Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a653030303a3a2f33352d3335203d3e20323633303236.roa
File:                     323830343a6132383a653030303a3a2f33352d3335203d3e20323633303236.roa (raw, json)
Hash identifier:          9Pe4gqgMoJdPQ7KrQbMGLIlM5FdFBHjn00qPtDZybOc=
Subject key identifier:   D5:9C:ED:21:49:7E:A0:FB:73:EC:FD:18:00:DE:08:4F:E7:78:74:05
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       53D646D46C3CA4009945200FB99887B7D05D2B85
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a653030303a3a2f33352d3335203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:32 +0000
ROA not before:           Thu 04 Apr 2024 15:05:32 +0000
ROA not after:            Thu 03 Apr 2025 15:10:32 +0000
asID:                     263026
IP address blocks:        2804:a28:e000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:46:d4:6c:3c:a4:00:99:45:20:0f:b9:98:87:b7:d0:5d:2b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:32 2024 GMT
            Not After : Apr  3 15:10:32 2025 GMT
        Subject: CN=D59CED21497EA0FB73ECFD1800DE084FE7787405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:e2:63:c2:e5:95:89:6c:6a:af:f6:17:e2:
                    61:48:0b:4b:8a:c4:ab:74:62:c2:b3:b9:39:ff:01:
                    3a:c2:4c:9d:72:1b:42:1f:75:99:b9:20:91:b8:11:
                    17:5b:f4:50:f2:e6:21:69:4b:d2:de:08:2b:5d:c7:
                    b6:51:f4:3c:12:60:97:bb:c6:c4:8a:0f:e1:93:58:
                    3a:38:c1:38:9f:81:97:89:28:07:05:d8:d7:87:64:
                    cc:d2:58:a4:f2:3c:9c:0a:32:81:3e:e9:9b:6b:a2:
                    95:3a:41:6b:33:0e:ce:79:bc:b8:71:4d:57:4d:d3:
                    f8:0b:d7:da:92:4d:8a:0c:0a:60:32:1a:5b:99:df:
                    20:16:36:80:63:91:f1:9a:34:60:9f:ab:c1:b7:13:
                    43:43:aa:7e:df:65:cb:d6:89:ad:86:e0:75:a8:2b:
                    82:f0:33:2e:5f:cc:92:c6:93:91:41:f8:56:2c:9d:
                    1e:c3:c3:d9:30:1b:65:3f:67:9e:d2:9d:a7:4a:b7:
                    d2:c9:d4:28:ad:8b:96:22:f5:21:04:6e:0d:55:61:
                    5f:f5:a4:ba:85:2d:0b:b8:0f:c2:65:f7:8b:38:d0:
                    f7:f1:08:b2:3c:3b:d0:86:d1:a1:0a:ce:f9:2b:10:
                    af:a5:d1:c2:2c:ce:ab:83:74:d3:79:83:ba:85:e4:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9C:ED:21:49:7E:A0:FB:73:EC:FD:18:00:DE:08:4F:E7:78:74:05
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a653030303a3a2f33352d3335203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         d1:7b:0f:30:33:bc:72:40:8f:d1:3d:b4:47:f6:44:01:83:6e:
         8c:87:c8:cb:d8:7e:a0:fb:6a:7e:f4:c2:e7:ef:a2:cc:6e:2c:
         4b:e6:2b:3e:cd:1b:0b:05:b5:dd:a9:b8:24:ff:63:76:45:74:
         99:b8:48:4a:ef:fa:05:02:32:c9:c2:e0:98:56:a3:e8:ac:b7:
         80:10:9b:99:7c:b9:d1:31:1b:87:88:b7:96:1a:5e:2a:df:e7:
         a0:d7:b0:7e:ab:98:ce:73:75:13:52:95:72:f7:ff:eb:f1:06:
         eb:74:1e:92:9b:40:73:62:87:d4:87:a8:cc:3a:c5:48:e6:80:
         1a:fe:02:92:ce:26:d8:6f:38:58:6b:e6:4d:fb:fd:9e:6b:5e:
         5d:54:ca:e2:38:03:eb:29:d9:60:b9:0a:89:0c:3b:04:6c:67:
         77:e7:72:c2:07:89:7f:ef:cc:26:87:cd:b5:8c:c4:14:76:c2:
         ed:8e:70:ea:51:7c:72:36:ae:f5:17:e9:c0:97:c7:6e:fb:15:
         52:c1:df:24:a9:37:ec:de:5a:8e:1e:d5:8c:80:c6:84:d5:c7:
         08:93:b1:6d:96:e0:4f:30:36:65:75:dd:6b:fb:78:26:37:c4:
         62:da:21:38:94:bc:6c:1b:a1:18:f0:a9:bd:9e:6b:b5:81:1b:
         43:fa:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org