Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a343030303a3a2f33362d3336203d3e20323636343133.roa
File:                     323830343a333736633a343030303a3a2f33362d3336203d3e20323636343133.roa (raw, json)
Hash identifier:          jf0r5emziTShCfc6Y9+aSZHCWUMx0RWGQzxn6O4DTCU=
Subject key identifier:   E0:0E:A5:3E:C1:6E:7D:2A:F9:2D:68:1D:27:04:33:BB:CF:73:68:E1
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       436C1BF2EBE5DA3A6254940A496F2E8C47BC28D9
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a343030303a3a2f33362d3336203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:21 +0000
ROA not before:           Thu 04 Jul 2024 02:12:21 +0000
ROA not after:            Thu 03 Jul 2025 02:17:21 +0000
asID:                     266413
IP address blocks:        2804:376c:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 02:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6c:1b:f2:eb:e5:da:3a:62:54:94:0a:49:6f:2e:8c:47:bc:28:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:21 2024 GMT
            Not After : Jul  3 02:17:21 2025 GMT
        Subject: CN=E00EA53EC16E7D2AF92D681D270433BBCF7368E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:2f:88:af:7f:39:9d:de:ee:64:5e:b6:14:
                    82:be:95:b2:52:73:62:53:02:f8:4d:d8:26:19:d7:
                    12:c3:33:e7:f3:84:a9:14:e4:1a:40:dc:60:0e:07:
                    61:8c:2a:10:3c:48:8a:e2:f3:56:bf:ab:6b:26:b7:
                    43:e7:9c:1f:21:3b:40:24:86:a1:a0:0c:02:03:b6:
                    e6:56:71:60:e2:47:24:b2:60:7b:38:6d:1c:5a:43:
                    f7:a6:b7:af:3a:5d:f7:69:8e:e2:de:e5:fa:63:72:
                    28:25:5f:af:b6:e0:61:d3:b4:27:54:8f:48:7c:0b:
                    03:32:13:cb:ec:27:3e:86:50:01:6c:f0:45:ee:a4:
                    83:5b:1c:59:97:2b:8a:82:ef:d0:2f:84:58:12:d4:
                    d3:ad:c1:32:da:60:c3:be:89:2d:e4:de:2b:2b:3d:
                    4d:69:75:e6:24:d6:90:d5:ed:df:96:80:a4:71:4d:
                    98:50:8b:8f:78:b6:aa:c5:a8:8f:f9:61:4a:3e:b7:
                    9b:4f:d9:db:bc:3b:88:8c:2f:88:80:51:b3:a5:b1:
                    24:9d:9d:f2:4a:fd:0b:57:7f:da:7f:8c:0b:c2:9d:
                    04:ed:cb:d9:aa:34:a8:9a:a7:28:2f:8a:d2:41:f0:
                    47:0b:d0:df:45:f8:48:ee:28:91:c8:f3:47:c6:4a:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0E:A5:3E:C1:6E:7D:2A:F9:2D:68:1D:27:04:33:BB:CF:73:68:E1
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a343030303a3a2f33362d3336203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:85:62:75:7e:2b:0e:d1:ef:68:ff:6b:14:7f:1a:19:76:5b:
         33:a1:9b:b1:6b:45:d5:c6:2e:c0:96:18:9b:ec:52:6b:aa:12:
         13:d4:d5:1b:28:cf:b6:ae:70:01:84:46:89:61:a2:7a:c9:4f:
         ba:d1:48:b4:33:0b:b6:52:04:3b:9f:25:b2:a5:21:ff:1e:75:
         d5:58:3e:48:64:1d:ad:36:e1:d5:1f:55:41:0b:9d:0a:7e:55:
         d7:ee:45:4d:af:7c:1a:bf:81:8a:47:eb:42:5d:92:0d:92:59:
         80:10:fe:0f:f3:6d:c3:5f:76:05:dd:5b:ef:d9:10:25:19:d7:
         dc:43:7e:77:2b:10:27:2c:9c:47:92:48:db:82:30:17:e7:ac:
         6b:cd:f0:8a:e7:c5:fc:4a:91:b6:fa:ff:bc:45:09:d4:08:dd:
         32:19:73:ca:d9:18:32:ae:68:b6:8d:be:80:4e:b8:84:33:75:
         b4:d0:e7:fb:d2:53:37:83:b7:4e:94:d5:a8:09:0a:53:42:12:
         c4:67:05:6f:ce:4b:91:ca:44:6a:b3:92:05:87:b6:96:27:78:
         93:a5:07:90:ff:a9:52:2e:49:28:1c:e7:e8:a4:e8:f6:ce:54:
         bf:68:cc:26:5e:6f:f5:f5:ba:8b:c8:6e:ec:95:10:c2:86:27:
         28:99:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 04:33:23 2024 by rpki-client on console-fra.rpki-client.org