Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a633030303a3a2f33342d3334203d3e20323639353339.roa
File:                     323830343a363632633a633030303a3a2f33342d3334203d3e20323639353339.roa (raw, json)
Hash identifier:          dUqP8TAJJF/kdbfnUu+VfmAGo8HP99WdFO6FqVwlQ/c=
Subject key identifier:   D2:EF:1D:A4:EB:07:1A:2D:20:83:8E:43:81:E8:9A:29:FD:92:37:FD
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       3279E006918F73FDE4581F686A899DB33F557433
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a633030303a3a2f33342d3334203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:29 +0000
ROA not before:           Thu 04 Apr 2024 15:50:29 +0000
ROA not after:            Thu 03 Apr 2025 15:55:29 +0000
asID:                     269539
IP address blocks:        2804:662c:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:79:e0:06:91:8f:73:fd:e4:58:1f:68:6a:89:9d:b3:3f:55:74:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:29 2024 GMT
            Not After : Apr  3 15:55:29 2025 GMT
        Subject: CN=D2EF1DA4EB071A2D20838E4381E89A29FD9237FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:ca:38:e5:76:05:c9:42:f7:c2:05:09:b8:
                    72:12:84:7f:10:af:c8:99:a4:1e:b7:59:16:35:66:
                    3d:12:27:9c:3a:5c:cd:8b:d5:33:6a:d4:f2:7b:de:
                    4d:30:3e:a0:28:9e:e3:df:85:79:d4:7e:e3:1e:33:
                    6c:c1:35:7d:e4:52:a3:49:c7:44:50:9c:35:2f:28:
                    f8:a1:30:33:25:24:69:2d:57:65:9e:c3:bd:fe:5c:
                    84:9a:6e:f3:5b:9b:05:c9:2d:12:2d:3c:93:d2:fe:
                    e1:83:ce:3b:ed:83:ef:d3:90:1c:bf:20:31:e4:64:
                    99:d5:11:a3:97:de:96:a1:2b:34:7f:6c:26:e6:62:
                    3d:89:8a:6f:54:2d:2c:5f:38:7c:6b:3a:0f:89:5c:
                    81:6a:b9:7c:fb:62:28:fa:c9:2c:d0:8d:85:10:90:
                    88:6b:7e:93:82:f6:f9:31:c5:d4:d8:c3:ac:82:41:
                    d9:aa:24:6c:fe:c4:ff:27:ab:4a:4a:3b:60:21:6d:
                    e2:89:29:2b:6e:a3:60:bb:dd:55:9c:36:83:15:59:
                    e8:93:e4:3b:10:4a:1a:f6:a0:fa:e7:0b:9e:cb:9c:
                    e7:3f:98:6a:62:dd:2e:a8:b4:d5:71:0d:2d:4c:e5:
                    43:01:c5:a4:9d:b0:96:1a:40:e1:00:b8:17:23:14:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EF:1D:A4:EB:07:1A:2D:20:83:8E:43:81:E8:9A:29:FD:92:37:FD
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a633030303a3a2f33342d3334203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b1:a2:c8:44:9f:17:02:49:9b:d9:e2:f7:57:ac:e2:38:fc:78:
         6a:73:10:70:14:67:20:ed:33:f2:e0:f0:b8:02:54:fb:71:d3:
         cf:ab:b6:45:d1:26:40:90:d3:f3:bc:f1:2c:8f:b3:53:9f:74:
         89:f5:f6:e2:57:27:44:1b:3c:af:9b:10:ca:b4:70:8c:83:f8:
         59:49:8a:0e:20:21:86:d5:5b:88:6e:b2:14:50:58:c3:16:68:
         06:d2:c2:06:2c:f8:9d:f2:c2:29:9f:e7:67:19:3b:ed:2c:80:
         f1:35:bf:ad:c6:03:82:08:48:ac:32:a7:29:3a:85:53:90:06:
         1f:1d:e7:87:ac:c5:56:23:1f:83:2b:67:25:3a:9e:a7:72:d9:
         dc:8e:12:0e:48:6c:a1:e7:e4:95:24:1b:56:35:25:56:68:3f:
         6d:e4:73:ed:09:f0:e2:e6:32:1b:bf:d9:e0:ab:fa:2f:87:d5:
         7b:11:d2:f5:49:b8:c0:28:ea:5d:6b:48:77:3f:76:1e:38:df:
         4a:4f:a3:60:9a:ab:65:ba:34:10:d7:75:fe:81:f6:dc:f5:c0:
         59:2e:1b:8b:b8:7d:b3:29:e0:99:80:f3:45:da:50:c5:73:0a:
         e8:db:fd:a6:33:28:b8:ec:98:bd:6a:89:82:db:a4:53:2f:81:
         4c:3a:cc:cb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMnngBpGPc/3kWB9oaomdsz9VdDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFCOEJGQzRERjVGNTUzQTVCMzg2OTQwNDVFMEU0N0Yw
RjIzRUI2MzAeFw0yNDA0MDQxNTUwMjlaFw0yNTA0MDMxNTU1MjlaMDMxMTAvBgNV
BAMTKEQyRUYxREE0RUIwNzFBMkQyMDgzOEU0MzgxRTg5QTI5RkQ5MjM3RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6co45XYFyUL3wgUJuHIShH8Q
r8iZpB63WRY1Zj0SJ5w6XM2L1TNq1PJ73k0wPqAonuPfhXnUfuMeM2zBNX3kUqNJ
x0RQnDUvKPihMDMlJGktV2Wew73+XISabvNbmwXJLRItPJPS/uGDzjvtg+/TkBy/
IDHkZJnVEaOX3pahKzR/bCbmYj2Jim9ULSxfOHxrOg+JXIFquXz7Yij6ySzQjYUQ
kIhrfpOC9vkxxdTYw6yCQdmqJGz+xP8nq0pKO2AhbeKJKStuo2C73VWcNoMVWeiT
5DsQShr2oPrnC57LnOc/mGpi3S6otNVxDS1M5UMBxaSdsJYaQOEAuBcjFGCfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0u8dpOsHGi0gg45DgeiaKf2SN/0wHwYDVR0j
BBgwFoAUYbi/xN9fVTpbOGlAReDkfw8j62MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RwUWlvN0I5N2h1OEhXSzFtcUFES05BM0toM1M1bUhudktrNjFTY1Jq
MTUvMS82MUI4QkZDNERGNUY1NTNBNUIzODY5NDA0NUUwRTQ3RjBGMjNFQjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxQjhCRkM0REY1RjU1M0E1
QjM4Njk0MDQ1RTBFNDdGMEYyM0VCNjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0cFFpbzdCOTdodThIV0sxbXFBREtOQTNLaDNTNW1IbnZLazYxU2NSajE1LzEv
MzIzODMwMzQzYTM2MzYzMjYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM1MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZizAMA0GCSqGSIb3DQEBCwUA
A4IBAQCxoshEnxcCSZvZ4vdXrOI4/HhqcxBwFGcg7TPy4PC4AlT7cdPPq7ZF0SZA
kNPzvPEsj7NTn3SJ9fbiVydEGzyvmxDKtHCMg/hZSYoOICGG1VuIbrIUUFjDFmgG
0sIGLPid8sIpn+dnGTvtLIDxNb+txgOCCEisMqcpOoVTkAYfHeeHrMVWIx+DK2cl
Op6nctncjhIOSGyh5+SVJBtWNSVWaD9t5HPtCfDi5jIbv9ngq/ovh9V7EdL1SbjA
KOpda0h3P3YeON9KT6NgmqtlujQQ13X+gfbc9cBZLhuLuH2zKeCZgPNF2lDFcwro
2/2mMyi47Ji9aomC26RTL4FMOszL
-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org