Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33332d3333203d3e20323636343133.roa
File:                     323830343a333736633a3a2f33332d3333203d3e20323636343133.roa (raw, json)
Hash identifier:          PAbzZWdHWFdPswuPaEABTE305Vxorjbzvdc73J+eWJ4=
Subject key identifier:   AC:8C:DC:23:6B:64:AA:3A:25:43:FC:D9:80:C9:13:21:72:B7:7D:95
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       37A5A578DD7854533D5312CDAFB85E75D2D4E097
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33332d3333203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:20 +0000
ROA not before:           Thu 04 Jul 2024 02:12:20 +0000
ROA not after:            Thu 03 Jul 2025 02:17:20 +0000
asID:                     266413
IP address blocks:        2804:376c::/33 maxlen: 33

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 02:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a5:a5:78:dd:78:54:53:3d:53:12:cd:af:b8:5e:75:d2:d4:e0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:20 2024 GMT
            Not After : Jul  3 02:17:20 2025 GMT
        Subject: CN=AC8CDC236B64AA3A2543FCD980C9132172B77D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:e7:16:5f:4d:6f:f2:0f:2e:bf:f5:27:df:
                    c7:5d:72:f9:f7:d3:e4:9c:68:9e:26:16:06:df:84:
                    5a:5e:83:5b:4d:77:06:87:ab:78:d6:d9:54:d8:0c:
                    6d:f3:77:fe:d7:7b:1b:0a:0d:5b:18:9d:7a:c5:92:
                    33:29:d8:c4:32:e6:6e:d1:0b:22:56:82:96:5f:32:
                    71:8a:f2:92:5c:20:4c:a3:24:09:ae:5a:a7:3a:8a:
                    14:72:84:cf:3e:34:1a:00:e8:02:d1:f6:d1:98:47:
                    6b:11:af:ff:21:96:8b:31:9c:68:66:15:11:a4:70:
                    fa:c0:ec:84:0c:c3:5e:78:4a:0f:b5:6b:75:09:76:
                    85:0c:87:9b:eb:94:f3:93:e1:79:86:de:d4:d2:4d:
                    d7:0f:96:c3:08:2c:23:61:44:a3:a3:92:a8:1e:28:
                    32:72:9d:27:04:c8:d6:80:d5:0e:41:e1:ee:99:29:
                    70:cb:77:b7:23:58:a6:b3:7c:82:6f:59:b3:9c:21:
                    ea:6e:9b:2e:cb:5d:0f:96:3b:7c:78:73:9a:fe:2d:
                    2b:4d:70:80:4d:dd:a1:76:84:50:a8:d8:3f:0c:11:
                    e8:27:91:cd:14:fd:f8:53:fe:f1:92:44:bb:46:33:
                    47:c2:3e:62:63:f7:06:eb:e9:be:c4:80:28:1f:ad:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:DC:23:6B:64:AA:3A:25:43:FC:D9:80:C9:13:21:72:B7:7D:95
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33332d3333203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c::/33

    Signature Algorithm: sha256WithRSAEncryption
         c3:01:86:ab:07:b4:f4:3c:cb:25:7c:6c:6e:04:2a:57:c9:80:
         33:3c:09:37:66:7a:26:9b:8c:39:2c:8c:c4:81:45:48:c5:df:
         ef:f3:df:c4:b1:a8:c0:4e:9f:6d:28:e2:05:3a:0e:04:75:f6:
         19:c9:50:31:74:d4:3d:43:de:6d:73:65:dd:a9:ec:99:78:92:
         43:1e:e6:6c:3d:60:cc:2d:2e:c9:97:1a:62:32:12:a1:c8:fe:
         b8:74:8a:c2:b7:26:d2:8a:ad:df:94:a9:42:26:32:34:5e:24:
         12:b1:af:78:ac:46:34:81:6b:fa:1d:3d:9d:e2:d0:55:92:ff:
         ad:e5:05:54:c2:a0:33:61:87:eb:f9:b4:3c:fa:a9:93:a1:70:
         40:11:e3:ba:a4:68:78:9c:2d:64:67:95:01:d0:e5:a8:f4:ca:
         e3:9a:c1:d2:92:d0:6c:83:7a:df:88:13:0e:6d:7d:37:74:76:
         6e:0b:e4:b2:62:11:18:b5:f3:c2:03:e2:ea:69:1a:01:c6:ea:
         04:d2:7b:f4:81:41:9f:3c:43:c0:9b:3e:e0:78:10:46:7b:95:
         87:93:13:cf:a1:c0:b6:e5:ba:c7:06:57:79:b8:51:9f:c9:85:
         1d:73:75:21:9e:93:d0:c3:bf:c4:47:bc:85:a7:7d:35:6f:19:
         59:53:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 04:33:23 2024 by rpki-client on console-fra.rpki-client.org