Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a383030303a3a2f33332d3333203d3e20323638303333.roa
File:                     323830343a353666303a383030303a3a2f33332d3333203d3e20323638303333.roa (raw, json)
Hash identifier:          9YNQcUVeEJXqCPMQgIp5mvpW9emLNM+PcA9urs99Gi4=
Subject key identifier:   A5:EC:69:72:7C:A5:D8:6C:F3:65:72:B0:04:36:AF:19:F4:B4:9F:C7
Certificate issuer:       /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial:       15F4B6D5AD01650DFD03049A31D5BE2AED588B23
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a383030303a3a2f33332d3333203d3e20323638303333.roa
Signing time:             Thu 10 Apr 2025 12:16:53 +0000
ROA not before:           Thu 10 Apr 2025 12:11:53 +0000
ROA not after:            Thu 09 Apr 2026 12:16:53 +0000
asID:                     268033
IP address blocks:        2804:56f0:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Mon 14 Apr 2025 12:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f4:b6:d5:ad:01:65:0d:fd:03:04:9a:31:d5:be:2a:ed:58:8b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Validity
            Not Before: Apr 10 12:11:53 2025 GMT
            Not After : Apr  9 12:16:53 2026 GMT
        Subject: CN=A5EC69727CA5D86CF36572B00436AF19F4B49FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:8f:8c:c9:b8:6d:b4:b2:7c:c5:2d:d3:a7:
                    2b:3a:94:17:44:eb:72:b8:9f:30:37:93:23:d6:e9:
                    ff:47:cf:4a:df:56:f0:01:bd:ab:2d:b8:7e:87:d9:
                    bd:1a:eb:ed:6b:3c:76:d5:3d:2f:6f:ee:92:0d:07:
                    5e:db:00:9a:3f:c4:ca:12:31:34:7d:2b:9e:e3:a0:
                    45:38:14:ea:34:0f:6d:ad:99:60:94:5f:29:69:83:
                    b6:83:13:48:07:e0:4c:a5:88:76:5d:ae:d2:6f:39:
                    75:66:42:e3:a4:61:71:66:57:24:77:ed:70:69:22:
                    9e:8b:4e:52:9a:9b:07:94:c9:b3:70:24:ca:96:62:
                    6d:d0:99:ae:63:c4:56:1c:c1:4e:7d:55:9f:64:9e:
                    89:9c:c9:53:39:bb:59:d5:60:73:1d:79:d3:bd:90:
                    bd:ce:43:44:d6:06:5d:67:b3:b9:81:3d:d8:c3:65:
                    b0:b0:5f:d0:9a:3e:60:d8:be:77:f6:ec:b4:03:9a:
                    4d:ed:fe:be:52:06:6a:ad:4a:2c:c5:12:85:ea:e9:
                    ee:ff:4b:0e:6a:91:e8:aa:31:81:4b:f3:bd:ef:5c:
                    28:a3:69:16:bf:62:52:2c:85:db:88:c1:1a:e4:2b:
                    59:de:3e:f1:d3:9f:8d:49:ba:e1:c3:40:50:77:81:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EC:69:72:7C:A5:D8:6C:F3:65:72:B0:04:36:AF:19:F4:B4:9F:C7
            X509v3 Authority Key Identifier:
                keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a383030303a3a2f33332d3333203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:7e:0a:28:15:d3:7c:8c:4b:2a:46:44:10:19:93:34:01:2a:
         dc:17:f0:4b:ad:c2:6a:c0:36:31:12:f5:58:f1:1a:14:ca:b1:
         22:e3:57:7a:bc:07:05:32:6a:d2:01:ae:dd:04:8e:52:1b:8d:
         c7:3f:de:ff:d9:6b:95:b3:f8:f8:1f:3e:87:fe:8d:91:6b:6e:
         47:04:6d:07:78:30:4e:97:54:a9:75:59:a3:e9:93:49:b1:7c:
         2a:10:41:7a:5e:70:cd:38:1f:9d:7c:81:c0:cb:fc:a8:bf:f3:
         27:85:e9:ba:03:94:d3:52:32:09:ee:b9:eb:c1:47:96:33:ce:
         b4:30:26:54:4a:d2:8a:d8:ca:f6:f3:8c:b1:8c:72:dd:f9:e0:
         29:3a:f7:1b:93:9c:5d:4c:a2:b9:b9:ab:33:e1:5b:11:2b:40:
         1d:4e:da:26:16:5d:3a:00:51:c0:41:a2:41:17:25:f5:55:8f:
         2b:10:4b:07:18:6a:14:23:92:cb:50:4f:09:e7:4d:18:a3:9c:
         03:88:d6:2c:8b:d0:cc:87:8b:6e:5a:c8:41:e3:00:55:8f:f2:
         e0:75:b2:80:cd:6e:91:eb:bc:e4:b8:d8:55:2e:6a:b3:31:22:
         17:67:e8:d3:3d:eb:56:3a:51:2a:c1:91:0f:81:06:3b:62:31:
         af:1f:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----