Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa
File:                     323830343a6132383a3a2f33332d3333203d3e20323633303236.roa (raw, json)
Hash identifier:          eAnAdd7lnUY8vSQWejo1dP6L9ajSP9bKrETJc/UVSMA=
Subject key identifier:   7C:A9:38:BD:E4:C0:D5:06:D0:FD:90:95:28:68:24:15:F2:6A:18:97
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       78824931B39AAEB4BC29335812E5BAA55EFAE54F
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa
Signing time:             Sun 19 May 2024 02:59:50 +0000
ROA not before:           Sun 19 May 2024 02:54:50 +0000
ROA not after:            Sun 18 May 2025 02:59:50 +0000
asID:                     263026
IP address blocks:        2804:a28::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:82:49:31:b3:9a:ae:b4:bc:29:33:58:12:e5:ba:a5:5e:fa:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: May 19 02:54:50 2024 GMT
            Not After : May 18 02:59:50 2025 GMT
        Subject: CN=7CA938BDE4C0D506D0FD909528682415F26A1897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:3e:3c:c0:dd:43:c7:79:3b:fd:96:58:ae:
                    60:09:79:a8:9b:46:d0:16:b1:2f:14:9d:6f:ee:f8:
                    73:80:70:4f:83:6b:43:45:34:03:f2:64:66:e2:ca:
                    be:7e:37:a2:de:51:c7:01:f6:d9:ab:c8:b3:d5:e6:
                    c0:56:5e:79:c7:5f:ea:bd:0c:e2:e0:fc:c4:cf:72:
                    5d:92:19:3c:5f:fa:6d:c6:98:99:2a:03:12:72:9a:
                    62:3b:27:1f:2d:99:8f:59:4c:84:5c:9e:bb:5b:96:
                    14:57:f5:44:49:b1:49:a8:4d:42:36:5c:93:3b:e8:
                    c9:53:cc:07:64:ef:6f:89:4b:ec:22:f1:e3:db:fb:
                    22:74:63:3d:16:13:85:c0:ce:9b:c7:36:5f:bf:de:
                    20:d9:86:cc:3b:e0:f9:fe:f1:4a:99:c7:1a:03:07:
                    b8:20:71:b5:e2:77:65:b5:62:c2:27:ae:27:4c:b7:
                    71:40:d4:30:df:99:15:95:f9:77:9e:d5:a1:42:ad:
                    2b:ae:5e:02:2a:bb:41:ab:ff:56:1c:a1:c5:7b:11:
                    0b:f8:db:5e:70:06:28:f2:e8:70:54:d8:7c:6f:a0:
                    e5:01:ef:be:e5:8b:28:d3:54:e4:2a:b5:1d:bc:4e:
                    f9:30:f8:b5:a6:17:ee:c9:0a:64:07:d5:b7:6b:2f:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A9:38:BD:E4:C0:D5:06:D0:FD:90:95:28:68:24:15:F2:6A:18:97
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:a9:cd:8b:a0:58:a1:5a:5f:49:13:3c:91:43:60:aa:c6:
         af:5f:af:e0:2c:16:4a:f1:10:0e:b4:90:17:b9:37:06:b1:36:
         e3:de:9b:c9:16:fa:a0:94:78:ee:87:1b:7f:7e:a5:72:38:dc:
         7c:e5:f2:a1:ef:fd:e8:1d:a3:8e:a0:c0:a3:52:b0:21:4a:25:
         c3:8b:29:2d:d8:7e:c2:09:59:bc:ed:de:52:8d:3d:49:4c:48:
         59:fe:90:58:9a:2b:42:8f:02:6b:5b:ef:2d:cb:51:8c:8f:7a:
         d2:0a:fc:85:c0:e1:28:a5:ec:50:c6:e9:af:ba:11:64:80:90:
         13:83:78:08:34:97:cd:2f:23:d4:92:44:ee:f6:29:2d:a0:ea:
         c0:e5:6b:a3:b0:f9:2b:92:f0:24:24:ab:26:2a:07:2e:99:f4:
         95:16:ff:e8:38:f4:99:20:d7:18:e2:b9:7a:6c:91:11:8a:cb:
         5b:eb:eb:ec:d7:d4:fb:82:b0:b8:2e:cb:d5:20:40:70:23:34:
         67:0b:3f:a1:66:19:47:05:12:df:ce:a4:dc:73:28:b0:c8:cc:
         51:aa:14:ca:c3:2f:a1:4a:f2:7d:70:17:75:22:fc:59:6b:3a:
         c4:da:76:85:43:a5:f6:39:07:0b:de:53:85:e8:b4:30:12:85:
         c8:0d:ad:52
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUeIJJMbOarrS8KTNYEuW6pV765U8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxQUMwQkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0
MERCQTM0ODAeFw0yNDA1MTkwMjU0NTBaFw0yNTA1MTgwMjU5NTBaMDMxMTAvBgNV
BAMTKDdDQTkzOEJERTRDMEQ1MDZEMEZEOTA5NTI4NjgyNDE1RjI2QTE4OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjhj48wN1Dx3k7/ZZYrmAJeaib
RtAWsS8UnW/u+HOAcE+Da0NFNAPyZGbiyr5+N6LeUccB9tmryLPV5sBWXnnHX+q9
DOLg/MTPcl2SGTxf+m3GmJkqAxJymmI7Jx8tmY9ZTIRcnrtblhRX9URJsUmoTUI2
XJM76MlTzAdk72+JS+wi8ePb+yJ0Yz0WE4XAzpvHNl+/3iDZhsw74Pn+8UqZxxoD
B7ggcbXid2W1YsInridMt3FA1DDfmRWV+Xee1aFCrSuuXgIqu0Gr/1YcocV7EQv4
215wBijy6HBU2HxvoOUB777liyjTVOQqtR28Tvkw+LWmF+7JCmQH1bdrL/l7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUfKk4veTA1QbQ/ZCVKGgkFfJqGJcwHwYDVR0j
BBgwFoAUghrAvaq8ziGye2zgUehLO0Dbo0gwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzEvODIxQUMwQkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0MERCQTM0OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MjFBQzBCREFBQkNDRTIxQjI3
QjZDRTA1MUU4NEIzQjQwREJBMzQ4LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzEvMzIz
ODMwMzQzYTYxMzIzODNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMzMwMzIz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBygECigAMA0GCSqGSIb3DQEBCwUAA4IBAQAgnanNi6BYoVpf
SRM8kUNgqsavX6/gLBZK8RAOtJAXuTcGsTbj3pvJFvqglHjuhxt/fqVyONx85fKh
7/3oHaOOoMCjUrAhSiXDiykt2H7CCVm87d5SjT1JTEhZ/pBYmitCjwJrW+8ty1GM
j3rSCvyFwOEopexQxumvuhFkgJATg3gINJfNLyPUkkTu9iktoOrA5WujsPkrkvAk
JKsmKgcumfSVFv/oOPSZINcY4rl6bJERistb6+vs19T7grC4LsvVIEBwIzRnCz+h
ZhlHBRLfzqTccyiwyMxRqhTKwy+hSvJ9cBd1IvxZazrE2naFQ6X2OQcL3lOF6LQw
EoXIDa1S
-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org