Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a383030303a3a2f33362d3336203d3e20323636343133.roa
File:                     323830343a333736633a383030303a3a2f33362d3336203d3e20323636343133.roa (raw, json)
Hash identifier:          gond3dlouYcDLHRZw9Kh4zyAu+HSy5+hM2I9ZzMNaoE=
Subject key identifier:   38:32:F3:D0:72:55:25:75:8E:74:08:37:F1:D0:26:4E:6B:B2:D1:7F
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       5DA96CB1173AE958DEB516DBA230C38BBA592ACC
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a383030303a3a2f33362d3336203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:20 +0000
ROA not before:           Thu 04 Jul 2024 02:12:20 +0000
ROA not after:            Thu 03 Jul 2025 02:17:20 +0000
asID:                     266413
IP address blocks:        2804:376c:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a9:6c:b1:17:3a:e9:58:de:b5:16:db:a2:30:c3:8b:ba:59:2a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:20 2024 GMT
            Not After : Jul  3 02:17:20 2025 GMT
        Subject: CN=3832F3D0725525758E740837F1D0264E6BB2D17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4d:d6:d5:88:64:1d:14:dd:fa:30:65:f6:26:
                    9b:d2:55:3c:15:15:0a:32:32:ed:f3:6d:3b:d5:1e:
                    97:c5:8a:39:2e:e8:96:7a:6b:36:d9:19:d9:29:9c:
                    3b:76:bb:4d:f2:5e:12:b0:e9:da:b2:a7:02:53:c5:
                    e5:a8:c9:3e:b9:15:0f:ce:71:be:7b:dc:d6:79:71:
                    85:e8:8c:83:b3:04:fc:24:cc:c5:73:d4:02:79:6a:
                    12:f5:d6:51:aa:af:13:38:b5:3d:4f:3c:46:b2:0b:
                    4f:be:c1:4c:28:88:f8:04:09:80:44:91:dc:9d:2d:
                    af:ea:ea:65:0e:7b:df:d0:47:ad:93:ba:54:bd:b6:
                    39:86:8a:bb:ac:8c:33:23:f7:7f:78:e7:aa:12:58:
                    15:55:d6:b6:0d:0d:13:7b:e5:5c:45:f8:aa:5a:54:
                    f5:04:cd:f8:10:8a:de:ba:d8:2c:51:14:19:12:c4:
                    18:cd:51:b1:18:95:e2:07:5b:e8:59:8b:b0:0b:6a:
                    36:2d:d9:fc:dd:41:39:c3:e6:25:82:48:f9:60:b0:
                    75:48:b0:dc:8b:02:42:e8:c2:0f:e5:80:82:9e:6a:
                    4e:44:06:64:0b:64:d1:69:a9:6b:77:c8:4e:10:9c:
                    83:14:f1:1b:58:af:cd:74:87:17:b2:26:cd:5d:3d:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:32:F3:D0:72:55:25:75:8E:74:08:37:F1:D0:26:4E:6B:B2:D1:7F
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a383030303a3a2f33362d3336203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:fe:93:81:9e:d0:fc:d6:5b:66:34:8b:09:06:c3:2b:84:58:
         c3:ed:18:98:3d:da:d0:68:0d:38:22:0a:e5:a6:d0:6f:29:77:
         e9:b5:f3:43:f9:7b:7e:45:7f:b1:c4:c6:2a:8f:6b:94:c0:4f:
         30:ea:34:ab:18:66:ba:38:7e:da:46:97:7b:ab:f4:ba:36:61:
         cb:52:8e:2a:e0:97:0e:81:e6:6f:9d:b6:27:4e:48:9a:80:39:
         54:e4:49:d9:b8:9d:4b:2d:6c:9e:3a:58:cf:44:ea:b8:25:9c:
         ad:fd:65:be:3a:6a:ee:b8:96:96:36:11:ba:f3:44:73:10:72:
         ff:b3:34:14:82:81:46:0d:84:1f:2c:15:1c:69:91:29:58:1a:
         fd:c1:62:f0:6a:49:88:04:c2:30:e0:39:45:bb:d0:16:09:2b:
         84:58:fa:5d:9a:4c:7a:2e:0c:00:98:0d:fc:11:3b:91:22:ec:
         2c:fb:5c:6c:7f:72:de:5e:87:cc:59:3c:b7:b8:94:ac:d9:ca:
         dd:9b:8c:d6:24:f3:59:9f:c3:24:05:c8:40:7f:34:61:ae:4f:
         ca:8d:2f:37:92:02:0f:67:72:29:c7:4e:df:be:70:33:06:64:
         20:8b:45:92:2e:b8:2c:b7:50:48:81:d5:e1:b0:af:47:30:b9:
         30:9f:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 04:33:23 2024 by rpki-client on console-fra.rpki-client.org