Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa
File:                     323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (raw, json)
Hash identifier:          UuyYsMfJP2sML3P5q94Z61ivTY+x+WwF78KXu+OJ2Nk=
Subject key identifier:   9C:CE:AE:E7:BF:2E:F0:88:B4:35:A8:A1:3F:5F:D1:FA:E4:1D:9F:49
Certificate issuer:       /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
Certificate serial:       693D9CFA18266932FED6C8563E26E02920578625
Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa
Signing time:             Thu 04 Apr 2024 19:28:40 +0000
ROA not before:           Thu 04 Apr 2024 19:23:40 +0000
ROA not after:            Thu 03 Apr 2025 19:28:40 +0000
asID:                     266584
IP address blocks:        2804:3e44::/32 maxlen: 36

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3d:9c:fa:18:26:69:32:fe:d6:c8:56:3e:26:e0:29:20:57:86:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Validity
            Not Before: Apr  4 19:23:40 2024 GMT
            Not After : Apr  3 19:28:40 2025 GMT
        Subject: CN=9CCEAEE7BF2EF088B435A8A13F5FD1FAE41D9F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:da:43:0d:03:89:b9:b4:dc:c8:e3:ca:fd:
                    8c:3d:35:40:f0:33:e2:5b:70:08:c3:44:8d:d8:a1:
                    24:44:23:9f:74:54:0b:13:bd:5b:b8:96:5b:09:03:
                    2e:c5:d5:e3:d8:0b:63:c9:ed:21:36:3b:f9:10:20:
                    35:3d:65:66:ce:84:7f:fb:de:01:f6:fb:6e:3a:f4:
                    da:86:22:8e:65:26:0f:0f:43:2f:83:61:1b:3e:47:
                    b9:d0:95:3c:b9:6a:e7:be:74:7d:43:d5:c0:11:72:
                    41:18:32:a8:9b:43:21:c1:a7:cd:da:df:15:08:03:
                    15:67:c2:14:44:cc:ee:e4:ba:13:e1:51:8a:56:22:
                    77:b5:20:6a:60:46:e7:83:ea:9c:3f:9c:6e:f6:9f:
                    48:cb:ce:d8:d4:2a:22:57:f6:66:c1:a5:39:e4:53:
                    42:f5:57:24:82:fb:1d:e0:14:6b:f7:a4:f9:0e:0c:
                    10:f3:b6:56:2f:52:da:0a:29:32:89:57:72:90:e8:
                    72:93:5e:03:eb:70:9a:f6:4d:e7:11:10:59:f0:92:
                    93:d4:43:0d:56:cc:17:af:42:e5:98:d9:77:bc:2f:
                    39:2c:30:2e:a9:80:c3:1a:5f:29:6e:ff:b3:0c:d9:
                    a9:89:34:22:83:ba:06:71:f2:6d:b8:3a:af:da:82:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CE:AE:E7:BF:2E:F0:88:B4:35:A8:A1:3F:5F:D1:FA:E4:1D:9F:49
            X509v3 Authority Key Identifier:
                keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3336203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:26:81:e3:b8:ec:8b:0f:36:b1:e7:bd:fd:d2:dd:bd:48:
         95:c9:3f:84:db:81:01:bd:1f:18:68:75:a9:14:87:f3:9d:57:
         86:e8:7c:b7:88:a0:e2:06:e1:a0:92:47:9d:03:d3:44:26:63:
         19:43:75:dc:65:ad:9c:2f:e7:6d:39:5e:a7:52:89:80:9e:0d:
         bd:26:27:82:bb:76:24:fd:86:38:50:e6:23:39:8e:8f:d8:1e:
         84:7d:c1:e6:52:90:7a:84:e1:44:c8:32:a5:27:2d:af:07:fe:
         3e:65:ce:b3:e2:f6:99:b0:f6:ed:46:05:31:17:f4:a3:ac:1b:
         5e:41:83:02:67:24:61:ae:00:ba:9a:94:e9:83:6b:72:6f:32:
         39:f5:0f:dc:4d:f3:31:b4:37:a9:1e:f1:64:77:2d:5d:5a:df:
         64:68:25:b7:37:18:51:3b:d5:66:7e:cc:1e:e6:1f:27:eb:ce:
         4c:c3:cb:9e:10:ad:6a:07:f7:ec:40:bf:df:50:e1:93:ae:1c:
         84:e8:d0:f9:f0:e8:2c:95:58:c6:22:94:8b:c0:91:2a:17:3d:
         92:06:91:a1:fe:65:bf:fe:88:25:3c:82:90:74:92:66:b7:ad:
         18:9a:26:ee:5a:52:c1:8f:b1:a8:16:70:35:35:fb:18:6a:51:
         86:08:e3:bb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaT2c+hgmaTL+1shWPibgKSBXhiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC
NjE5NTJGMzAeFw0yNDA0MDQxOTIzNDBaFw0yNTA0MDMxOTI4NDBaMDMxMTAvBgNV
BAMTKDlDQ0VBRUU3QkYyRUYwODhCNDM1QThBMTNGNUZEMUZBRTQxRDlGNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJdpDDQOJubTcyOPK/Yw9NUDw
M+JbcAjDRI3YoSREI590VAsTvVu4llsJAy7F1ePYC2PJ7SE2O/kQIDU9ZWbOhH/7
3gH2+2469NqGIo5lJg8PQy+DYRs+R7nQlTy5aue+dH1D1cARckEYMqibQyHBp83a
3xUIAxVnwhREzO7kuhPhUYpWIne1IGpgRueD6pw/nG72n0jLztjUKiJX9mbBpTnk
U0L1VySC+x3gFGv3pPkODBDztlYvUtoKKTKJV3KQ6HKTXgPrcJr2TecREFnwkpPU
Qw1WzBevQuWY2Xe8LzksMC6pgMMaXylu/7MM2amJNCKDugZx8m24Oq/ago83AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnM6u578u8Ii0NaihP1/R+uQdn0kwHwYDVR0j
BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw
N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtS2F6YXk5WFdvN2VaalR0UVU4b1FXdkxzVEhhTkZlYW5OV1o2VFpydE1lLzEv
MzIzODMwMzQzYTMzNjUzNDM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM2
MzUzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+RDANBgkqhkiG9w0BAQsFAAOCAQEAJusmgeO4
7IsPNrHnvf3S3b1Ilck/hNuBAb0fGGh1qRSH851Xhuh8t4ig4gbhoJJHnQPTRCZj
GUN13GWtnC/nbTlep1KJgJ4NvSYngrt2JP2GOFDmIzmOj9gehH3B5lKQeoThRMgy
pSctrwf+PmXOs+L2mbD27UYFMRf0o6wbXkGDAmckYa4AupqU6YNrcm8yOfUP3E3z
MbQ3qR7xZHctXVrfZGgltzcYUTvVZn7MHuYfJ+vOTMPLnhCtagf37EC/31Dhk64c
hOjQ+fDoLJVYxiKUi8CRKhc9kgaRof5lv/6IJTyCkHSSZretGJom7lpSwY+xqBZw
NTX7GGpRhgjjuw==
-----END CERTIFICATE-----
Generated at Wed Jun 26 00:34:33 2024 by rpki-client on console-ams.rpki-client.org