Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a343030303a3a2f33342d3334203d3e20323639353339.roa
File:                     323830343a363632633a343030303a3a2f33342d3334203d3e20323639353339.roa (raw, json)
Hash identifier:          TYfKEVz2tNmokE9LorZksAFDjkGkIfCdOMOaB2QMEhg=
Subject key identifier:   7F:CE:98:0E:25:27:83:28:9F:9C:4A:10:0D:9F:71:0A:7F:90:93:0E
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       45E04FB421034776A136CA4519EEB63993EC5C33
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a343030303a3a2f33342d3334203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:27 +0000
ROA not before:           Thu 04 Apr 2024 15:50:27 +0000
ROA not after:            Thu 03 Apr 2025 15:55:27 +0000
asID:                     269539
IP address blocks:        2804:662c:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e0:4f:b4:21:03:47:76:a1:36:ca:45:19:ee:b6:39:93:ec:5c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:27 2024 GMT
            Not After : Apr  3 15:55:27 2025 GMT
        Subject: CN=7FCE980E252783289F9C4A100D9F710A7F90930E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:72:df:92:90:a6:26:92:b2:dc:79:04:6d:
                    68:05:5c:ce:75:62:be:88:75:27:23:5c:a3:c8:2d:
                    a5:10:2a:58:a9:a1:95:a1:87:50:35:05:99:05:24:
                    53:c0:6d:59:5d:2b:d5:68:34:41:d2:ee:90:70:ad:
                    d9:e7:ee:2d:54:ac:1c:c4:d7:86:1b:82:5e:27:32:
                    0e:de:e2:3d:3d:11:35:9c:90:89:07:af:a0:21:67:
                    b8:e5:f6:7d:15:cb:ea:88:47:67:2d:06:ee:04:05:
                    d4:7a:1e:58:7b:c8:c2:a4:31:76:17:fd:30:1a:ca:
                    e3:af:5e:cb:6e:b3:6c:4f:0c:3a:3f:94:af:bc:04:
                    78:15:cb:51:7a:87:cf:73:76:03:e4:d8:39:82:83:
                    f2:2e:43:eb:ed:fc:4d:5c:ff:9d:85:09:6f:49:0c:
                    44:4a:9e:27:83:a1:d7:39:63:48:af:a9:40:6d:ce:
                    50:0f:66:bb:0b:33:d2:c7:54:0b:3d:90:86:d3:05:
                    8c:eb:3f:83:d1:79:b9:b6:5b:40:9a:e0:62:e3:1e:
                    39:a0:f7:b7:d8:9a:c5:d5:b6:82:1f:28:c0:87:05:
                    0a:e0:23:5a:33:71:e2:7b:64:78:5c:1c:2f:e4:d3:
                    d4:ee:1b:5c:fe:ef:fb:87:76:06:c7:2d:80:68:87:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CE:98:0E:25:27:83:28:9F:9C:4A:10:0D:9F:71:0A:7F:90:93:0E
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a343030303a3a2f33342d3334203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:ff:f1:09:a7:32:73:d4:75:00:2d:f9:dc:50:ac:d5:89:
         13:11:0b:9f:49:73:85:89:55:c2:c3:c5:0d:91:f6:51:4d:ff:
         ea:fc:23:f3:92:95:f5:65:f9:e5:3f:ae:1f:99:6f:81:1b:74:
         ff:61:e5:28:d8:31:d7:38:a6:4f:6c:4b:94:51:e9:12:1f:fc:
         45:2b:91:96:d9:62:45:26:50:ef:80:ab:a1:06:70:88:d0:a8:
         20:d1:d8:c7:7f:93:5f:0e:91:ed:8b:e7:3b:2e:f3:42:e7:7e:
         f9:de:fa:f2:fe:99:17:3a:5b:af:be:43:df:ec:d6:20:5e:04:
         f3:6e:30:80:c7:52:38:64:30:18:ac:6a:a6:27:07:20:81:a3:
         58:4a:3a:8e:fa:76:e6:d9:07:b3:d8:1b:78:1a:f6:88:2a:40:
         5d:d8:d6:45:1a:a9:67:85:ac:fb:b4:88:1e:bb:c2:ea:65:c1:
         65:4d:32:da:e9:f0:bd:30:bb:34:55:7b:e8:98:e8:5c:5f:db:
         15:32:e2:c0:43:31:5a:dd:92:42:3d:45:c4:49:d1:41:59:b4:
         9d:5e:ea:93:9d:f3:fa:bc:9d:4c:4b:0a:bf:56:d0:34:ab:59:
         10:ba:0b:7b:d0:23:c8:ee:5f:6b:53:c8:7d:ae:c0:3c:68:f3:
         10:b5:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org