Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33322d3332203d3e20323633303236.roa
File:                     323830343a6132383a3a2f33322d3332203d3e20323633303236.roa (raw, json)
Hash identifier:          cW27myVuIn3poKvxy073Qb/jyoSyTp1IXXfZkYCqhDQ=
Subject key identifier:   02:6A:FA:D2:2D:75:2A:54:4B:2B:A4:FE:C1:B6:E4:45:28:FF:52:D1
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       012ACB0E7E63F672C193741EAA76A657EAA722BD
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33322d3332203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:33 +0000
ROA not before:           Thu 04 Apr 2024 15:05:33 +0000
ROA not after:            Thu 03 Apr 2025 15:10:33 +0000
asID:                     263026
IP address blocks:        2804:a28::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2a:cb:0e:7e:63:f6:72:c1:93:74:1e:aa:76:a6:57:ea:a7:22:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:33 2024 GMT
            Not After : Apr  3 15:10:33 2025 GMT
        Subject: CN=026AFAD22D752A544B2BA4FEC1B6E44528FF52D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:48:2e:b6:0a:42:97:a0:f0:a1:92:a2:ae:
                    83:8c:6a:22:5f:2d:66:d5:f2:55:3e:2d:38:ae:f3:
                    4f:33:72:5e:9b:25:36:ae:b6:ba:bc:fa:07:96:a0:
                    31:ad:cf:1c:e1:dc:12:53:e1:e1:18:e3:41:ef:fe:
                    14:d1:5a:dc:6d:c1:21:62:5f:ef:11:69:eb:dd:24:
                    c4:e9:1e:2b:ab:f1:e9:f0:26:08:2b:d3:55:93:2a:
                    85:7b:2a:1b:e6:d0:a3:58:01:fc:78:4b:c9:38:68:
                    bb:64:31:77:91:92:a0:7f:7b:d4:57:f5:d4:ef:ce:
                    a5:2b:f3:44:14:16:48:ad:b8:5a:fd:d4:df:f5:82:
                    c5:fc:0f:92:65:08:3c:a6:89:da:80:3a:c6:21:f2:
                    17:a7:3e:ae:87:a9:f7:84:b8:8c:cf:59:6a:f4:68:
                    6e:9f:e3:bc:42:4e:94:8f:9d:b6:2b:e9:d8:0e:53:
                    b2:bd:04:30:33:c1:60:54:94:f5:8d:0c:44:5c:05:
                    89:ac:65:60:6b:9f:80:11:46:1b:cf:69:f1:61:59:
                    3c:4c:3e:47:95:58:82:9e:19:a3:74:fd:e0:9a:93:
                    4c:40:3c:83:02:5a:99:e9:48:f4:1b:e5:dc:76:57:
                    6a:40:10:ff:f9:9b:d7:d6:e2:b5:21:37:8c:bd:5e:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6A:FA:D2:2D:75:2A:54:4B:2B:A4:FE:C1:B6:E4:45:28:FF:52:D1
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33322d3332203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:80:ea:91:26:87:cc:e7:26:e9:6d:77:d0:d2:e2:7e:8f:
         5f:8a:e7:1b:ad:8a:59:1c:7d:c7:fc:e6:36:8c:23:7f:b7:18:
         62:a7:e4:5c:27:f1:1f:61:4a:87:a1:31:40:e8:f3:8b:4b:da:
         de:78:a6:27:54:24:a2:23:09:11:da:d7:9c:d5:64:3f:ac:e9:
         1d:a7:9e:39:53:11:35:94:b7:df:0c:5f:b9:79:17:ad:e0:e4:
         2c:07:1f:27:c0:a4:68:b0:e5:b2:30:dc:3a:2d:c9:d2:4e:03:
         e7:5f:8d:b1:99:ab:f5:f8:94:85:8b:6a:7a:a6:dd:41:bc:60:
         c9:d3:2b:29:ba:68:df:c7:d5:32:7d:e1:62:b4:ac:66:88:c8:
         bc:06:5b:2a:c8:8e:df:ec:36:f2:34:ad:39:64:b3:b9:95:2b:
         24:34:40:41:4d:75:67:ca:8c:2f:7a:c9:63:34:86:bc:f5:5b:
         ec:5c:b0:37:14:8f:98:d9:00:54:40:7c:11:73:1e:9c:a2:e6:
         8f:77:34:df:f9:a1:8e:09:00:ae:de:7f:ef:e7:68:49:c3:9f:
         60:39:2c:f3:c3:02:9f:37:c4:94:82:d9:79:b0:bb:16:78:a1:
         a3:7a:d2:35:47:56:ad:d5:cb:70:92:8e:58:b5:2b:b9:e5:7f:
         c2:da:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org