Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/1/323830343a383764303a3a2f33322d3334203d3e20323732373333.roa
File:                     323830343a383764303a3a2f33322d3334203d3e20323732373333.roa (raw, json)
Hash identifier:          OgZpcbYM0jXQH7kzd90C0G4hB1/OdGK6hI02LdyKQd4=
Subject key identifier:   77:8F:16:51:D1:7E:CE:AA:79:4D:B2:DB:56:6D:DA:E9:46:05:70:04
Certificate issuer:       /CN=C8D99426C9AE0363B44316412C6249C10F76C0B8
Certificate serial:       019D5A5BF5C56930AD7CFBC74E4C46DC9B2D2E80
Authority key identifier: C8:D9:94:26:C9:AE:03:63:B4:43:16:41:2C:62:49:C1:0F:76:C0:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8D99426C9AE0363B44316412C6249C10F76C0B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/1/323830343a383764303a3a2f33322d3334203d3e20323732373333.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     272733
IP address blocks:        2804:87d0::/32 maxlen: 34

Validation:               Failed, certificate revoked on Thu 03 Apr 2025 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5a:5b:f5:c5:69:30:ad:7c:fb:c7:4e:4c:46:dc:9b:2d:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8D99426C9AE0363B44316412C6249C10F76C0B8
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:5a:5e:62:41:98:e6:15:1b:ed:b1:75:cc:
                    e9:0c:d1:de:6f:49:d6:0f:49:35:99:be:c7:99:ad:
                    1d:db:30:99:b0:26:09:88:fe:4e:ac:1b:0a:fa:00:
                    01:e3:24:ca:d8:b0:0d:92:54:76:85:8a:a6:33:8c:
                    ea:d9:4c:9f:6e:37:d6:b0:5a:92:4e:c0:d0:0e:7d:
                    c7:84:b2:e3:6e:21:54:25:5c:f0:ca:3b:da:fd:65:
                    da:dc:0b:4c:9a:01:37:e8:43:03:c0:05:b8:ff:c3:
                    19:b3:10:00:e6:18:ad:10:27:2a:aa:5c:a0:cf:1a:
                    dd:cc:49:cc:62:b9:58:5f:bb:70:19:09:60:04:ed:
                    42:66:65:cd:73:dd:1e:e6:f2:52:12:32:2f:6b:6c:
                    10:c8:07:9d:39:b1:2a:7b:35:3b:ea:ed:04:5d:10:
                    d1:81:77:d8:d7:f3:c7:d0:b7:d0:cb:6f:14:2a:a3:
                    66:44:9a:68:10:d3:76:29:28:68:39:d0:e9:1d:b0:
                    3c:f1:98:b8:9c:ff:d8:4d:fb:9d:3c:2e:39:44:83:
                    04:0d:9a:1c:dc:ba:84:d7:bc:97:86:9e:24:b8:2d:
                    5c:54:56:e8:a5:55:7e:93:1d:d7:ca:d2:57:9b:61:
                    5f:0d:67:36:9b:51:7e:88:50:d5:2b:0a:95:48:4a:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8F:16:51:D1:7E:CE:AA:79:4D:B2:DB:56:6D:DA:E9:46:05:70:04
            X509v3 Authority Key Identifier:
                keyid:C8:D9:94:26:C9:AE:03:63:B4:43:16:41:2C:62:49:C1:0F:76:C0:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/1/C8D99426C9AE0363B44316412C6249C10F76C0B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8D99426C9AE0363B44316412C6249C10F76C0B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/1/323830343a383764303a3a2f33322d3334203d3e20323732373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:36:53:40:9b:e5:33:55:4b:db:53:24:8d:71:53:24:4c:6a:
         bd:7f:06:4c:be:70:bd:5d:b9:eb:e1:bb:df:3c:06:c7:65:91:
         aa:f0:39:55:4a:e1:26:b9:18:0e:00:e7:b9:12:7c:30:20:19:
         f9:1d:71:f1:56:90:4e:4b:a6:c8:a6:ea:4f:6c:74:c1:72:74:
         63:55:d1:a4:d0:4c:82:5d:93:73:64:e6:b4:08:89:ba:48:3c:
         f8:e8:a3:2e:7d:d1:12:14:e8:14:65:f4:c1:da:ac:50:87:bb:
         12:ce:f7:16:cb:2a:63:18:05:85:df:1a:26:1f:b3:df:bd:01:
         87:b5:53:a3:bb:05:b5:6c:cf:7f:60:06:fc:58:9c:61:99:13:
         04:a0:45:d0:cc:d9:50:a4:b7:c3:cf:62:b0:30:a9:50:06:74:
         38:01:b8:e9:68:55:b2:d7:9f:7e:cd:24:fc:88:2a:a6:1f:4b:
         5c:fa:09:b4:81:1a:db:bd:df:a1:e1:d3:67:70:66:ef:c7:74:
         30:09:17:13:4f:b8:84:e7:79:37:95:9c:69:ce:b4:e3:6d:0c:
         ed:8d:65:bb:00:84:34:d3:71:ef:8f:a5:0b:3f:74:71:58:13:
         f7:f1:ed:07:3d:02:42:7f:3d:97:36:ae:31:18:6d:3b:74:a1:
         f9:69:d5:26
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUAZ1aW/XFaTCtfPvHTkxG3JstLoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhEOTk0MjZDOUFFMDM2M0I0NDMxNjQxMkM2MjQ5QzEw
Rjc2QzBCODAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRBQzVBNUU2MjQxOThFNjE1
MUJFREIxNzVDQ0U5MENEMURFNkY0OUQ2MEY0OTM1OTlCRUM3OTlBRDFEREIzMDk5
QjAyNjA5ODhGRTRFQUMxQjBBRkEwMDAxRTMyNENBRDhCMDBEOTI1NDc2ODU4QUE2
MzM4Q0VBRDk0QzlGNkUzN0Q2QjA1QTkyNEVDMEQwMEU3REM3ODRCMkUzNkUyMTU0
MjU1Q0YwQ0EzQkRBRkQ2NURBREMwQjRDOUEwMTM3RTg0MzAzQzAwNUI4RkZDMzE5
QjMxMDAwRTYxOEFEMTAyNzJBQUE1Q0EwQ0YxQUREQ0M0OUNDNjJCOTU4NUZCQjcw
MTkwOTYwMDRFRDQyNjY2NUNENzNERDFFRTZGMjUyMTIzMjJGNkI2QzEwQzgwNzlE
MzlCMTJBN0IzNTNCRUFFRDA0NUQxMEQxODE3N0Q4RDdGM0M3RDBCN0QwQ0I2RjE0
MkFBMzY2NDQ5QTY4MTBEMzc2MjkyODY4MzlEMEU5MURCMDNDRjE5OEI4OUNGRkQ4
NERGQjlEM0MyRTM5NDQ4MzA0MEQ5QTFDRENCQTg0RDdCQzk3ODY5RTI0QjgyRDVD
NTQ1NkU4QTU1NTdFOTMxREQ3Q0FEMjU3OUI2MTVGMEQ2NzM2OUI1MTdFODg1MEQ1
MkIwQTk1NDg0QTEzMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1KxaXmJBmOYVG+2xdczpDNHeb0nWD0k1mb7Hma0d2zCZsCYJiP5O
rBsK+gAB4yTK2LANklR2hYqmM4zq2UyfbjfWsFqSTsDQDn3HhLLjbiFUJVzwyjva
/WXa3AtMmgE36EMDwAW4/8MZsxAA5hitECcqqlygzxrdzEnMYrlYX7twGQlgBO1C
ZmXNc90e5vJSEjIva2wQyAedObEqezU76u0EXRDRgXfY1/PH0LfQy28UKqNmRJpo
ENN2KShoOdDpHbA88Zi4nP/YTfudPC45RIMEDZoc3LqE17yXhp4kuC1cVFbopVV+
kx3XytJXm2FfDWc2m1F+iFDVKwqVSEoTEQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FHePFlHRfs6qeU2y21Zt2ulGBXAEMB8GA1UdIwQYMBaAFMjZlCbJrgNjtEMWQSxi
ScEPdsC4MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNTeEYzV3R0a2d5cG85
djdZV29CY3hLWVdZZUhqUFN0WlhLeURrMzNUV1hHLzEvQzhEOTk0MjZDOUFFMDM2
M0I0NDMxNjQxMkM2MjQ5QzEwRjc2QzBCOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DOEQ5OTQyNkM5QUUwMzYzQjQ0MzE2NDEyQzYyNDlDMTBGNzZD
MEI4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zU3hGM1d0dGtneXBvOXY3WVdv
QmN4S1lXWWVIalBTdFpYS3lEazMzVFdYRy8xLzMyMzgzMDM0M2EzODM3NjQzMDNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMjM3MzMzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
h9AwDQYJKoZIhvcNAQELBQADggEBAJM2U0Cb5TNVS9tTJI1xUyRMar1/Bky+cL1d
uevhu988BsdlkarwOVVK4Sa5GA4A57kSfDAgGfkdcfFWkE5Lpsim6k9sdMFydGNV
0aTQTIJdk3Nk5rQIibpIPPjooy590RIU6BRl9MHarFCHuxLO9xbLKmMYBYXfGiYf
s9+9AYe1U6O7BbVsz39gBvxYnGGZEwSgRdDM2VCkt8PPYrAwqVAGdDgBuOloVbLX
n37NJPyIKqYfS1z6CbSBGtu936Hh02dwZu/HdDAJFxNPuITneTeVnGnOtONtDO2N
ZbsAhDTTce+PpQs/dHFYE/fx7Qc9AkJ/PZc2rjEYbTt0oflp1SY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org