Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33332d3333203d3e20323732353031.roa
File:                     323830343a383232343a3a2f33332d3333203d3e20323732353031.roa (raw, json)
Hash identifier:          s1wWR+NPFavPnAdokFFhkVJtywQkMane5iv49BF7i3c=
Subject key identifier:   C5:AC:0E:FC:C8:ED:F1:2D:CE:43:98:FB:CC:FE:0E:1D:C2:BC:D2:7A
Certificate issuer:       /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial:       41D6FCD6955E55693FF268797402263A0387A1FC
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33332d3333203d3e20323732353031.roa
Signing time:             Fri 09 Aug 2024 15:30:19 +0000
ROA not before:           Fri 09 Aug 2024 15:25:19 +0000
ROA not after:            Fri 08 Aug 2025 15:30:19 +0000
asID:                     272501
IP address blocks:        2804:8224::/33 maxlen: 33

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 21:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d6:fc:d6:95:5e:55:69:3f:f2:68:79:74:02:26:3a:03:87:a1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
        Validity
            Not Before: Aug  9 15:25:19 2024 GMT
            Not After : Aug  8 15:30:19 2025 GMT
        Subject: CN=C5AC0EFCC8EDF12DCE4398FBCCFE0E1DC2BCD27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:18:5a:a1:18:5b:9a:78:0a:d4:15:58:a9:
                    02:a1:15:9c:5d:51:03:a3:b2:e3:43:b5:be:03:64:
                    83:73:47:50:fc:cf:6e:a7:3b:58:a5:d2:b3:7b:9f:
                    7c:2a:3c:0c:b6:af:8a:5e:49:9c:58:fd:4a:ff:1d:
                    f4:b5:b4:dd:c3:77:de:f3:bd:ab:59:7c:e6:98:62:
                    75:b6:44:fe:7b:d2:7d:0e:3a:16:b8:82:e4:0c:d9:
                    ea:ff:33:37:e9:24:71:23:2e:dc:fd:bd:3f:f9:e4:
                    0d:71:2a:7e:bc:31:4b:76:eb:e2:d0:22:87:ea:12:
                    97:ec:02:41:14:12:6c:44:5d:6d:74:58:9e:16:be:
                    72:e5:44:ba:c7:a8:62:28:96:7f:1a:03:c8:77:37:
                    34:9e:72:b6:6c:67:49:a3:51:4d:29:c9:75:bc:24:
                    27:eb:9e:8e:5f:74:ba:7a:fb:5a:aa:5f:58:40:13:
                    f7:6a:8a:83:d7:68:5e:b1:25:63:55:58:0f:e2:72:
                    ba:53:c5:5c:51:f3:6c:14:88:34:14:f8:4f:cc:e5:
                    dd:6b:8e:38:0e:a4:fb:7d:e0:16:e0:4d:76:c3:23:
                    9d:0e:d8:19:66:67:e1:7a:13:98:02:45:18:b5:4f:
                    6a:34:bb:96:92:cf:48:6e:26:9a:c9:7d:01:f5:fc:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:0E:FC:C8:ED:F1:2D:CE:43:98:FB:CC:FE:0E:1D:C2:BC:D2:7A
            X509v3 Authority Key Identifier:
                keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33332d3333203d3e20323732353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8224::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:54:81:55:ef:b1:28:78:92:b5:c5:5e:62:b0:66:80:90:1b:
         8c:ea:06:4d:59:a8:cb:75:5d:b8:08:8d:8d:1d:0f:98:1b:86:
         30:42:2c:69:41:2b:a0:8b:07:2e:bb:bb:80:41:22:66:60:32:
         f0:50:20:7b:23:d8:0c:a2:d7:7d:8b:e0:a6:a1:63:2f:f9:95:
         fc:ed:4c:08:77:b9:f8:a5:84:73:ca:98:7e:1c:a5:7b:cb:b6:
         46:5a:a8:c5:ed:6b:56:e9:82:34:38:25:6e:e8:2b:94:f7:c3:
         e6:d3:ef:93:5a:5c:b4:ab:c9:aa:74:61:f9:84:4d:04:d2:46:
         2e:54:75:da:6a:5f:2e:c2:c0:78:8a:32:7e:1b:1f:30:db:7a:
         93:17:9e:37:5c:95:d3:27:7e:2a:ab:15:d3:16:dc:48:76:bb:
         6c:d9:a6:93:45:64:43:1d:2e:c7:81:87:7a:b3:67:9a:ff:d5:
         50:e4:d7:8f:76:6f:16:11:ab:3d:04:1a:3f:5c:49:e3:84:8b:
         fb:4b:a7:bf:c1:e7:31:5a:ab:d5:1b:4a:ff:68:56:ba:0f:01:
         12:98:aa:0a:92:f8:38:4b:f7:9c:39:87:ac:e4:8d:79:79:4f:
         8b:fb:25:38:7f:e5:a4:ec:0e:20:fc:d1:c3:21:0a:ab:e4:f4:
         16:ba:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 00:22:50 2024 by rpki-client on console-fra.rpki-client.org