Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a613030303a3a2f33362d3336203d3e20323636343133.roa
File:                     323830343a333736633a613030303a3a2f33362d3336203d3e20323636343133.roa (raw, json)
Hash identifier:          RIcah0o9V1Fqnjl7Xepuht5VPUo66wSMDJeJt/LZMo0=
Subject key identifier:   D0:84:07:1D:55:C3:6A:95:12:7F:21:34:85:1C:97:DF:D4:24:61:0F
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       222A0FCA83D128F827CCC1E303FF1ADE0FC4A3D5
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a613030303a3a2f33362d3336203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:20 +0000
ROA not before:           Thu 04 Jul 2024 02:12:20 +0000
ROA not after:            Thu 03 Jul 2025 02:17:20 +0000
asID:                     266413
IP address blocks:        2804:376c:a000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2a:0f:ca:83:d1:28:f8:27:cc:c1:e3:03:ff:1a:de:0f:c4:a3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:20 2024 GMT
            Not After : Jul  3 02:17:20 2025 GMT
        Subject: CN=D084071D55C36A95127F2134851C97DFD424610F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:61:57:d9:f2:3e:fb:f8:3f:47:3c:50:2d:
                    bd:e0:0c:8f:4a:51:c9:18:7a:2a:c2:7b:29:d4:85:
                    eb:9f:f5:95:ed:ae:7b:a7:cb:42:f1:7b:4f:9c:38:
                    90:9b:6a:67:a1:12:dc:fa:4f:94:42:9d:f3:44:d5:
                    ca:0f:4f:18:df:4b:b0:9b:43:f8:76:28:6d:67:1e:
                    de:38:5e:b7:da:c5:ef:c2:d4:7c:d7:d9:3b:6f:5f:
                    db:c1:4e:70:f5:2b:d3:05:cc:cb:e0:b5:5a:19:8c:
                    02:75:f9:71:19:a8:6a:88:88:be:e5:0d:56:5a:6f:
                    12:31:05:a1:00:5c:56:5a:79:0b:18:be:d2:66:a3:
                    f7:c0:35:ba:51:05:40:91:7f:7f:f5:f1:15:ec:9f:
                    20:0b:93:05:f1:94:33:da:dd:62:6b:17:89:ef:4a:
                    b6:a4:90:9e:90:c0:09:56:2a:14:ea:47:70:e3:34:
                    40:66:a4:38:cb:cb:ab:b5:8f:e1:f4:5f:21:cf:89:
                    8e:a3:ee:03:bc:50:6d:1b:dd:a6:9f:fa:2d:2b:23:
                    82:26:18:98:d4:a4:38:34:44:a1:ed:db:da:ca:40:
                    60:8d:c7:e9:1e:55:3d:9e:e4:e6:18:28:d3:61:4a:
                    f4:13:2d:83:4a:9d:f4:43:b1:fe:58:aa:f8:58:8d:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:07:1D:55:C3:6A:95:12:7F:21:34:85:1C:97:DF:D4:24:61:0F
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a613030303a3a2f33362d3336203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:10:0f:98:c4:34:0d:d0:01:2d:f4:09:64:d9:f5:f3:93:f1:
         48:ae:d8:3c:c8:43:3a:48:f5:87:81:0d:ac:84:ee:bf:af:ee:
         4c:65:29:37:3b:69:47:c2:1d:2e:f8:00:73:0d:76:3f:f2:cc:
         3b:43:fc:34:39:0e:de:ff:35:5a:75:18:63:3b:b4:ff:b4:be:
         fc:de:c5:11:4e:10:a0:d6:5d:bb:6d:a9:1c:d6:a4:3f:52:03:
         32:60:c4:bb:c4:b2:70:4e:7c:34:45:f4:ba:42:49:94:d3:1d:
         55:d3:99:75:1f:98:5e:20:f2:9d:d9:29:1a:ce:a7:10:03:c9:
         c8:a6:a9:c4:04:5f:18:0a:d9:a2:a1:86:f4:f4:58:73:54:af:
         29:6d:b6:9e:d1:29:24:1b:a4:47:fa:e7:57:ae:93:65:76:8a:
         ec:dc:cf:bd:7f:11:25:fa:3c:47:f9:92:1d:6d:86:a2:23:cd:
         52:45:03:f0:61:64:5b:ce:57:ef:16:0a:af:e9:28:f3:90:3e:
         ac:64:2a:f1:25:fe:83:0f:56:49:62:42:91:a3:cb:95:75:18:
         ea:c6:ac:55:90:3d:c8:74:b7:80:8d:4c:87:21:6e:a6:4a:19:
         c4:3e:f8:a8:4b:a4:96:7d:10:bb:91:c6:71:f8:c9:6b:8c:2a:
         51:2a:27:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 04:33:23 2024 by rpki-client on console-fra.rpki-client.org