Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a383030303a3a2f33332d3333203d3e20323639353339.roa
File:                     323830343a363632633a383030303a3a2f33332d3333203d3e20323639353339.roa (raw, json)
Hash identifier:          oD6utfZVYoFgobnKwMegY+QOd39XiPDZ+x8eehxBC/I=
Subject key identifier:   3E:32:5C:76:F7:89:78:BB:31:74:DA:D7:EE:27:91:84:88:17:C1:59
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       02EBDDEE325848DC75C33535A2CD87DCB5D6B10B
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a383030303a3a2f33332d3333203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:28 +0000
ROA not before:           Thu 04 Apr 2024 15:50:28 +0000
ROA not after:            Thu 03 Apr 2025 15:55:28 +0000
asID:                     269539
IP address blocks:        2804:662c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:eb:dd:ee:32:58:48:dc:75:c3:35:35:a2:cd:87:dc:b5:d6:b1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:28 2024 GMT
            Not After : Apr  3 15:55:28 2025 GMT
        Subject: CN=3E325C76F78978BB3174DAD7EE2791848817C159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:d2:4b:96:e8:62:a5:6e:6a:44:63:12:98:
                    5a:c9:f0:ce:99:4f:20:fa:87:de:1d:b4:7b:2a:3c:
                    d8:3d:f0:e6:4e:1d:0e:78:cb:6c:6c:c5:8c:90:f1:
                    e0:bb:6f:12:2e:c4:1f:f3:c5:5e:a0:4a:e6:af:c4:
                    88:52:7f:14:81:d3:44:f5:af:c7:0d:8d:82:c1:72:
                    93:bc:ce:fc:46:8d:55:fa:9b:99:0e:9c:35:ad:a2:
                    29:a4:db:dd:b2:0e:d9:de:41:88:bf:22:be:22:a4:
                    a5:73:17:c3:c0:cf:10:39:5c:2c:c4:37:f5:f9:3d:
                    ed:2b:1e:91:a5:84:07:ca:9a:9a:b9:e2:62:c9:f7:
                    e2:f7:e8:aa:10:ba:94:69:5d:cf:19:19:0e:87:1b:
                    5d:1e:ab:c9:8c:33:a6:17:8a:0e:36:e6:fb:63:18:
                    29:87:9e:86:d3:12:83:ff:dc:aa:70:34:6a:8d:41:
                    9d:86:49:38:fe:07:f5:17:bc:9a:9f:5a:99:0f:90:
                    e7:ef:55:bb:08:f4:83:6e:8e:eb:5b:c5:b1:be:b4:
                    cb:dc:99:34:6b:97:82:41:9f:2e:dc:37:2e:4b:88:
                    a6:e0:37:78:49:c9:3e:0a:5e:83:80:e2:63:48:3e:
                    bd:1d:cb:17:99:4f:71:fa:a0:50:80:9d:4f:e9:72:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:32:5C:76:F7:89:78:BB:31:74:DA:D7:EE:27:91:84:88:17:C1:59
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a383030303a3a2f33332d3333203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ca:59:3b:1e:49:27:1a:36:e1:6c:65:80:da:a6:02:87:d9:41:
         8f:ba:78:76:43:78:1b:74:59:8a:53:cc:46:3e:d7:4c:ec:75:
         a5:4d:7b:68:37:83:19:91:52:52:f3:b6:22:33:d5:94:a1:75:
         ce:1d:18:6d:9f:7b:f1:7b:f8:10:49:6b:94:af:3e:f7:cb:4a:
         d0:ba:41:20:c1:9e:56:09:db:b2:65:e1:18:4b:6b:51:09:a5:
         9a:3c:d2:63:4d:40:a7:34:0e:ce:2b:1b:91:49:2a:d8:ab:ae:
         f9:4e:9f:70:bb:89:0a:92:a1:a4:ad:05:c7:af:5d:22:17:3b:
         fa:ce:74:f4:ff:a1:96:2d:68:d3:41:fa:aa:94:7d:36:c5:51:
         87:1e:94:ec:62:cb:47:d0:0a:c8:2a:7e:7e:e2:68:23:35:58:
         4f:b6:a3:8e:7c:6c:f6:b3:38:d8:57:8d:16:af:d8:36:88:59:
         59:47:e7:b2:09:22:d8:ac:b2:d4:b2:e0:71:b7:5a:2a:3a:b5:
         60:ec:ac:a6:ab:45:fa:6a:5f:11:9b:e7:ff:6e:96:d7:18:ee:
         cd:dd:64:d6:0a:41:85:bf:59:37:18:b8:37:3a:eb:79:1f:28:
         3b:df:59:72:98:bd:12:06:15:72:75:23:62:b5:9b:3f:f6:b7:
         57:f3:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org