Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/323830343a373232303a343030303a3a2f33342d3334203d3e20323730383334.roa
File:                     323830343a373232303a343030303a3a2f33342d3334203d3e20323730383334.roa (raw, json)
Hash identifier:          VCcTHwGnobwLI/o4+snI7zlZBp3aysF3CcENSIMuoYQ=
Subject key identifier:   9C:F4:9A:A5:DC:86:51:3F:C0:94:1C:44:C0:58:5E:72:34:85:1D:D7
Certificate issuer:       /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial:       32A9CD7E66D11D30632C0B9EFBCD7D1B1D414E40
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/323830343a373232303a343030303a3a2f33342d3334203d3e20323730383334.roa
Signing time:             Thu 04 Apr 2024 12:47:30 +0000
ROA not before:           Thu 04 Apr 2024 12:42:30 +0000
ROA not after:            Thu 03 Apr 2025 12:47:30 +0000
asID:                     270834
IP address blocks:        2804:7220:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 14:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a9:cd:7e:66:d1:1d:30:63:2c:0b:9e:fb:cd:7d:1b:1d:41:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
        Validity
            Not Before: Apr  4 12:42:30 2024 GMT
            Not After : Apr  3 12:47:30 2025 GMT
        Subject: CN=9CF49AA5DC86513FC0941C44C0585E7234851DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e1:40:76:35:7f:7b:61:d4:dc:3e:b9:ea:09:
                    c1:58:d0:6a:9c:0b:15:94:36:c6:0f:b3:fd:90:eb:
                    38:c6:b9:d5:ae:a0:16:fe:6b:21:88:8d:b3:6d:43:
                    a1:20:40:8e:4c:46:40:aa:84:62:7a:79:ce:8e:58:
                    5a:f2:2e:ea:13:9c:8b:d7:6b:fe:e5:6c:a5:a0:4b:
                    04:2d:d4:8e:ee:d7:71:b6:37:24:5a:ab:09:68:4f:
                    fd:02:5c:fd:7c:1a:5f:52:b2:37:34:6d:f5:6c:d4:
                    19:f3:a1:2b:b2:f5:47:d0:a0:d8:b7:12:41:84:18:
                    0f:5a:a6:9e:6d:a6:71:00:2b:fa:82:58:a2:92:5f:
                    5d:06:03:5c:b1:a3:16:cb:6a:c0:5e:ed:15:c4:43:
                    c5:68:b8:27:de:60:3f:61:55:9f:15:b5:2c:e5:e3:
                    db:dc:7d:fc:39:7d:3f:83:8b:be:d1:1f:54:a5:85:
                    0f:c3:8b:6a:c5:0c:d5:42:fb:ef:ae:e9:e2:13:d4:
                    f2:af:1e:1a:7b:5c:a3:d8:b3:a8:a4:08:1a:8a:36:
                    0e:a3:e1:b5:fd:f7:c7:97:86:40:ae:58:c0:49:4e:
                    b7:37:04:08:c6:1e:42:dc:30:5a:9f:f4:43:39:7a:
                    a9:7d:38:92:24:50:47:4b:99:4a:e9:03:d7:81:49:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F4:9A:A5:DC:86:51:3F:C0:94:1C:44:C0:58:5E:72:34:85:1D:D7
            X509v3 Authority Key Identifier:
                keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/323830343a373232303a343030303a3a2f33342d3334203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7220:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:41:fa:1d:aa:73:56:55:ae:06:76:7d:f3:4e:cd:17:20:
         91:c6:84:4c:83:9d:fa:5f:b7:66:aa:97:b6:7c:07:da:56:00:
         85:3a:23:ff:36:20:29:58:b8:6e:b2:8e:fc:c8:a5:b1:fe:fa:
         08:8e:ab:d5:de:53:4a:80:b2:e1:56:ac:47:91:85:5b:8c:4f:
         74:2d:20:4e:6f:5d:3c:81:9d:5e:b4:97:a4:46:ae:98:19:43:
         8d:74:70:3f:7e:d0:29:db:78:6a:8d:e2:e6:7d:9d:ac:60:67:
         2d:f1:b8:82:93:66:06:be:a1:e1:aa:48:32:3c:c3:b6:ec:68:
         b3:50:08:0e:10:01:bb:db:1a:ee:a9:c8:03:26:b5:ef:90:5a:
         e6:94:e3:18:5f:df:b5:4a:87:e3:2d:cc:80:c6:a7:ec:85:e5:
         65:78:9b:e6:9c:23:49:b6:43:04:0b:97:a1:8b:ef:44:3c:67:
         64:f8:a5:3a:b3:e8:aa:4b:93:ac:cc:c3:64:4c:d5:87:30:45:
         bb:ef:df:8e:69:ad:50:1a:af:92:de:b1:bb:98:c9:2a:52:6f:
         54:40:bc:ff:7b:a4:9c:26:29:a5:66:af:3b:9a:7c:d4:f0:bd:
         e5:53:fb:bf:08:56:8f:e2:03:d3:96:c6:db:2d:cd:a8:40:16:
         f8:b3:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 16:57:24 2024 by rpki-client on console-fra.rpki-client.org