Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a383030303a3a2f33332d3333203d3e20323637393333.roa
File:                     323830343a353536383a383030303a3a2f33332d3333203d3e20323637393333.roa (raw, json)
Hash identifier:          WybAL5s40RDacwZuFKd3HW3g1Kx9Ni59Yv3ao44ZqP4=
Subject key identifier:   2D:C7:5E:83:CC:49:39:40:1A:A0:6A:09:3A:3B:D4:AD:98:A7:C2:F8
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       355BB7EB19D50E6827C4D6AB638329FF87B9190A
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a383030303a3a2f33332d3333203d3e20323637393333.roa
Signing time:             Fri 01 Nov 2024 19:01:57 +0000
ROA not before:           Fri 01 Nov 2024 18:56:57 +0000
ROA not after:            Fri 31 Oct 2025 19:01:57 +0000
asID:                     267933
IP address blocks:        2804:5568:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 20:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5b:b7:eb:19:d5:0e:68:27:c4:d6:ab:63:83:29:ff:87:b9:19:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Nov  1 18:56:57 2024 GMT
            Not After : Oct 31 19:01:57 2025 GMT
        Subject: CN=2DC75E83CC4939401AA06A093A3BD4AD98A7C2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:98:1f:dd:95:fa:30:9e:da:a9:a0:7d:8c:
                    d2:d6:b6:02:93:59:e2:93:f7:d3:c3:27:a5:ff:15:
                    47:9e:58:c4:77:3b:55:4f:5c:6a:90:71:3b:bc:e5:
                    78:c8:23:86:2a:39:bf:0e:34:66:ef:a5:f1:38:60:
                    56:f9:4d:91:05:3d:73:b3:b6:31:16:cf:89:5c:6d:
                    e3:80:7a:07:e2:3b:f4:05:f3:48:66:4a:78:45:7d:
                    38:58:1c:c0:88:a6:d0:8a:e6:fe:85:c3:4f:cd:8e:
                    2d:51:3f:2c:da:c8:a4:01:69:58:ac:e5:03:8b:11:
                    9c:52:3b:af:72:33:84:33:d2:93:91:77:a5:0a:35:
                    1a:5e:42:8f:36:8c:e5:2b:d7:86:b3:93:b7:e7:ac:
                    11:98:8c:4b:48:c9:7a:13:c6:5f:5f:cd:5a:13:cb:
                    76:50:de:e7:19:f4:a0:98:98:1b:f4:f3:be:12:15:
                    10:93:11:69:3b:ed:ae:ab:a4:87:aa:2e:4e:4c:02:
                    b7:38:8b:af:c3:81:a1:4b:fb:ab:9d:44:b3:9b:a3:
                    8c:f1:c0:13:d2:e9:79:d5:6e:49:ca:85:1c:3e:ac:
                    dc:f9:87:11:21:25:f9:da:22:d8:38:fe:40:b9:0f:
                    38:a1:a7:44:3a:22:eb:84:d9:b0:9d:88:29:6f:d6:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:5E:83:CC:49:39:40:1A:A0:6A:09:3A:3B:D4:AD:98:A7:C2:F8
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a353536383a383030303a3a2f33332d3333203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5568:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:81:52:48:67:0a:ab:f4:59:86:3f:0f:49:6a:da:a7:ed:30:
         80:6f:f3:ad:78:d6:ee:d0:6b:97:8d:f4:c4:86:39:ec:7a:d4:
         10:ad:2f:6c:e0:ff:59:2f:f2:7e:50:c8:b9:39:04:33:68:3a:
         f6:04:3d:ad:99:da:69:0c:93:d2:82:db:b5:a2:4e:ae:e9:f3:
         28:1b:01:a2:61:dc:5f:c7:8e:3c:25:d7:60:f6:10:0f:5b:c1:
         49:a7:4e:88:89:e2:15:04:cd:6b:2b:63:9f:6c:68:f6:34:5b:
         66:54:d1:54:de:fc:13:ed:57:8e:b2:01:31:8b:15:9a:d2:97:
         a8:ab:55:b9:f3:69:50:3c:88:34:03:96:1a:67:94:18:df:7a:
         00:3f:76:6b:66:9c:8d:0d:df:91:b4:d4:e1:e5:fe:65:b0:ce:
         16:14:90:17:cc:e1:b0:d5:c5:47:17:a9:5d:c3:41:a7:74:45:
         e6:1c:07:f5:54:fe:9a:48:78:e1:b5:ab:bf:4b:c1:3d:34:fb:
         a8:32:1f:47:60:f9:3d:ab:6b:c4:5a:09:cc:86:74:0c:1d:e6:
         32:b6:67:36:94:7f:38:71:39:54:89:57:36:00:3b:14:87:e4:
         88:55:4a:49:ea:19:fb:4f:90:28:8e:6c:09:c6:4b:52:8e:9b:
         4c:8b:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 23:19:59 2024 by rpki-client on console-ams.rpki-client.org