Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa
File:                     323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa (raw, json)
Hash identifier:          RUzuYkhH+riYkTb0O3GshdUUaxjhsufLlOTO6YmhyR8=
Subject key identifier:   C5:75:1E:84:58:AE:F8:FD:C4:56:3A:CD:7D:D6:2B:CF:0F:B0:39:3F
Certificate issuer:       /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial:       550B82FA4A3BCE7A602246423EC746A2521AC1E3
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa
Signing time:             Tue 30 Apr 2024 08:13:39 +0000
ROA not before:           Tue 30 Apr 2024 08:08:39 +0000
ROA not after:            Tue 29 Apr 2025 08:13:39 +0000
asID:                     272501
IP address blocks:        2804:8224:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 03:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0b:82:fa:4a:3b:ce:7a:60:22:46:42:3e:c7:46:a2:52:1a:c1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
        Validity
            Not Before: Apr 30 08:08:39 2024 GMT
            Not After : Apr 29 08:13:39 2025 GMT
        Subject: CN=C5751E8458AEF8FDC4563ACD7DD62BCF0FB0393F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:68:e2:78:77:4d:23:1d:76:e0:0c:f5:f1:
                    3b:d2:ec:51:15:20:5b:db:d2:63:a3:f1:df:dd:34:
                    2f:32:b0:a3:2c:84:a8:c1:96:7a:a5:ee:60:df:e0:
                    35:1b:98:48:43:f5:79:00:ae:5a:62:b0:e4:02:1d:
                    3d:9e:ad:5c:78:c8:14:01:b5:42:a1:33:46:c5:5f:
                    7c:75:84:6b:01:99:38:4b:e9:4c:37:23:ff:e3:33:
                    25:b3:e2:94:63:e7:d7:bb:77:b0:47:af:53:53:ab:
                    2a:5a:34:f2:3d:db:f6:1c:bb:44:cd:18:e1:00:18:
                    cf:a8:12:2e:4d:04:16:fa:f5:56:cb:cb:df:87:96:
                    19:28:bc:f7:c9:c5:a5:db:ad:f5:13:7b:f5:88:bb:
                    28:74:81:5c:32:73:06:b1:4b:52:6e:1c:5f:a4:aa:
                    6d:27:bf:36:c4:0a:5b:b6:0e:12:82:58:9b:4e:73:
                    72:39:e8:53:97:99:a7:a0:39:a2:10:21:45:7c:51:
                    10:be:b8:e9:12:45:5c:7c:52:df:97:9a:42:37:89:
                    46:a3:e7:7b:d8:3a:a4:18:39:e7:b9:c3:09:85:ed:
                    34:dc:5f:06:33:b4:a4:36:57:1e:a1:05:4f:6f:e2:
                    c4:d0:fc:55:a8:d4:46:31:99:3a:8e:66:16:9c:9f:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:75:1E:84:58:AE:F8:FD:C4:56:3A:CD:7D:D6:2B:CF:0F:B0:39:3F
            X509v3 Authority Key Identifier:
                keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8224:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         e1:02:84:4a:45:76:97:77:d2:27:6a:bc:cd:43:87:60:90:aa:
         e8:b0:5e:2b:7c:86:7b:7b:6d:33:47:0a:e6:c2:be:bf:cb:d4:
         7e:43:ee:ff:81:c6:f3:8c:b0:0b:13:1a:51:eb:e7:01:bf:1f:
         12:e5:e6:0a:a2:59:cc:9e:f6:94:4b:f2:93:d6:93:70:e1:30:
         31:31:79:a4:8c:d7:e1:f8:3a:84:62:a1:96:47:9a:9a:a7:66:
         15:76:75:01:60:07:7f:8c:b0:36:8c:73:63:76:d8:62:6c:f5:
         8a:e4:bd:c0:61:f2:f0:00:a9:da:b6:a3:55:4d:01:c9:c5:cc:
         52:70:36:6f:d2:7f:43:8c:32:fb:1b:f4:dd:75:2b:61:af:e3:
         a7:51:94:0e:74:56:10:bf:4c:aa:73:e9:a1:02:18:c4:ab:ed:
         8a:ea:8e:98:cf:55:5c:4c:0e:35:a6:3b:20:40:2e:79:ef:ac:
         6c:43:d8:9e:10:94:36:01:a0:58:42:55:0d:cd:88:35:22:b9:
         e4:7e:9f:4a:61:10:a5:a4:14:b4:56:21:b3:d5:8e:9c:38:ee:
         cd:9e:bb:96:66:bf:be:d6:d4:1d:01:4e:1b:62:81:75:1b:2d:
         58:3d:ca:b0:f5:4a:0d:e6:af:33:ab:0d:b0:a3:a5:d4:79:54:
         50:ce:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 04:15:11 2024 by rpki-client on console-ams.rpki-client.org