Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a383030303a3a2f33342d3334203d3e20323633303236.roa
File:                     323830343a6132383a383030303a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier:          1kFJVVkkneWy9hSgBAA/x1wQA1eXdasq9sepAjrzLJU=
Subject key identifier:   97:C0:EA:1E:1B:32:91:9F:6B:BF:E5:11:8B:50:82:B7:32:D4:51:0B
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       20413E1B092A404BE42E86F5F0ECD8877B811CEC
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a383030303a3a2f33342d3334203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:35 +0000
ROA not before:           Thu 04 Apr 2024 15:05:35 +0000
ROA not after:            Thu 03 Apr 2025 15:10:35 +0000
asID:                     263026
IP address blocks:        2804:a28:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:41:3e:1b:09:2a:40:4b:e4:2e:86:f5:f0:ec:d8:87:7b:81:1c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:35 2024 GMT
            Not After : Apr  3 15:10:35 2025 GMT
        Subject: CN=97C0EA1E1B32919F6BBFE5118B5082B732D4510B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a5:6f:bc:bc:2d:23:11:5a:e2:c5:28:c5:18:
                    81:08:fb:33:d7:1b:cc:d8:e9:44:83:2d:86:2c:10:
                    c8:54:55:91:37:55:5d:5a:54:fe:62:a9:fe:53:cb:
                    5e:68:b0:0a:ac:08:fb:e4:35:d8:4f:f9:1f:89:4a:
                    00:31:15:aa:91:5a:46:ec:63:f1:f0:44:35:d1:60:
                    d6:a7:a1:24:fc:43:66:51:83:2e:9d:f8:ec:33:3d:
                    34:7c:06:02:39:3e:5e:41:cb:8e:ad:7c:55:12:2a:
                    60:8f:5a:c1:41:9f:27:12:73:78:45:ed:84:d3:ac:
                    a2:a2:be:82:be:c9:e2:57:41:9f:73:1e:29:c8:f0:
                    50:c9:29:d9:a3:78:44:d8:da:2a:68:ce:12:c1:40:
                    a2:b8:f6:47:2a:fb:23:a9:52:97:59:99:7f:78:c2:
                    e3:73:1d:21:5a:9b:83:42:78:87:12:cc:d2:5c:81:
                    f0:95:1d:68:e1:db:91:06:9e:10:89:35:ef:7d:72:
                    1b:73:ec:86:2b:87:13:f2:f8:78:69:f5:83:ed:a1:
                    0e:eb:55:83:b0:09:de:68:bc:44:b8:fc:b1:91:59:
                    97:72:a4:e8:22:d5:88:5e:af:9b:1e:2a:b0:9c:75:
                    9b:9e:6b:fe:08:ed:91:51:7c:a6:ee:04:e6:9f:d6:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:EA:1E:1B:32:91:9F:6B:BF:E5:11:8B:50:82:B7:32:D4:51:0B
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a383030303a3a2f33342d3334203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:1f:a6:4b:5c:8a:e7:e3:36:46:09:23:bf:a8:a4:31:37:6e:
         20:3c:e2:f3:42:3b:75:57:02:f7:d8:ad:45:c3:e5:3c:1e:a0:
         8a:ce:80:9c:f3:fc:06:41:d8:2a:80:97:1e:8b:e8:70:45:f9:
         d1:ea:25:f0:27:f1:64:f3:4e:bc:36:b0:67:5c:59:b9:b0:27:
         69:52:fa:3c:f3:b0:46:be:11:27:f4:cb:d1:b5:0e:05:f9:cd:
         3b:d0:b5:ab:d5:29:ea:e6:a2:e6:38:a9:8f:a6:56:e8:ab:32:
         6a:f0:a6:7f:bf:73:34:7c:8d:75:6e:9d:cb:fd:4e:50:9f:5f:
         41:b4:0a:63:b8:82:07:f7:e3:1b:f4:e2:3b:88:80:eb:e9:57:
         76:ab:4b:74:d9:67:33:8d:e9:86:21:89:a7:32:10:ed:b3:73:
         85:ab:ed:b8:2c:91:c0:4a:af:af:2b:6c:68:0f:7e:5f:a8:e9:
         4e:b4:17:3e:48:c6:55:c8:ac:9d:90:f8:a0:c2:17:30:f4:ab:
         e2:b2:17:18:21:2d:0f:ac:f4:14:75:50:46:b7:38:f7:cf:27:
         a5:bc:b2:9b:b6:9e:ba:e5:3e:3c:92:5f:64:ef:75:9b:75:dc:
         e6:c5:e9:8e:a3:a0:92:58:df:37:b7:1b:7a:12:b1:3c:97:28:
         7e:29:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org