Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a373737373a3a2f34382d3438203d3e20333936393832.roa
File:                     323830343a333736633a373737373a3a2f34382d3438203d3e20333936393832.roa (raw, json)
Hash identifier:          f+2KEhiGSNEcv70gWkwMF6Whkm75W/zOXpQy9xlaQTw=
Subject key identifier:   A4:3C:06:17:B5:DE:AE:22:4F:73:46:97:2E:24:29:23:82:D2:C2:30
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       6263B7E9C91E5A916E5A1978972C71D2AA67B7D1
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a373737373a3a2f34382d3438203d3e20333936393832.roa
Signing time:             Tue 22 Oct 2024 01:36:14 +0000
ROA not before:           Tue 22 Oct 2024 01:31:14 +0000
ROA not after:            Tue 21 Oct 2025 01:36:14 +0000
asID:                     396982
IP address blocks:        2804:376c:7777::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 11:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:63:b7:e9:c9:1e:5a:91:6e:5a:19:78:97:2c:71:d2:aa:67:b7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Oct 22 01:31:14 2024 GMT
            Not After : Oct 21 01:36:14 2025 GMT
        Subject: CN=A43C0617B5DEAE224F7346972E24292382D2C230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:5b:53:95:b2:42:34:e8:39:bc:52:11:95:
                    a8:e1:0e:9c:66:86:69:82:96:41:95:b9:ed:cb:3f:
                    13:e5:ad:1d:9f:6f:4e:ef:14:3f:d6:81:cd:5e:da:
                    f5:8f:ec:82:27:a6:9a:66:20:1d:a4:2b:64:4d:ca:
                    16:6e:4c:5e:cc:a1:91:6c:04:6e:c6:20:7e:76:7f:
                    c1:bd:6a:62:d2:2c:31:62:eb:4c:bd:41:e7:3c:e5:
                    cf:0d:75:17:24:d3:a7:50:aa:39:62:44:73:8f:d3:
                    63:cb:3d:49:73:72:f4:61:8c:0e:f3:3c:c2:db:7e:
                    a7:3b:5e:2a:70:11:01:e5:a0:a3:a8:e5:ba:56:ae:
                    42:72:90:9a:35:ba:51:35:1d:0f:9d:41:36:1b:9a:
                    1c:59:89:84:02:77:49:85:8b:31:f4:e8:24:c4:b9:
                    47:0f:d8:6b:bf:55:f8:08:d4:1c:6c:b6:b5:15:ef:
                    db:cb:50:83:cf:57:83:78:16:c4:4a:49:58:a2:db:
                    c8:e0:e9:8e:db:af:a9:74:c2:a7:a1:79:3d:dc:39:
                    1a:d3:39:31:27:c8:1f:de:8e:8a:95:41:3b:01:73:
                    ac:59:1e:91:fa:69:b9:ed:1c:3a:4d:48:47:4c:80:
                    04:9f:37:50:3b:e2:fb:e0:d3:39:ac:71:64:82:0e:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:06:17:B5:DE:AE:22:4F:73:46:97:2E:24:29:23:82:D2:C2:30
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a373737373a3a2f34382d3438203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c:7777::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:1b:a6:6c:2e:7d:1e:f1:bf:b0:22:f7:2d:f3:d2:f5:49:de:
         c3:67:ac:30:f2:59:91:05:56:9d:3a:41:93:c4:4f:81:ba:a9:
         10:d3:52:76:d6:44:a7:53:34:4e:51:97:6c:77:42:32:9a:71:
         95:94:0e:64:4e:e1:8d:d4:70:92:e3:d4:d5:7b:67:9b:69:95:
         db:36:29:28:38:e9:bd:66:19:03:f0:68:51:ae:13:dd:2c:57:
         c7:cf:60:6b:a2:82:8c:af:81:33:b9:9e:bf:bf:f7:82:a3:db:
         8f:02:99:12:9c:5f:31:e9:15:d9:a8:1d:bd:be:f4:3f:68:fc:
         22:47:10:81:b7:6c:34:47:b6:0b:93:5c:52:b7:17:8e:49:0c:
         93:66:02:91:f0:3b:74:cd:f0:4c:ff:71:ef:21:8a:54:2e:9b:
         ca:a8:6a:d7:9e:1d:4e:15:53:56:59:9e:18:af:d6:dc:c3:19:
         0e:3a:db:e7:4f:d9:ce:a8:4d:71:88:e1:2a:62:55:2b:9c:c9:
         8c:b0:36:c1:1f:5d:27:c2:71:2d:46:60:32:96:31:8e:c6:ef:
         d5:65:89:cf:b1:a9:3b:56:4d:13:b7:73:12:3d:a9:1c:40:1a:
         e8:54:32:3b:0a:7e:de:4a:f0:bf:2d:0e:2f:4f:47:52:45:b9:
         cd:02:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:52:11 2024 by rpki-client on console-fra.rpki-client.org