Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33362d3336203d3e20323733373237.roa
File:                     323830343a386235383a3a2f33362d3336203d3e20323733373237.roa (raw, json)
Hash identifier:          pgOv84PINOLbK2XVUdeg9GoHt03egLsBjugZLx3oVhc=
Subject key identifier:   D8:22:A2:C8:B6:C6:41:4D:FE:CB:F7:B8:1B:AA:BD:04:BB:08:FC:DA
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       5359D6F867BACDB2AE1C0D75BB530D01CAB966D5
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33362d3336203d3e20323733373237.roa
Signing time:             Thu 18 May 2023 02:54:26 +0000
ROA not before:           Thu 18 May 2023 02:49:26 +0000
ROA not after:            Thu 16 May 2024 02:54:26 +0000
asID:                     273727
IP address blocks:        2804:8b58::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:59:d6:f8:67:ba:cd:b2:ae:1c:0d:75:bb:53:0d:01:ca:b9:66:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 18 02:49:26 2023 GMT
            Not After : May 16 02:54:26 2024 GMT
        Subject: CN=D822A2C8B6C6414DFECBF7B81BAABD04BB08FCDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:52:e7:20:36:4c:21:dc:a2:52:0c:a9:ad:
                    69:00:33:02:fe:be:cd:c8:c5:73:af:0a:5d:2e:33:
                    85:de:4f:ec:41:6b:32:c7:c3:d9:88:1c:5e:e6:54:
                    c5:23:74:1c:c2:6e:4d:0f:28:3b:91:18:db:62:04:
                    77:b6:0f:7d:ff:5a:62:02:b5:f4:7b:16:7d:f6:8c:
                    f9:e7:98:09:c2:06:c8:aa:a4:6b:8b:ef:7d:c6:ab:
                    d9:ea:86:86:ad:aa:bf:8b:9b:1d:3c:bd:b7:8a:39:
                    51:38:01:a4:94:43:19:3e:41:e0:cf:7d:db:2b:76:
                    6a:70:ff:cc:f3:b8:3f:6d:1d:88:9d:7e:62:0d:e5:
                    87:6b:5b:8b:ee:98:e1:86:8c:5b:38:80:d6:cb:04:
                    8b:ee:30:b8:81:b3:98:42:32:7e:ac:14:53:c3:e2:
                    c3:cb:80:d2:8c:ae:47:c8:8c:e5:ba:cf:71:09:d7:
                    90:1b:cc:45:be:0e:d2:53:88:5b:ce:71:70:51:6b:
                    f5:df:57:80:89:db:20:a3:4c:bc:81:b7:f5:d8:3f:
                    9c:24:3e:2f:3a:61:1e:88:44:41:bf:7a:66:59:ec:
                    49:5a:1c:9b:27:c2:be:13:49:2e:51:b6:17:be:2c:
                    9b:8b:d6:5a:b6:fe:b0:a9:c5:b0:2c:ba:df:a0:8a:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:A2:C8:B6:C6:41:4D:FE:CB:F7:B8:1B:AA:BD:04:BB:08:FC:DA
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33362d3336203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:b8:99:57:9b:5c:72:48:0a:f6:31:cb:02:aa:5f:ff:ba:cd:
         33:76:38:54:ef:d9:0d:70:5b:02:bb:10:ea:da:66:4c:0a:26:
         3e:f0:03:fb:4c:c1:d6:6b:87:e5:29:87:0b:c5:ef:28:7e:03:
         66:d2:88:d4:a1:a7:91:82:bc:e0:b4:95:9b:5d:73:5d:d0:a9:
         57:6b:81:45:28:8e:a7:54:68:0d:df:ab:86:ce:c1:f3:2b:8a:
         0f:38:d4:4e:1d:42:ba:62:e3:d0:94:b7:1b:7a:cf:10:4a:70:
         4c:28:3d:e4:5d:3c:6b:3a:c2:f0:38:15:6b:b9:91:9a:68:07:
         96:f5:3e:7f:a3:6f:d9:c7:39:0e:77:70:9b:d6:5c:a2:f7:89:
         67:57:18:88:99:53:73:00:0e:62:07:f0:f1:83:0d:bf:f3:45:
         03:56:61:17:a6:21:ca:b9:b2:fa:61:d5:c1:da:20:47:50:31:
         b1:8a:a1:cb:16:a1:17:9d:d7:7a:a6:cb:cc:a9:cb:8b:bc:20:
         b4:a7:ab:3c:88:d1:05:6b:80:26:6a:af:3c:57:9b:10:46:1d:
         40:1c:57:c3:44:cc:23:e1:57:8d:76:1a:5b:e8:91:63:05:b5:
         8f:68:f5:30:23:2e:73:44:36:30:b3:7d:a9:36:8e:2b:5c:5d:
         1f:7b:59:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:28 2023 by rpki-client on console-fra.rpki-client.org