Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a356562343a3a2f33322d3332203d3e20323636343938.roa
File:                     323830343a356562343a3a2f33322d3332203d3e20323636343938.roa (raw, json)
Hash identifier:          ta/BbI/Ldj3x7avGdWU50mRy44elM7HXOuxgWj7xXr0=
Subject key identifier:   61:A2:63:57:49:8F:C7:7B:6E:9E:92:27:5C:18:9A:A9:C1:98:06:1D
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       06B5D0BA63C71462DE3CE7BE56A3C4896D7D382E
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a356562343a3a2f33322d3332203d3e20323636343938.roa
Signing time:             Fri 29 Nov 2024 12:38:35 +0000
ROA not before:           Fri 29 Nov 2024 12:33:35 +0000
ROA not after:            Fri 28 Nov 2025 12:38:35 +0000
asID:                     266498
IP address blocks:        2804:5eb4::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 02 Dec 2024 18:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b5:d0:ba:63:c7:14:62:de:3c:e7:be:56:a3:c4:89:6d:7d:38:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Nov 29 12:33:35 2024 GMT
            Not After : Nov 28 12:38:35 2025 GMT
        Subject: CN=61A26357498FC77B6E9E92275C189AA9C198061D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:13:a0:a4:73:be:94:82:b5:e7:6f:82:dd:
                    3d:9c:03:6a:66:70:58:8c:d5:00:71:7b:43:c5:1a:
                    6c:a3:37:34:20:35:06:85:53:56:82:f9:c6:20:c3:
                    44:16:13:33:df:89:f0:7e:33:c9:0b:92:a6:67:f7:
                    99:d0:ad:7c:93:2d:3e:ea:b0:90:ec:25:19:d9:9b:
                    a8:5c:6c:1b:aa:98:bf:1f:33:a4:83:d6:fd:c2:a7:
                    a6:71:ca:77:01:cd:c2:8e:bb:9a:f5:b6:42:53:19:
                    bc:da:28:94:e0:b2:e6:c8:8e:ef:84:6c:32:01:80:
                    e5:21:f5:3f:d6:f5:54:16:3c:30:24:71:3b:56:b6:
                    13:f5:d7:e9:f6:02:8c:d1:50:6c:5c:18:c8:f1:58:
                    cd:86:26:71:dc:69:0d:bf:3c:3a:5d:9c:65:35:ca:
                    61:39:31:f5:eb:97:e1:7d:05:1f:79:d3:45:30:02:
                    ba:ba:fe:f4:94:0c:c4:9b:46:d9:73:65:49:e0:64:
                    9b:c7:d7:86:58:1d:9f:4a:3b:a8:ef:5d:47:84:da:
                    2e:0b:c6:de:93:ef:17:d2:65:09:c2:d5:90:49:ae:
                    a0:8d:2d:2b:b3:ba:0a:de:2e:17:06:d1:6a:b7:af:
                    0f:e2:c3:01:ee:39:b3:d9:70:2b:c8:ca:34:de:ad:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A2:63:57:49:8F:C7:7B:6E:9E:92:27:5C:18:9A:A9:C1:98:06:1D
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a356562343a3a2f33322d3332203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:a7:5e:d8:b2:0b:b8:e0:da:49:04:14:6e:cb:d6:40:b2:8d:
         c0:1b:33:aa:f1:c8:94:05:52:b0:bc:78:83:0e:fd:70:73:d0:
         3a:77:a1:00:00:9a:08:80:f1:40:e1:7c:6e:df:0a:71:a0:15:
         3f:75:55:c2:45:95:60:73:db:af:6b:fd:70:e9:12:e9:f0:0d:
         bf:90:a9:09:7c:d3:c1:de:64:26:d3:ed:79:67:0a:fb:6e:40:
         65:b7:05:80:5c:c7:33:06:29:d4:1f:8c:79:7a:a0:b9:51:15:
         f3:cc:a0:42:44:11:b4:96:4a:a1:01:39:57:8c:24:fa:26:b2:
         58:21:65:b8:35:ca:55:ae:c4:bc:56:39:5e:73:02:fa:8e:f7:
         e6:26:92:60:2d:25:11:9e:66:30:2c:b7:ff:61:85:35:06:39:
         2e:18:39:d0:ab:c8:68:87:a0:8f:e7:49:3d:f6:d3:45:1f:bf:
         4c:10:49:a2:4a:ad:9f:d2:b3:4e:31:4d:74:91:de:3d:ec:bc:
         e8:5a:20:81:b2:1f:e2:67:1c:51:c8:79:bd:2f:9c:4d:f6:7b:
         a2:02:6e:b2:55:7b:fc:5a:72:97:5a:ac:3a:f8:22:69:15:11:
         79:95:5a:06:49:27:b9:2f:49:cc:3b:54:2f:47:7a:3d:7c:78:
         0b:93:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----