Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa
File:                     323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa (raw, json)
Hash identifier:          iH6eUrp5b6RHXi0QZVVE/x6DMQwHvS3dobqEKZ46Lxg=
Subject key identifier:   FE:0E:6B:53:13:D1:D4:CC:30:59:71:37:31:9F:29:3A:66:4A:AB:8B
Certificate issuer:       /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial:       471B3E58F8DB50A8DDDCA92663CC1E91D829B9C3
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa
Signing time:             Wed 07 Aug 2024 01:34:57 +0000
ROA not before:           Wed 07 Aug 2024 01:29:57 +0000
ROA not after:            Wed 06 Aug 2025 01:34:57 +0000
asID:                     272501
IP address blocks:        2804:8224:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 03:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1b:3e:58:f8:db:50:a8:dd:dc:a9:26:63:cc:1e:91:d8:29:b9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
        Validity
            Not Before: Aug  7 01:29:57 2024 GMT
            Not After : Aug  6 01:34:57 2025 GMT
        Subject: CN=FE0E6B5313D1D4CC30597137319F293A664AAB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:54:1e:de:96:8c:9b:9d:73:ff:42:1a:95:
                    13:3f:d7:4a:f8:07:98:33:c2:a1:94:74:82:5a:c2:
                    7b:fd:57:b8:7c:28:b9:35:4b:7c:e0:6b:d7:ce:16:
                    03:e9:44:fd:cc:d8:76:04:de:9d:cb:e1:50:e8:66:
                    35:fa:3b:cb:d8:e7:2c:e9:5f:04:0d:63:13:03:ca:
                    5c:01:b6:ca:d0:0b:ee:e6:df:9a:fd:dd:32:50:35:
                    40:09:3e:de:15:b0:34:77:3c:de:4e:f2:f3:7d:dd:
                    51:76:d2:5f:ba:40:3c:a2:d1:fa:65:ae:6f:24:83:
                    0c:b3:12:8c:3f:c2:0b:fa:7c:91:da:9f:1d:14:77:
                    5e:cc:37:08:c3:61:17:5f:13:e5:01:49:b1:e6:90:
                    56:86:28:c6:e2:a0:bd:f7:8a:51:26:1d:77:58:34:
                    31:45:57:1a:5a:23:31:2f:31:67:57:3a:41:b0:d1:
                    9a:66:82:b6:0f:fa:f6:70:14:ee:d6:c4:62:5a:53:
                    27:24:b2:6d:3a:39:8a:ee:8c:32:37:cc:16:c6:ba:
                    2b:bd:f4:a3:2d:ab:ed:bc:6c:ad:6c:a5:03:fb:10:
                    b4:6b:9f:e9:b0:a5:91:9a:17:22:f0:55:e2:52:05:
                    b4:46:33:70:af:74:95:e0:56:86:fc:be:57:89:ac:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0E:6B:53:13:D1:D4:CC:30:59:71:37:31:9F:29:3A:66:4A:AB:8B
            X509v3 Authority Key Identifier:
                keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8224:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d6:f5:f1:b4:e9:9c:10:e5:63:5e:41:94:7f:b8:14:81:7f:1f:
         33:8f:7e:c0:db:bc:1b:97:b8:89:b5:86:bb:ee:6e:34:d9:98:
         04:34:78:19:4a:93:8e:c7:96:fa:e3:08:e5:39:85:8c:21:8b:
         90:09:75:98:c4:6b:55:fb:11:b8:8d:10:6d:f5:3d:c7:02:33:
         80:e8:d6:f5:ef:36:8d:c1:31:4b:c0:fb:45:2f:52:06:43:ca:
         60:80:2d:f2:eb:5b:c4:15:37:b6:10:79:41:c8:db:52:02:33:
         0e:69:50:79:aa:41:b9:cf:1e:e3:24:1f:b8:b7:8f:f0:a7:79:
         ae:9f:8c:22:4f:28:6a:4a:79:b6:f6:66:8f:19:8b:dd:03:6a:
         15:0c:9d:98:7b:30:62:c9:d9:52:3f:cb:48:04:bb:78:37:9a:
         f3:86:84:f6:56:10:c7:3a:84:c5:4c:dd:dc:67:d3:15:96:c1:
         d5:17:6b:75:36:49:36:5d:08:1a:c3:6c:83:a9:1f:f3:22:05:
         ca:8f:e0:ef:17:3b:89:15:2e:b7:95:35:72:9d:4e:36:9d:b9:
         c7:30:01:f0:0f:03:ba:6d:0f:3c:86:ec:57:97:2b:56:76:e5:
         63:7d:11:19:c7:bc:1b:97:6e:9f:6b:50:48:1f:6e:f9:82:44:
         93:07:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 04:15:11 2024 by rpki-client on console-ams.rpki-client.org