2f33322d3332203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:296c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ba:d2:d9:47:1e:19:fc:9b:d8:b9:58:15:2b:38:b6:d2:db:
         cc:be:40:28:b2:dd:1d:11:60:e7:d2:62:66:dd:3f:64:f9:cf:
         3d:11:2b:e8:44:6a:71:7f:08:d7:f0:7f:1d:94:96:99:20:21:
         68:2e:d4:56:e6:2b:fa:93:53:b0:b7:32:01:22:50:12:d1:b1:
         8f:7b:63:1e:7b:62:cd:d7:99:f5:3d:24:eb:77:04:16:8a:e7:
         a2:d2:47:d9:0b:15:85:6b:5d:f3:67:e9:f7:dc:4d:5b:21:f4:
         58:e7:16:20:19:60:79:ae:62:c7:63:ae:1b:b9:6f:a4:97:8c:
         2e:ea:33:6a:ab:a4:bc:cb:42:f1:aa:80:c3:19:33:46:97:f3:
         27:c2:5f:5f:f0:ed:59:e3:f4:cb:fe:70:f9:f8:44:07:a7:32:
         e6:af:c1:ff:a6:1a:30:69:8e:6c:e9:38:03:32:f0:bb:9d:44:
         48:3d:a7:59:77:85:a1:6c:2f:0a:35:5c:bc:f8:c5:28:3b:9c:
         21:9d:4d:69:a4:07:86:b0:41:97:7a:ee:e6:ac:92:0a:0d:3e:
         2f:bf:0a:fe:9a:57:8d:ce:d8:09:4d:d8:99:0c:a0:78:16:73:
         41:01:20:bd:ec:f7:16:8c:e2:13:d9:09:d3:59:52:51:b4:e9:
         ba:af:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 22:47:10 2024 by rpki-client on console-ams.rpki-client.org