Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          L/EBt+kn2wF+/qhVmMW/nw6056jSniwKVa7aePpB1Ns=
Subject key identifier:   25:9E:6C:62:26:FB:F8:99:C0:91:E2:C7:05:3B:79:21:AB:2C:BC:6B
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       0F74446123E98D928D27B8639E8B55EC8F9420B9
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:24 +0000
ROA not before:           Wed 14 Aug 2024 12:03:24 +0000
ROA not after:            Wed 13 Aug 2025 12:08:24 +0000
asID:                     262773
IP address blocks:        2804:9f8::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:74:44:61:23:e9:8d:92:8d:27:b8:63:9e:8b:55:ec:8f:94:20:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:24 2024 GMT
            Not After : Aug 13 12:08:24 2025 GMT
        Subject: CN=259E6C6226FBF899C091E2C7053B7921AB2CBC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:f9:3f:ac:63:79:48:db:5b:a6:6a:ae:da:
                    34:0b:1b:73:67:ce:f9:54:1e:9b:82:02:47:d7:f0:
                    e7:c0:de:d4:5c:c0:11:c1:43:8a:18:89:90:a5:ad:
                    a9:1c:2d:88:e6:60:24:cf:b9:62:a2:e7:fb:76:ad:
                    9d:9c:6b:5a:dd:b4:7a:a1:28:a9:a1:63:bb:7c:b3:
                    0a:64:36:8a:5b:bc:75:39:89:1a:2e:c1:83:c7:1f:
                    a0:da:92:01:ef:1e:f0:63:1f:2e:ff:4a:41:1a:4a:
                    fd:90:29:75:30:e8:4e:b4:fe:7f:be:84:1e:56:7a:
                    81:b4:ff:20:f5:0c:33:4d:95:46:d4:a2:76:16:70:
                    0c:d3:39:c1:1e:74:90:8e:ba:0c:73:ed:54:62:b5:
                    d4:58:c9:f8:df:1d:03:90:72:80:72:05:ee:63:fc:
                    54:c5:52:46:e2:f2:c0:c7:e1:a1:74:8b:08:10:8b:
                    6e:21:10:44:c9:d3:ea:e1:7d:ba:08:15:60:36:e3:
                    2f:49:d2:bb:5c:fd:87:06:4c:94:75:1f:ce:91:04:
                    30:2a:f6:86:aa:eb:1f:3b:11:cd:92:0d:0d:64:1b:
                    72:b9:a8:18:8c:ac:44:da:5c:ac:b6:ff:93:6c:74:
                    b7:0d:be:10:4a:37:d1:79:f5:14:14:9b:de:05:8a:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9E:6C:62:26:FB:F8:99:C0:91:E2:C7:05:3B:79:21:AB:2C:BC:6B
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:0d:98:f8:82:10:38:db:78:88:38:c8:06:d6:d4:8d:a6:bf:
         d6:64:87:0d:96:42:9a:b4:b8:f4:5c:d0:36:23:0e:0c:a3:ec:
         51:87:be:c1:b9:6e:f2:d3:40:8c:54:b9:46:f2:f0:29:27:c7:
         49:c3:18:94:03:3e:2d:4f:93:c8:02:fe:c5:31:66:4d:0b:14:
         4a:44:a7:fe:ad:7d:9f:c5:7e:ec:51:8c:18:87:97:c4:b5:33:
         eb:e6:e1:fe:a3:08:ed:bb:cb:54:f1:82:59:b9:10:28:ab:95:
         8d:a0:1c:f3:c1:4e:7a:e1:96:6b:11:8b:f7:47:8c:b2:c4:15:
         1b:1c:55:fc:90:a7:0f:08:52:6a:eb:62:02:b8:69:54:e2:e5:
         ba:1b:b8:0b:d6:74:5f:d2:fe:e2:05:2c:58:99:e4:01:05:8c:
         79:2a:f5:95:f4:5b:a9:4f:f2:31:79:e3:db:e7:e2:2f:cd:7a:
         74:31:dc:92:27:6d:ac:cd:61:ec:a4:ea:73:a0:da:cc:70:e0:
         ff:0b:c1:02:bc:72:3f:9e:86:97:2c:23:95:ff:ec:40:87:10:
         03:46:0e:a6:9c:01:b4:94:b0:7a:5a:c7:3b:c1:5f:41:b3:54:
         f9:31:e0:c4:df:8c:21:c1:c9:03:d1:3c:4e:e1:53:e1:65:50:
         b1:4c:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----