Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a343030303a3a2f33342d3334203d3e20323633303236.roa
File:                     323830343a6132383a343030303a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier:          mKaziTHAeX0EYsM270n+DyJ1g1wu0x0m483LG03HbXw=
Subject key identifier:   AE:50:04:E1:33:64:52:89:10:1F:63:D7:63:EB:1A:96:D4:BD:09:5F
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       6B604090C5348D0F9BDA5906EE7CBCEAFE7A1DFA
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a343030303a3a2f33342d3334203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:34 +0000
ROA not before:           Thu 04 Apr 2024 15:05:34 +0000
ROA not after:            Thu 03 Apr 2025 15:10:34 +0000
asID:                     263026
IP address blocks:        2804:a28:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:60:40:90:c5:34:8d:0f:9b:da:59:06:ee:7c:bc:ea:fe:7a:1d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:34 2024 GMT
            Not After : Apr  3 15:10:34 2025 GMT
        Subject: CN=AE5004E133645289101F63D763EB1A96D4BD095F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:73:46:b2:09:67:53:04:7b:14:ba:be:f1:
                    31:df:a7:a6:b5:d8:eb:9b:28:50:63:8d:de:c0:ff:
                    53:69:a4:1e:ce:0f:3a:a1:c9:51:e1:f3:f0:d6:9a:
                    04:45:3f:3b:77:b5:51:c8:97:0e:45:1b:16:9c:5b:
                    57:e9:14:27:2e:92:7c:81:2a:e1:5a:6a:e1:68:bc:
                    e6:1e:13:8a:03:de:e1:7f:7f:ce:60:7d:1b:49:d0:
                    08:a3:53:22:49:65:51:eb:76:a2:57:02:2e:1d:87:
                    c5:9e:2d:07:d7:c6:c3:7f:98:f1:23:91:ce:ab:df:
                    64:8f:9d:7f:b4:50:80:5e:da:5b:a7:a4:85:ee:c0:
                    2c:06:46:8c:4c:9d:40:f1:cf:6c:3e:ac:83:3d:52:
                    f5:cf:e7:1a:0a:ae:b1:c9:81:73:5d:5c:e8:cf:8d:
                    37:fc:89:2b:08:b4:07:21:df:a2:de:78:55:36:46:
                    85:aa:e1:9b:5d:5b:95:af:c5:5b:40:92:f5:b5:67:
                    60:be:3f:a2:c0:00:86:ff:d7:85:ba:88:24:cf:a6:
                    83:5e:4f:27:e8:1c:6f:0e:76:21:a0:e6:e4:d1:e4:
                    bf:7e:b7:0c:26:f8:19:1d:ea:20:47:c3:45:7c:85:
                    42:91:09:1d:bb:ff:52:43:43:b6:02:0a:9e:67:44:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:50:04:E1:33:64:52:89:10:1F:63:D7:63:EB:1A:96:D4:BD:09:5F
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a343030303a3a2f33342d3334203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         73:88:d5:e2:b0:d6:a9:29:94:31:e3:af:aa:b6:40:74:5d:e1:
         c6:61:44:d3:7b:aa:f4:c6:e9:a6:56:5e:bc:58:23:e0:23:92:
         bc:cd:c1:7c:9a:7c:21:9b:4c:c4:0a:32:bf:e9:65:60:43:06:
         bf:1a:68:5b:2c:57:4a:d7:41:4c:43:ab:74:79:6d:ec:19:4a:
         40:ed:39:88:06:d3:30:a7:55:c9:3f:73:81:60:19:6e:01:83:
         7b:9f:e4:4f:45:73:12:57:9f:68:0b:7e:eb:54:77:df:72:29:
         8c:83:84:02:50:78:8f:79:f7:8f:ff:59:d3:b3:5a:b8:6f:ef:
         9d:86:71:9d:d1:7a:dd:f1:01:1b:d4:15:84:72:91:bc:10:b3:
         54:6c:9e:ba:bb:21:44:ff:61:11:6d:cc:eb:6f:72:cd:23:90:
         31:ab:65:a0:38:df:1e:f4:c0:8c:aa:5c:8c:c9:e7:e3:0d:a1:
         4a:76:c6:c1:f5:da:2e:8a:7c:5a:ea:1d:47:93:d0:e4:a2:dc:
         bb:9f:92:8a:35:5a:e7:b7:9f:fb:e8:b9:8e:58:1b:a0:ee:7d:
         e7:f2:d6:df:ea:2a:1e:77:20:eb:e5:38:f0:45:34:fb:08:28:
         7c:3c:44:c7:ac:92:f3:e9:7b:90:aa:98:8b:23:a6:b4:c7:bd:
         06:0d:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org