Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f34382d3438203d3e20323634323834.roa
File:                     323830343a323538303a343030303a3a2f34382d3438203d3e20323634323834.roa (raw, json)
Hash identifier:          kKs+iCPhha26dfTsZymveZ5yR4f+Av8bH0OTc58fBaQ=
Subject key identifier:   C9:03:AD:2F:97:68:43:09:C4:03:DC:E7:D9:19:23:C0:F0:9E:72:8C
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       21201F58496E5E2E240609A121F9D2C39D4BBF63
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f34382d3438203d3e20323634323834.roa
Signing time:             Fri 17 May 2024 14:34:00 +0000
ROA not before:           Fri 17 May 2024 14:29:00 +0000
ROA not after:            Fri 16 May 2025 14:34:00 +0000
asID:                     264284
IP address blocks:        2804:2580:4000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 11:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:20:1f:58:49:6e:5e:2e:24:06:09:a1:21:f9:d2:c3:9d:4b:bf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: May 17 14:29:00 2024 GMT
            Not After : May 16 14:34:00 2025 GMT
        Subject: CN=C903AD2F97684309C403DCE7D91923C0F09E728C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:f0:c2:a5:95:09:be:79:0a:ec:3f:a4:01:
                    85:92:74:35:bf:b4:46:a7:06:7e:aa:4a:a4:74:0c:
                    27:48:03:ba:fa:86:03:ad:28:ed:71:d5:fb:86:76:
                    94:28:9c:66:a2:b5:9f:3b:19:7b:4b:b9:24:e3:84:
                    71:a8:e1:15:8e:36:e8:dd:8c:0c:30:6d:35:0b:60:
                    91:63:62:56:e2:14:f7:4f:bc:c9:d2:3b:14:6b:af:
                    02:e4:7f:1e:d6:b9:37:c8:44:f8:c0:3a:0a:42:a2:
                    a3:d2:21:60:11:f1:8f:15:d0:8f:b3:f9:b5:5a:75:
                    3c:14:34:93:af:7a:80:17:2c:b0:f4:20:7d:4d:6c:
                    5a:bc:01:5e:c7:47:c2:6b:4a:5d:7a:0f:39:b1:ad:
                    5f:05:d1:d4:de:2b:27:c1:7b:b6:ac:46:0a:df:c5:
                    a5:43:d4:6e:c0:d7:6c:b8:bc:0e:df:61:fe:ba:25:
                    a0:0d:0a:6b:d8:f6:45:49:6d:5e:c3:94:74:78:1a:
                    3a:67:57:eb:d7:01:3c:fa:6d:65:33:f7:24:ad:0e:
                    f3:10:ad:11:77:03:90:eb:ce:51:e3:f8:4f:c5:01:
                    a2:e5:27:f3:e6:df:d6:d6:53:bc:18:a0:5b:a9:8a:
                    3d:48:20:83:bb:77:f6:9d:50:d8:cf:fb:6f:21:00:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:AD:2F:97:68:43:09:C4:03:DC:E7:D9:19:23:C0:F0:9E:72:8C
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f34382d3438203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2580:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:b1:24:8d:a4:f2:b2:a6:ed:20:05:98:c0:45:b3:7e:2f:
         00:8b:92:25:57:cb:a4:a6:69:e6:cd:ca:5b:13:67:54:d1:df:
         2f:99:02:a3:3f:33:b3:2e:84:49:2d:8b:78:41:7b:8b:70:5e:
         39:77:0a:9c:f0:5b:85:60:88:2c:69:ef:72:d6:ff:46:75:79:
         3d:a8:c9:68:82:48:15:28:dc:20:e4:09:26:90:8d:b3:ae:1d:
         a0:45:dc:e4:32:39:eb:91:6d:17:6b:07:d1:e8:0a:2b:87:a5:
         e6:ca:cb:ab:3e:82:44:0a:69:e6:0a:0b:39:e9:b6:b4:61:13:
         da:6b:16:25:af:22:99:e6:1b:59:b4:88:2d:ab:c1:76:67:a5:
         4d:7c:f3:e6:1d:3e:d2:6a:43:e0:71:73:1e:a4:32:d5:eb:ea:
         90:6f:fc:f4:91:ba:f0:5c:0c:ba:42:1c:25:89:3c:d8:17:8e:
         a4:d3:95:71:68:de:94:73:d0:15:46:37:83:2c:77:53:b0:de:
         7a:fc:1d:0b:76:20:5e:87:bc:1c:59:74:69:37:bc:23:0c:78:
         1a:e9:39:0d:93:e7:54:99:07:fd:2d:a1:54:b0:76:ab:4b:0d:
         85:38:c6:a5:e2:1d:a6:1f:01:09:21:b0:2f:df:95:2a:28:17:
         2f:cb:05:2d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUISAfWEluXi4kBgmhIfnSw51Lv2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBENENDNjU2RkZDMTNBNEFGMjYyNUY2NUQ2QkIzNTYw
MjAwQ0NGQjAeFw0yNDA1MTcxNDI5MDBaFw0yNTA1MTYxNDM0MDBaMDMxMTAvBgNV
BAMTKEM5MDNBRDJGOTc2ODQzMDlDNDAzRENFN0Q5MTkyM0MwRjA5RTcyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkbvDCpZUJvnkK7D+kAYWSdDW/
tEanBn6qSqR0DCdIA7r6hgOtKO1x1fuGdpQonGaitZ87GXtLuSTjhHGo4RWONujd
jAwwbTULYJFjYlbiFPdPvMnSOxRrrwLkfx7WuTfIRPjAOgpCoqPSIWAR8Y8V0I+z
+bVadTwUNJOveoAXLLD0IH1NbFq8AV7HR8JrSl16DzmxrV8F0dTeKyfBe7asRgrf
xaVD1G7A12y4vA7fYf66JaANCmvY9kVJbV7DlHR4GjpnV+vXATz6bWUz9yStDvMQ
rRF3A5DrzlHj+E/FAaLlJ/Pm39bWU7wYoFupij1IIIO7d/adUNjP+28hAHbNAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUyQOtL5doQwnEA9zn2RkjwPCecowwHwYDVR0j
BBgwFoAUgNTMZW/8E6SvJiX2XWuzVgIAzPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHpmUXpLamdwNDE3eXFvRWRVZENmN3FFdzlqWmlvdlhNM1hLUGlhc3ph
TFIvMC84MEQ0Q0M2NTZGRkMxM0E0QUYyNjI1RjY1RDZCQjM1NjAyMDBDQ0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDRDQzY1NkZGQzEzQTRB
RjI2MjVGNjVENkJCMzU2MDIwMENDRkIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h6ZlF6S2pncDQxN3lxb0VkVWRDZjdxRXc5alppb3ZYTTNYS1BpYXN6YUxSLzAv
MzIzODMwMzQzYTMyMzUzODMwM2EzNDMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDMyMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEJYBAADANBgkqhkiG9w0BAQsF
AAOCAQEAB/exJI2k8rKm7SAFmMBFs34vAIuSJVfLpKZp5s3KWxNnVNHfL5kCoz8z
sy6ESS2LeEF7i3BeOXcKnPBbhWCILGnvctb/RnV5PajJaIJIFSjcIOQJJpCNs64d
oEXc5DI565FtF2sH0egKK4el5srLqz6CRApp5goLOem2tGET2msWJa8imeYbWbSI
LavBdmelTXzz5h0+0mpD4HFzHqQy1evqkG/89JG68FwMukIcJYk82BeOpNOVcWje
lHPQFUY3gyx3U7DeevwdC3YgXoe8HFl0aTe8Iwx4Guk5DZPnVJkH/S2hVLB2q0sN
hTjGpeIdph8BCSGwL9+VKigXL8sFLQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org