Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33322d313238203d3e20323639343537.roa
File:                     323830343a363465383a3a2f33322d313238203d3e20323639343537.roa (raw, json)
Hash identifier:          7izjc9PHUAyu6vuXm/bgbSZrmSVvEcEmhG+zHi8vibI=
Subject key identifier:   BA:33:24:DB:49:DE:98:2E:EE:41:A3:80:AA:4C:FC:3D:92:56:30:35
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       3CA6542DF618BF1777BD3A94B04A83285A301664
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33322d313238203d3e20323639343537.roa
Signing time:             Wed 03 Apr 2024 23:19:31 +0000
ROA not before:           Wed 03 Apr 2024 23:14:31 +0000
ROA not after:            Wed 02 Apr 2025 23:19:31 +0000
asID:                     269457
IP address blocks:        2804:64e8::/32 maxlen: 128

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 12:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a6:54:2d:f6:18:bf:17:77:bd:3a:94:b0:4a:83:28:5a:30:16:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Apr  3 23:14:31 2024 GMT
            Not After : Apr  2 23:19:31 2025 GMT
        Subject: CN=BA3324DB49DE982EEE41A380AA4CFC3D92563035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:3e:00:63:50:87:0f:ab:b9:47:7b:47:20:
                    ff:ec:73:77:2e:a5:77:7b:5d:c5:cd:3f:2f:c5:45:
                    1a:06:8f:b7:bd:5b:71:0a:99:78:fc:84:bf:39:56:
                    b5:e9:ec:83:9c:2f:f1:1d:f8:90:60:ff:18:f5:85:
                    af:e7:5a:62:e8:85:56:d4:78:64:a0:9e:03:a2:d4:
                    21:69:e0:ad:20:08:f0:25:1e:41:9f:c2:d7:0a:9e:
                    95:8b:c6:c4:61:9a:a9:5e:b3:4d:30:1a:a2:16:bf:
                    a7:fb:4b:64:0b:6c:5b:05:dd:bd:4d:d6:ec:be:5d:
                    16:fd:4d:4d:46:e1:4a:e2:38:e2:33:46:d6:8f:bb:
                    72:1d:bc:95:60:0b:75:f3:3b:a4:e2:c4:2d:10:9b:
                    15:a8:b4:cf:46:b9:4c:0a:00:67:b8:d5:ae:d0:f5:
                    d2:e6:3d:f0:7a:48:c5:4b:30:31:a2:20:ba:f8:a1:
                    11:1d:ed:f7:b5:56:ef:7e:be:75:dc:72:a5:96:4a:
                    03:ee:84:18:4a:6f:75:fe:28:0f:59:18:ad:23:8d:
                    c0:ff:af:ce:0f:ca:09:14:ad:90:dc:46:69:05:12:
                    2f:3d:a4:1b:3b:b3:eb:34:f9:67:fd:91:ff:96:7c:
                    a0:12:66:e0:b4:fb:51:0a:bb:64:37:e6:61:29:2a:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:33:24:DB:49:DE:98:2E:EE:41:A3:80:AA:4C:FC:3D:92:56:30:35
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a3a2f33322d313238203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:04:a7:00:ef:ee:f7:35:0a:e0:d6:8b:93:b6:c3:d5:eb:1b:
         c6:4c:83:aa:a3:12:5d:a5:78:5c:bd:f8:03:5b:93:71:77:a2:
         82:ec:4a:c4:9f:d5:72:8c:33:14:8a:91:f8:14:bc:ff:50:05:
         45:fb:bd:19:95:de:ed:c2:ab:fd:a8:bb:cc:8a:e9:94:25:2a:
         5a:81:f9:67:12:fd:1b:7b:b6:ad:f0:a7:ed:93:fb:22:21:a3:
         4e:de:a2:bc:2d:09:50:4d:82:2c:7a:01:49:b6:56:c1:d3:4f:
         75:aa:fb:39:ab:03:bf:23:52:99:ef:e4:c3:5d:b8:67:05:37:
         b1:f7:da:75:bc:d9:57:1e:5d:db:a9:4a:78:16:4a:09:5a:57:
         f1:92:71:df:3c:93:77:3b:c9:8c:bb:b6:2b:82:3a:fd:2d:cd:
         55:ea:0a:68:f4:94:f2:7a:74:b8:dd:39:6e:57:e2:4d:0d:00:
         c8:92:b1:83:4e:ba:64:c9:d2:a2:d2:9b:1a:67:0a:c4:ea:ad:
         5e:90:8a:68:e4:3a:85:31:de:c7:82:1a:4a:f2:b4:09:f2:03:
         b4:62:e9:05:4a:82:67:34:cb:1d:a8:ce:ae:64:20:8c:87:2e:
         44:82:33:08:15:74:5d:b4:44:67:51:71:af:98:e9:1f:cd:30:
         a7:0f:f3:ee
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPKZULfYYvxd3vTqUsEqDKFowFmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM2MUI3ODY2MkM0RjQ5OTRBNjA5MzFEMTZCNTM4M0Uz
QUI0RTMxOTAeFw0yNDA0MDMyMzE0MzFaFw0yNTA0MDIyMzE5MzFaMDMxMTAvBgNV
BAMTKEJBMzMyNERCNDlERTk4MkVFRTQxQTM4MEFBNENGQzNEOTI1NjMwMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Kj4AY1CHD6u5R3tHIP/sc3cu
pXd7XcXNPy/FRRoGj7e9W3EKmXj8hL85VrXp7IOcL/Ed+JBg/xj1ha/nWmLohVbU
eGSgngOi1CFp4K0gCPAlHkGfwtcKnpWLxsRhmqles00wGqIWv6f7S2QLbFsF3b1N
1uy+XRb9TU1G4UriOOIzRtaPu3IdvJVgC3XzO6TixC0QmxWotM9GuUwKAGe41a7Q
9dLmPfB6SMVLMDGiILr4oREd7fe1Vu9+vnXccqWWSgPuhBhKb3X+KA9ZGK0jjcD/
r84PygkUrZDcRmkFEi89pBs7s+s0+Wf9kf+WfKASZuC0+1EKu2Q35mEpKg1fAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUujMk20nemC7uQaOAqkz8PZJWMDUwHwYDVR0j
BBgwFoAUM2G3hmLE9JlKYJMdFrU4Pjq04xkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RhOUczaXJUM1g5VVEzYzJaNFlRdUN0bUxVek5xN1NzUFR1ZGQ2V2dl
V0MvMS8zMzYxQjc4NjYyQzRGNDk5NEE2MDkzMUQxNkI1MzgzRTNBQjRFMzE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNjFCNzg2NjJDNEY0OTk0
QTYwOTMxRDE2QjUzODNFM0FCNEUzMTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkYTlHM2lyVDNYOVVRM2MyWjRZUXVDdG1MVXpOcTdTc1BUdWRkNldnZVdDLzEv
MzIzODMwMzQzYTM2MzQ2NTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGToMA0GCSqGSIb3DQEBCwUAA4IBAQCABKcA
7+73NQrg1ouTtsPV6xvGTIOqoxJdpXhcvfgDW5Nxd6KC7ErEn9VyjDMUipH4FLz/
UAVF+70Zld7twqv9qLvMiumUJSpagflnEv0be7at8Kftk/siIaNO3qK8LQlQTYIs
egFJtlbB0091qvs5qwO/I1KZ7+TDXbhnBTex99p1vNlXHl3bqUp4FkoJWlfxknHf
PJN3O8mMu7Yrgjr9Lc1V6gpo9JTyenS43TluV+JNDQDIkrGDTrpkydKi0psaZwrE
6q1ekIpo5DqFMd7HghpK8rQJ8gO0YukFSoJnNMsdqM6uZCCMhy5EgjMIFXRdtERn
UXGvmOkfzTCnD/Pu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org