Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a3a2f33342d3334203d3e20323639353339.roa
File:                     323830343a363632633a3a2f33342d3334203d3e20323639353339.roa (raw, json)
Hash identifier:          oNopQkiepDWfNXZG8BwsAiz0fRgMjdQs8Q6X656nV+w=
Subject key identifier:   B7:AD:1E:24:1B:46:35:13:64:79:9F:19:DE:64:4D:92:D3:2A:38:D8
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       51099014FFA00687C2B346385015253955283AFE
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a3a2f33342d3334203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:27 +0000
ROA not before:           Thu 04 Apr 2024 15:50:27 +0000
ROA not after:            Thu 03 Apr 2025 15:55:27 +0000
asID:                     269539
IP address blocks:        2804:662c::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:09:90:14:ff:a0:06:87:c2:b3:46:38:50:15:25:39:55:28:3a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:27 2024 GMT
            Not After : Apr  3 15:55:27 2025 GMT
        Subject: CN=B7AD1E241B46351364799F19DE644D92D32A38D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:4f:f9:0f:47:18:57:40:5b:89:c9:a7:1c:
                    61:9f:86:2c:02:70:75:ea:51:eb:dc:33:17:88:c2:
                    ba:ad:38:bf:93:22:13:f1:8e:f9:db:b5:42:4e:e8:
                    42:4e:10:2b:66:78:22:73:9a:8e:3a:fe:69:66:12:
                    54:7f:57:e3:65:a6:09:ab:50:aa:18:10:50:c0:fd:
                    ef:5f:7c:84:99:6d:ac:46:13:25:e2:97:1c:ff:7d:
                    e3:af:60:18:83:36:61:e9:f1:67:b1:3f:32:d7:3c:
                    4d:fa:e8:90:25:de:df:44:d5:34:c4:db:4a:a0:b7:
                    15:ca:a6:e2:f0:32:d1:f7:11:e7:09:c1:74:75:65:
                    67:08:a7:de:28:96:04:f1:b0:b4:ce:dc:6a:9c:70:
                    6e:55:78:c0:06:6c:2b:81:3e:8f:81:8d:b0:81:94:
                    3b:2f:88:b1:59:6d:b2:98:c1:dc:0f:b9:89:41:37:
                    f3:34:66:4e:79:ed:2f:e0:5e:d2:5b:d1:db:ae:fc:
                    74:ce:2d:55:02:5f:fd:81:8e:ee:95:59:c1:93:7d:
                    98:03:49:b5:ee:25:90:c5:3a:be:83:45:87:cb:1d:
                    cc:73:b9:f0:cc:01:fc:27:15:96:02:5e:32:32:98:
                    2c:b9:1e:80:2a:28:35:e4:a6:00:60:1d:ee:70:cc:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AD:1E:24:1B:46:35:13:64:79:9F:19:DE:64:4D:92:D3:2A:38:D8
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a3a2f33342d3334203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c::/34

    Signature Algorithm: sha256WithRSAEncryption
         cf:7b:cd:75:2e:58:10:f2:9a:de:63:8f:e8:31:cc:bb:13:57:
         81:86:36:da:ff:f2:ca:eb:d7:a7:68:77:78:c1:3a:b0:73:6f:
         43:8c:30:53:6a:ef:19:f7:17:fb:ea:3e:80:02:89:ce:50:c6:
         b3:9e:c1:92:5e:b5:74:d4:1a:06:a3:61:82:93:cb:ac:09:69:
         ef:b3:37:66:8f:b0:9c:31:07:20:62:aa:f8:10:77:e1:37:be:
         9f:ec:27:0a:2e:55:f8:ad:a7:c5:16:25:6b:56:35:ac:58:5a:
         27:48:59:b7:76:9f:43:b7:ed:75:1b:5b:ed:5a:5a:d1:58:7b:
         8f:94:75:b6:fc:65:8f:61:03:63:a3:f5:18:e5:93:45:63:e7:
         15:e4:99:51:fe:1b:10:60:39:3f:ee:8b:c2:87:74:13:16:c9:
         0e:62:c7:f2:c2:2c:76:2f:33:6b:55:78:8d:09:20:51:08:7a:
         d9:1a:a2:8b:ef:25:a1:c0:5f:fd:11:11:ec:0c:34:bd:77:12:
         11:03:61:42:79:41:1a:49:50:ca:e7:64:8b:08:7b:b3:21:d1:
         2d:22:57:32:e1:9a:eb:86:19:3e:5e:de:b2:91:5c:97:f5:d0:
         c4:4c:82:ff:b6:0d:4c:6f:36:bb:9d:48:71:b9:f9:bc:1f:59:
         c6:9f:76:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUQmQFP+gBofCs0Y4UBUlOVUoOv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFCOEJGQzRERjVGNTUzQTVCMzg2OTQwNDVFMEU0N0Yw
RjIzRUI2MzAeFw0yNDA0MDQxNTUwMjdaFw0yNTA0MDMxNTU1MjdaMDMxMTAvBgNV
BAMTKEI3QUQxRTI0MUI0NjM1MTM2NDc5OUYxOURFNjQ0RDkyRDMyQTM4RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJm0/5D0cYV0BbicmnHGGfhiwC
cHXqUevcMxeIwrqtOL+TIhPxjvnbtUJO6EJOECtmeCJzmo46/mlmElR/V+Nlpgmr
UKoYEFDA/e9ffISZbaxGEyXilxz/feOvYBiDNmHp8WexPzLXPE366JAl3t9E1TTE
20qgtxXKpuLwMtH3EecJwXR1ZWcIp94olgTxsLTO3GqccG5VeMAGbCuBPo+BjbCB
lDsviLFZbbKYwdwPuYlBN/M0Zk557S/gXtJb0duu/HTOLVUCX/2Bju6VWcGTfZgD
SbXuJZDFOr6DRYfLHcxzufDMAfwnFZYCXjIymCy5HoAqKDXkpgBgHe5wzJ17AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUt60eJBtGNRNkeZ8Z3mRNktMqONgwHwYDVR0j
BBgwFoAUYbi/xN9fVTpbOGlAReDkfw8j62MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RwUWlvN0I5N2h1OEhXSzFtcUFES05BM0toM1M1bUhudktrNjFTY1Jq
MTUvMS82MUI4QkZDNERGNUY1NTNBNUIzODY5NDA0NUUwRTQ3RjBGMjNFQjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxQjhCRkM0REY1RjU1M0E1
QjM4Njk0MDQ1RTBFNDdGMEYyM0VCNjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0cFFpbzdCOTdodThIV0sxbXFBREtOQTNLaDNTNW1IbnZLazYxU2NSajE1LzEv
MzIzODMwMzQzYTM2MzYzMjYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzUzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARmLAAwDQYJKoZIhvcNAQELBQADggEBAM97zXUu
WBDymt5jj+gxzLsTV4GGNtr/8srr16dod3jBOrBzb0OMMFNq7xn3F/vqPoACic5Q
xrOewZJetXTUGgajYYKTy6wJae+zN2aPsJwxByBiqvgQd+E3vp/sJwouVfitp8UW
JWtWNaxYWidIWbd2n0O37XUbW+1aWtFYe4+Udbb8ZY9hA2Oj9Rjlk0Vj5xXkmVH+
GxBgOT/ui8KHdBMWyQ5ix/LCLHYvM2tVeI0JIFEIetkaoovvJaHAX/0REewMNL13
EhEDYUJ5QRpJUMrnZIsIe7Mh0S0iVzLhmuuGGT5e3rKRXJf10MRMgv+2DUxvNrud
SHG5+bwfWcafdgQ=
-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org