Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030323a3a2f34382d3438203d3e20323634323834.roa
File:                     323830343a323538303a343030323a3a2f34382d3438203d3e20323634323834.roa (raw, json)
Hash identifier:          wvi7DNvXBR8qeaLqVZHGZykpOrzjWxlXLlUtPF+++Uo=
Subject key identifier:   89:7B:43:FA:CE:1E:06:85:33:82:D8:A3:43:03:58:1B:9A:29:50:07
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       4D87B4C1DC2A2E0456535E690027193377D7CF26
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030323a3a2f34382d3438203d3e20323634323834.roa
Signing time:             Fri 17 May 2024 14:34:05 +0000
ROA not before:           Fri 17 May 2024 14:29:05 +0000
ROA not after:            Fri 16 May 2025 14:34:05 +0000
asID:                     264284
IP address blocks:        2804:2580:4002::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 11:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:87:b4:c1:dc:2a:2e:04:56:53:5e:69:00:27:19:33:77:d7:cf:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: May 17 14:29:05 2024 GMT
            Not After : May 16 14:34:05 2025 GMT
        Subject: CN=897B43FACE1E06853382D8A34303581B9A295007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:61:75:30:a9:54:66:01:9a:5b:83:59:52:c4:
                    2d:64:c4:24:0f:f4:5a:75:e4:8c:44:20:cf:4a:73:
                    53:5d:d0:66:66:2f:76:db:fe:53:bc:03:cc:76:fa:
                    81:b7:5b:6c:91:aa:e9:ec:22:19:b8:f4:66:32:ff:
                    11:db:b1:1d:c3:39:bd:5a:08:be:b5:e2:2a:be:c4:
                    3f:ca:9f:f3:03:7e:86:43:4d:9e:53:bf:48:ef:dc:
                    c9:75:cb:b7:67:b5:04:4f:11:6d:e8:b4:84:0e:10:
                    ff:f8:fb:9b:47:9c:ea:3b:2b:86:98:47:97:b2:ec:
                    26:c6:41:81:48:cf:5e:d4:e3:7a:83:03:8b:9a:a6:
                    ee:8b:cc:8b:8f:b2:19:af:55:8b:27:29:92:5e:19:
                    f0:a3:dd:fd:11:ba:01:2d:77:47:df:93:7c:30:d4:
                    b7:ad:c5:ce:8c:fb:d7:35:0a:8a:5d:45:62:a5:00:
                    22:1c:f8:b8:d0:88:17:56:d5:99:00:d7:c1:1c:f1:
                    c3:6f:68:64:8f:5e:21:37:bd:7f:f5:77:51:a7:c6:
                    3e:27:50:50:ce:90:bd:f4:0a:94:3c:bc:3c:1d:13:
                    f0:bc:98:d9:b0:b2:8e:6b:b1:b8:b8:4a:58:53:9c:
                    64:87:8a:12:e3:f0:5f:51:c7:70:27:88:bf:f3:30:
                    4d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7B:43:FA:CE:1E:06:85:33:82:D8:A3:43:03:58:1B:9A:29:50:07
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030323a3a2f34382d3438203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2580:4002::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:46:f8:51:5a:8e:b7:6e:d9:12:01:a7:3d:68:d6:fe:97:d3:
         67:8a:b2:e3:2f:c7:68:51:23:6b:43:02:0d:cc:90:38:ea:e7:
         f7:e9:45:26:66:59:ff:00:06:ed:27:98:1f:7d:1c:56:17:b5:
         ab:78:c7:a9:d5:ea:eb:4b:d6:83:2e:88:12:5f:af:f2:a8:4f:
         ab:82:a0:93:b9:b8:94:89:31:9e:7c:c3:a7:cc:d7:e3:9a:a6:
         ce:69:6f:14:11:dc:7a:03:11:87:6d:73:52:4a:6d:02:e6:d4:
         0b:43:cd:35:b1:89:7d:a2:4e:94:ea:b8:b8:42:e5:17:63:b5:
         cc:70:4d:d1:4d:9d:9a:0a:d0:1c:bc:27:ed:36:58:51:fb:4f:
         79:4d:8e:80:a2:13:7b:82:ac:f2:4a:ef:79:76:b5:3b:a0:80:
         e6:68:0b:c2:cd:9e:fb:8c:a2:fd:6a:24:0b:a9:f0:de:52:ad:
         ed:48:55:ac:d9:50:dd:b5:be:62:74:c1:4c:29:83:1d:c7:6f:
         c4:5a:cc:1b:f4:58:e7:95:9c:d6:63:ea:ef:81:bc:fb:d7:33:
         e2:9d:fd:09:d9:3f:df:d8:f4:75:40:67:1b:55:85:cb:70:18:
         ac:d4:11:03:37:a8:43:27:7f:fd:7f:13:dc:08:21:3e:f4:57:
         6f:0f:11:ab
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUTYe0wdwqLgRWU15pACcZM3fXzyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBENENDNjU2RkZDMTNBNEFGMjYyNUY2NUQ2QkIzNTYw
MjAwQ0NGQjAeFw0yNDA1MTcxNDI5MDVaFw0yNTA1MTYxNDM0MDVaMDMxMTAvBgNV
BAMTKDg5N0I0M0ZBQ0UxRTA2ODUzMzgyRDhBMzQzMDM1ODFCOUEyOTUwMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtYXUwqVRmAZpbg1lSxC1kxCQP
9Fp15IxEIM9Kc1Nd0GZmL3bb/lO8A8x2+oG3W2yRqunsIhm49GYy/xHbsR3DOb1a
CL614iq+xD/Kn/MDfoZDTZ5Tv0jv3Ml1y7dntQRPEW3otIQOEP/4+5tHnOo7K4aY
R5ey7CbGQYFIz17U43qDA4uapu6LzIuPshmvVYsnKZJeGfCj3f0RugEtd0ffk3ww
1Letxc6M+9c1CopdRWKlACIc+LjQiBdW1ZkA18Ec8cNvaGSPXiE3vX/1d1Gnxj4n
UFDOkL30CpQ8vDwdE/C8mNmwso5rsbi4SlhTnGSHihLj8F9Rx3AniL/zME2tAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUiXtD+s4eBoUzgtijQwNYG5opUAcwHwYDVR0j
BBgwFoAUgNTMZW/8E6SvJiX2XWuzVgIAzPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHpmUXpLamdwNDE3eXFvRWRVZENmN3FFdzlqWmlvdlhNM1hLUGlhc3ph
TFIvMC84MEQ0Q0M2NTZGRkMxM0E0QUYyNjI1RjY1RDZCQjM1NjAyMDBDQ0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDRDQzY1NkZGQzEzQTRB
RjI2MjVGNjVENkJCMzU2MDIwMENDRkIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h6ZlF6S2pncDQxN3lxb0VkVWRDZjdxRXc5alppb3ZYTTNYS1BpYXN6YUxSLzAv
MzIzODMwMzQzYTMyMzUzODMwM2EzNDMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDMyMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEJYBAAjANBgkqhkiG9w0BAQsF
AAOCAQEAaUb4UVqOt27ZEgGnPWjW/pfTZ4qy4y/HaFEja0MCDcyQOOrn9+lFJmZZ
/wAG7SeYH30cVhe1q3jHqdXq60vWgy6IEl+v8qhPq4Kgk7m4lIkxnnzDp8zX45qm
zmlvFBHcegMRh21zUkptAubUC0PNNbGJfaJOlOq4uELlF2O1zHBN0U2dmgrQHLwn
7TZYUftPeU2OgKITe4Ks8krveXa1O6CA5mgLws2e+4yi/WokC6nw3lKt7UhVrNlQ
3bW+YnTBTCmDHcdvxFrMG/RY55Wc1mPq74G8+9cz4p39Cdk/39j0dUBnG1WFy3AY
rNQRAzeoQyd//X8T3AghPvRXbw8Rqw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org