Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/323830343a363466633a3a2f33342d3334203d3e20323639343631.roa
File:                     323830343a363466633a3a2f33342d3334203d3e20323639343631.roa (raw, json)
Hash identifier:          RKQ80GTjK1HMK1gW/nZOOTQIgIzUQfAZL6Uvyo2g2ys=
Subject key identifier:   3B:85:35:C1:CC:75:6D:35:CA:A7:31:E9:88:C1:6E:6A:D1:23:58:6B
Certificate issuer:       /CN=121F6202CB0EE7F5E476D4E34E5818A48E42C8D0
Certificate serial:       221CC3D9C97A22D5E4754366B0E88B4562943C9E
Authority key identifier: 12:1F:62:02:CB:0E:E7:F5:E4:76:D4:E3:4E:58:18:A4:8E:42:C8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/323830343a363466633a3a2f33342d3334203d3e20323639343631.roa
Signing time:             Wed 03 Apr 2024 18:32:46 +0000
ROA not before:           Wed 03 Apr 2024 18:27:46 +0000
ROA not after:            Wed 02 Apr 2025 18:32:46 +0000
asID:                     269461
IP address blocks:        2804:64fc::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1c:c3:d9:c9:7a:22:d5:e4:75:43:66:b0:e8:8b:45:62:94:3c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121F6202CB0EE7F5E476D4E34E5818A48E42C8D0
        Validity
            Not Before: Apr  3 18:27:46 2024 GMT
            Not After : Apr  2 18:32:46 2025 GMT
        Subject: CN=3B8535C1CC756D35CAA731E988C16E6AD123586B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:a3:78:82:c1:f0:e7:bc:8e:2a:d6:b1:bb:
                    2e:00:93:e2:b9:54:7e:5c:08:a0:59:71:b7:dd:f2:
                    0c:19:fb:e5:37:a3:36:c7:b3:39:a4:72:04:bf:a3:
                    11:74:3d:64:e8:45:11:82:97:e8:d9:40:18:1f:74:
                    60:21:65:65:51:cc:ab:e9:e1:32:82:b7:1c:ad:0d:
                    fc:a0:b2:99:7d:c5:c9:16:5a:0f:d8:86:43:75:c7:
                    82:7d:6b:5e:13:d0:3b:22:54:81:08:35:48:05:70:
                    ea:eb:13:f0:73:00:cd:71:b8:7a:01:d3:64:43:c0:
                    34:f8:d1:98:08:c9:30:02:07:c4:11:f0:e9:11:f9:
                    ff:ef:3c:f1:3e:6f:80:b5:55:cc:ef:1b:69:b0:99:
                    02:e5:ac:2a:06:b5:1e:d3:cf:c0:dd:cc:97:6f:af:
                    39:d6:90:86:0d:8a:5e:99:ba:dd:01:49:6e:17:4f:
                    9c:a4:e5:3b:6e:3d:ef:c8:3c:50:7c:70:eb:09:e5:
                    ec:06:7d:7a:bc:bd:22:fb:2c:f1:11:8c:84:f1:d5:
                    94:a1:bf:fa:77:5a:50:b4:77:e0:cc:18:5f:8f:e7:
                    8d:4e:2d:b4:c1:fa:d0:34:f8:5d:9e:2c:57:9b:74:
                    50:95:6e:b9:ab:69:22:4c:ce:da:28:ed:65:a3:2b:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:85:35:C1:CC:75:6D:35:CA:A7:31:E9:88:C1:6E:6A:D1:23:58:6B
            X509v3 Authority Key Identifier:
                keyid:12:1F:62:02:CB:0E:E7:F5:E4:76:D4:E3:4E:58:18:A4:8E:42:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/323830343a363466633a3a2f33342d3334203d3e20323639343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64fc::/34

    Signature Algorithm: sha256WithRSAEncryption
         b4:c0:d5:c8:e3:65:b7:38:42:b2:92:39:a0:25:f0:7b:2c:bb:
         72:cd:8c:d9:fb:21:3d:a9:96:55:7e:89:57:be:7b:ab:be:20:
         6a:8f:08:d9:bb:0b:34:73:46:2f:2b:07:68:bb:b8:de:31:46:
         bb:22:69:a0:06:96:bf:d1:ca:3a:1f:70:93:0d:ab:36:59:38:
         9b:18:b4:f6:76:b4:33:38:e0:16:fd:32:7b:32:25:04:97:18:
         1f:7f:89:3f:fe:0b:b0:17:21:58:fb:41:f5:9e:0a:46:a0:62:
         50:33:28:72:55:81:b5:bd:48:4c:10:1d:fe:ea:fe:fc:af:fc:
         f5:5b:50:a0:33:be:07:da:5e:9c:77:9d:fd:04:4f:e6:26:63:
         90:61:b1:08:51:30:ef:98:be:58:b7:72:8b:33:a5:00:89:c5:
         a9:20:7b:4d:86:27:fa:7d:e5:1b:56:32:39:d5:f7:c1:bc:ef:
         5d:cd:60:7c:bb:0f:70:54:d6:13:8e:95:f8:a3:ab:da:54:47:
         ba:54:ab:4c:0c:e0:7e:b6:48:3c:76:e7:45:94:f4:1a:2a:42:
         24:a9:61:1d:a0:da:a9:3b:f9:e8:93:7d:3c:ed:a5:a2:7c:32:
         f4:eb:2e:16:e6:06:85:82:aa:9d:53:72:52:bf:11:b5:fb:71:
         85:84:cb:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIhzD2cl6ItXkdUNmsOiLRWKUPJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIxRjYyMDJDQjBFRTdGNUU0NzZENEUzNEU1ODE4QTQ4
RTQyQzhEMDAeFw0yNDA0MDMxODI3NDZaFw0yNTA0MDIxODMyNDZaMDMxMTAvBgNV
BAMTKDNCODUzNUMxQ0M3NTZEMzVDQUE3MzFFOTg4QzE2RTZBRDEyMzU4NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTqN4gsHw57yOKtaxuy4Ak+K5
VH5cCKBZcbfd8gwZ++U3ozbHszmkcgS/oxF0PWToRRGCl+jZQBgfdGAhZWVRzKvp
4TKCtxytDfygspl9xckWWg/YhkN1x4J9a14T0DsiVIEINUgFcOrrE/BzAM1xuHoB
02RDwDT40ZgIyTACB8QR8OkR+f/vPPE+b4C1VczvG2mwmQLlrCoGtR7Tz8DdzJdv
rznWkIYNil6Zut0BSW4XT5yk5TtuPe/IPFB8cOsJ5ewGfXq8vSL7LPERjITx1ZSh
v/p3WlC0d+DMGF+P541OLbTB+tA0+F2eLFebdFCVbrmraSJMztoo7WWjK61vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO4U1wcx1bTXKpzHpiMFuatEjWGswHwYDVR0j
BBgwFoAUEh9iAssO5/XkdtTjTlgYpI5CyNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEtTNkpQVFFjaHdQd21NY0pwelZxS1ZHM0FaMW1nV2duVWJQQjlYeWFY
RkwvMS8xMjFGNjIwMkNCMEVFN0Y1RTQ3NkQ0RTM0RTU4MThBNDhFNDJDOEQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMUY2MjAyQ0IwRUU3RjVF
NDc2RDRFMzRFNTgxOEE0OEU0MkM4RDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhLUzZKUFRRY2h3UHdtTWNKcHpWcUtWRzNBWjFtZ1dnblViUEI5WHlhWEZMLzEv
MzIzODMwMzQzYTM2MzQ2NjYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzQzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARk/AAwDQYJKoZIhvcNAQELBQADggEBALTA1cjj
Zbc4QrKSOaAl8Hssu3LNjNn7IT2pllV+iVe+e6u+IGqPCNm7CzRzRi8rB2i7uN4x
RrsiaaAGlr/RyjofcJMNqzZZOJsYtPZ2tDM44Bb9MnsyJQSXGB9/iT/+C7AXIVj7
QfWeCkagYlAzKHJVgbW9SEwQHf7q/vyv/PVbUKAzvgfaXpx3nf0ET+YmY5BhsQhR
MO+Yvli3coszpQCJxakge02GJ/p95RtWMjnV98G8713NYHy7D3BU1hOOlfijq9pU
R7pUq0wM4H62SDx250WU9BoqQiSpYR2g2qk7+eiTfTztpaJ8MvTrLhbmBoWCqp1T
clK/EbX7cYWEy2s=
-----END CERTIFICATE-----
Generated at Mon Jun 10 18:28:27 2024 by rpki-client on console-ams.rpki-client.org