Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/323830343a313662303a633030303a3a2f33362d3336203d3e203631393130.roa
File:                     323830343a313662303a633030303a3a2f33362d3336203d3e203631393130.roa (raw, json)
Hash identifier:          ReqIhJ4QSQSfD6LpUL6txBaPFUS/KowMYZ6XJiRRzmk=
Subject key identifier:   42:13:0C:50:2E:20:77:D0:48:2C:13:27:BE:EF:C6:69:77:2F:A1:16
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       3C4B9F8920C4AF3BBE50944650DC9C12BB1B2F41
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/323830343a313662303a633030303a3a2f33362d3336203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:44 +0000
ROA not before:           Wed 03 Apr 2024 20:58:44 +0000
ROA not after:            Wed 02 Apr 2025 21:03:44 +0000
asID:                     61910
IP address blocks:        2804:16b0:c000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 18:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4b:9f:89:20:c4:af:3b:be:50:94:46:50:dc:9c:12:bb:1b:2f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:44 2024 GMT
            Not After : Apr  2 21:03:44 2025 GMT
        Subject: CN=42130C502E2077D0482C1327BEEFC669772FA116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:a9:09:05:2f:85:9d:71:aa:97:e6:2f:5c:
                    24:90:90:b9:c0:7b:80:b8:d6:76:44:68:e8:1a:bc:
                    c8:c8:51:81:95:1d:b9:e0:87:34:d5:7d:62:bc:e9:
                    37:db:92:7c:61:f1:a5:cb:fa:37:bc:2a:a0:9b:ff:
                    83:46:85:fc:d2:fa:a2:e4:05:83:1b:e5:dc:06:a7:
                    b3:08:09:57:35:e7:40:49:07:f5:e6:43:69:59:46:
                    63:30:82:50:db:10:7d:3f:5a:23:7c:c1:9d:31:d3:
                    c2:67:1c:ee:5d:0e:de:68:cf:fe:8c:b8:fa:f9:84:
                    f2:c2:a0:fb:2e:0b:bb:41:f1:62:9b:95:5f:31:73:
                    7f:34:42:42:24:db:12:89:94:2f:26:24:73:68:b4:
                    57:3b:b2:c6:30:b2:94:63:a1:fc:f1:1d:86:e6:1b:
                    39:20:ac:e4:81:d5:b3:f8:50:4d:6c:ab:d4:ac:82:
                    32:c8:22:28:f8:4d:64:23:51:1b:96:a0:f0:7c:88:
                    b0:aa:47:77:30:85:15:10:b8:01:02:75:35:78:5d:
                    d4:70:0d:da:88:17:83:20:6b:90:4e:c2:4d:2e:04:
                    8e:e7:a0:20:1c:8a:57:5b:35:6e:46:05:42:c2:ac:
                    e8:47:f3:4d:b3:d7:d1:31:fa:ef:fb:d6:9d:c2:d9:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:13:0C:50:2E:20:77:D0:48:2C:13:27:BE:EF:C6:69:77:2F:A1:16
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/323830343a313662303a633030303a3a2f33362d3336203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16b0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:21:8f:af:d0:a4:b8:d0:c7:0d:94:85:7f:a8:1e:ba:51:67:
         4d:59:b9:84:8e:3d:50:9f:18:e7:2b:0b:56:55:2f:07:e9:2e:
         d7:3f:68:58:e7:f9:08:98:f8:69:9e:5e:0b:bd:bb:9e:94:05:
         02:b9:db:2a:3e:6b:79:4b:37:2a:a6:7a:53:ee:9c:be:b8:83:
         7a:a2:34:f6:77:6c:80:d8:dd:95:fd:db:b9:63:78:e7:7b:5c:
         21:16:04:2b:23:f9:97:b6:73:3a:2f:c7:0d:78:76:96:29:ac:
         be:a5:b3:da:23:be:c6:13:c5:db:f8:b5:7c:5e:93:d4:40:51:
         3a:6b:7e:c3:f5:84:14:27:5f:38:24:b7:67:4a:55:80:a9:d3:
         32:76:7a:46:13:41:97:07:94:ab:89:73:22:15:76:75:61:ae:
         8e:ca:86:f2:bd:09:3c:30:5a:df:a0:ac:ae:c1:7a:95:fd:7a:
         15:c9:55:9b:7d:18:f1:2b:0c:e0:29:f0:1b:ab:ae:1b:84:7d:
         02:59:13:e7:5a:32:89:97:e1:64:4e:2f:c0:99:b9:c6:ad:16:
         78:33:91:8c:03:09:d5:92:47:72:88:23:75:70:76:0a:5a:74:
         7a:fe:c3:56:51:14:4a:1b:c8:f6:9b:9a:41:bd:70:76:6c:7f:
         d7:10:b1:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPEufiSDErzu+UJRGUNycErsbL0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFCMzM5QUUxRTIzNEJBQUIyNkQ0RkUxQ0Q1Q0JDMzRC
QTRBNUIxQTAeFw0yNDA0MDMyMDU4NDRaFw0yNTA0MDIyMTAzNDRaMDMxMTAvBgNV
BAMTKDQyMTMwQzUwMkUyMDc3RDA0ODJDMTMyN0JFRUZDNjY5NzcyRkExMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/akJBS+FnXGql+YvXCSQkLnA
e4C41nZEaOgavMjIUYGVHbnghzTVfWK86Tfbknxh8aXL+je8KqCb/4NGhfzS+qLk
BYMb5dwGp7MICVc150BJB/XmQ2lZRmMwglDbEH0/WiN8wZ0x08JnHO5dDt5oz/6M
uPr5hPLCoPsuC7tB8WKblV8xc380QkIk2xKJlC8mJHNotFc7ssYwspRjofzxHYbm
GzkgrOSB1bP4UE1sq9SsgjLIIij4TWQjURuWoPB8iLCqR3cwhRUQuAECdTV4XdRw
DdqIF4Mga5BOwk0uBI7noCAcildbNW5GBULCrOhH802z19Ex+u/71p3C2ZqFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQhMMUC4gd9BILBMnvu/GaXcvoRYwHwYDVR0j
BBgwFoAUwbM5rh4jS6qybU/hzVy8NLpKWxowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr
aWsvMi9DMUIzMzlBRTFFMjM0QkFBQjI2RDRGRTFDRDVDQkMzNEJBNEE1QjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQjMzOUFFMUUyMzRCQUFC
MjZENEZFMUNENUNCQzM0QkE0QTVCMUEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzIv
MzIzODMwMzQzYTMxMzY2MjMwM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzOTMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBBawwDANBgkqhkiG9w0BAQsFAAOC
AQEAlSGPr9CkuNDHDZSFf6geulFnTVm5hI49UJ8Y5ysLVlUvB+ku1z9oWOf5CJj4
aZ5eC727npQFArnbKj5reUs3KqZ6U+6cvriDeqI09ndsgNjdlf3buWN453tcIRYE
KyP5l7ZzOi/HDXh2limsvqWz2iO+xhPF2/i1fF6T1EBROmt+w/WEFCdfOCS3Z0pV
gKnTMnZ6RhNBlweUq4lzIhV2dWGujsqG8r0JPDBa36CsrsF6lf16FclVm30Y8SsM
4CnwG6uuG4R9AlkT51oyiZfhZE4vwJm5xq0WeDORjAMJ1ZJHcogjdXB2Clp0ev7D
VlEUShvI9puaQb1wdmx/1xCxcw==
-----END CERTIFICATE-----
Generated at Sun Sep 22 22:34:30 2024 by rpki-client on console-fra.rpki-client.org