Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33332d3333203d3e20323633393931.roa
File:                     323830343a323866633a3a2f33332d3333203d3e20323633393931.roa (raw, json)
Hash identifier:          GEQM4HcXXTDbsHNj7R+A9QQMYLhFIbLY1ZP17/pznFk=
Subject key identifier:   9B:72:A4:46:D4:35:23:CE:5E:56:EF:A0:85:98:8C:A9:FF:69:41:4F
Certificate issuer:       /CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Certificate serial:       237B4B3C9710A05D09AB5D379C34B4A7EBDD63C1
Authority key identifier: 97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33332d3333203d3e20323633393931.roa
Signing time:             Thu 25 Apr 2024 19:52:13 +0000
ROA not before:           Thu 25 Apr 2024 19:47:13 +0000
ROA not after:            Thu 24 Apr 2025 19:52:13 +0000
asID:                     263991
IP address blocks:        2804:28fc::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 17:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7b:4b:3c:97:10:a0:5d:09:ab:5d:37:9c:34:b4:a7:eb:dd:63:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
        Validity
            Not Before: Apr 25 19:47:13 2024 GMT
            Not After : Apr 24 19:52:13 2025 GMT
        Subject: CN=9B72A446D43523CE5E56EFA085988CA9FF69414F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d0:ef:d0:86:fb:cb:0f:d1:56:fa:3a:5c:7a:
                    d5:2f:3a:d8:df:15:dc:27:c0:3b:61:55:22:43:2d:
                    b1:23:49:ba:ab:b1:35:d4:02:fa:d1:7d:10:c7:c1:
                    e2:58:4f:38:7f:4c:e0:62:34:de:36:b3:4f:a0:40:
                    d5:63:df:8d:ea:75:c1:3b:ef:b3:a3:11:16:e4:30:
                    41:cb:4b:c5:f6:06:e1:96:3c:ce:ef:72:5b:47:b6:
                    ec:89:23:55:3c:b0:70:92:46:cc:ca:d1:5b:1c:27:
                    61:b7:fe:5a:e2:a4:00:79:f6:03:ce:f3:28:48:17:
                    d9:ba:f4:d3:c4:9d:6e:4e:1a:a0:ed:7b:bb:72:25:
                    56:97:69:cb:0a:63:db:c2:99:02:6b:69:e9:bb:4b:
                    04:ee:86:5d:f1:ae:e7:35:2c:c9:cd:70:97:65:c4:
                    07:46:93:b4:2f:0a:77:8d:c4:b7:9c:55:39:e9:ce:
                    ba:72:37:30:f8:6a:76:c2:b0:30:a2:69:97:c2:3f:
                    03:4e:b8:8b:2f:8f:b5:dd:e1:e5:14:d3:0e:8a:3e:
                    02:c9:4e:41:65:80:c6:ea:e3:25:cb:e1:62:fa:5c:
                    f4:26:fd:fb:58:87:6c:45:28:13:26:58:84:f4:b1:
                    be:ac:b3:0a:09:7a:a5:bf:42:cd:8e:59:dc:af:0b:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:A4:46:D4:35:23:CE:5E:56:EF:A0:85:98:8C:A9:FF:69:41:4F
            X509v3 Authority Key Identifier:
                keyid:97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33332d3333203d3e20323633393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28fc::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:c8:fc:3b:dd:70:92:d2:b7:d2:a2:0e:40:6f:d9:17:37:42:
         bd:2e:f9:4d:5e:3e:64:d8:16:39:52:3e:90:33:00:7b:4e:84:
         37:44:53:a5:c4:d2:8f:1d:69:62:51:85:ef:b0:01:ac:77:b0:
         64:d5:23:fe:48:e3:3a:0f:2e:40:c1:31:b9:5c:99:75:99:b7:
         c4:f1:de:68:8f:15:7f:66:ad:69:ae:0f:9d:52:b3:3b:c8:8a:
         b4:4e:d2:7f:1a:8c:09:c1:bd:94:db:a4:d2:63:00:b9:58:77:
         cb:42:da:60:12:56:80:25:03:b5:e2:72:91:77:41:aa:70:95:
         c4:89:92:1d:da:81:ef:77:a0:82:dd:50:db:76:5d:a2:3d:42:
         fe:2d:9f:6d:37:fb:6f:a1:3b:a4:29:c6:15:89:8b:d7:23:55:
         4e:b7:6c:8a:90:68:21:d9:ad:c9:f7:b0:92:82:2f:46:86:14:
         56:54:dc:58:81:fa:41:1c:38:73:21:eb:49:f9:a2:44:90:42:
         f3:58:aa:00:5c:9e:ee:f6:ce:b3:49:0a:10:4a:e4:14:4d:69:
         64:36:0d:2b:c3:4a:93:42:3a:d1:1c:a7:0d:fc:bb:60:28:df:
         2e:25:4b:a3:22:c4:12:fb:c4:3e:d8:9b:66:f2:ee:c2:c8:63:
         7f:8a:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org