Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a663064343a3a2f34382d3438203d3e203631363039.roa
File:                     323830343a383762633a663064343a3a2f34382d3438203d3e203631363039.roa (raw, json)
Hash identifier:          MwzK2Egt3ZDPuhcd34spR22UvbN0UsAYhC8lLy+4u10=
Subject key identifier:   2E:3A:90:3B:13:E9:3B:72:00:81:93:28:18:A0:AF:C5:5C:E6:51:52
Certificate issuer:       /CN=B3766E21D786D36B5EDF132F06FAC1FA6C934B63
Certificate serial:       064C3F56BF1B32613E6184C9EE43C93EE33D5941
Authority key identifier: B3:76:6E:21:D7:86:D3:6B:5E:DF:13:2F:06:FA:C1:FA:6C:93:4B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a663064343a3a2f34382d3438203d3e203631363039.roa
Signing time:             Thu 04 Apr 2024 16:35:03 +0000
ROA not before:           Thu 04 Apr 2024 16:30:03 +0000
ROA not after:            Thu 03 Apr 2025 16:35:03 +0000
asID:                     61609
IP address blocks:        2804:87bc:f0d4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 19:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4c:3f:56:bf:1b:32:61:3e:61:84:c9:ee:43:c9:3e:e3:3d:59:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3766E21D786D36B5EDF132F06FAC1FA6C934B63
        Validity
            Not Before: Apr  4 16:30:03 2024 GMT
            Not After : Apr  3 16:35:03 2025 GMT
        Subject: CN=2E3A903B13E93B720081932818A0AFC55CE65152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:fe:35:2a:61:48:ad:0f:11:06:0e:a7:a5:
                    fc:b1:b8:6b:79:06:ef:2e:5f:7d:75:e6:d8:12:ff:
                    a6:ba:d7:fc:82:2e:16:2d:a3:9a:05:2f:8f:ea:a7:
                    4e:0b:03:03:57:ed:b0:9e:41:85:6f:3d:6c:41:15:
                    fd:8b:7d:69:18:6c:be:0e:4d:6d:43:f9:45:f7:7f:
                    54:24:36:b5:08:0b:38:bd:c6:17:2f:68:c8:92:d0:
                    ae:e6:43:10:77:6a:bb:3c:70:47:93:f1:9b:98:02:
                    e4:20:1b:62:8b:48:e8:d6:18:93:61:bd:09:e5:45:
                    aa:67:90:30:e8:7f:1b:ea:cd:49:d9:5a:7c:00:08:
                    e9:b7:32:38:12:16:b0:bf:99:f4:32:33:f2:67:b6:
                    42:8e:e4:c4:c4:1d:14:2d:b4:5c:19:64:5d:7b:c3:
                    42:fd:87:47:3b:84:8e:66:c2:8d:40:85:f5:b3:d1:
                    08:d5:d0:2e:31:fc:67:59:8b:a8:be:59:50:9f:e8:
                    67:80:da:b6:90:3d:40:82:f3:d6:bc:50:eb:70:8b:
                    9d:ab:09:fb:60:18:f2:3d:f8:7e:e4:9d:7a:cc:e2:
                    a3:29:3f:e5:9e:32:a5:dd:0e:46:46:85:21:59:74:
                    fd:92:60:4c:37:64:8a:35:38:65:b5:65:31:88:88:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3A:90:3B:13:E9:3B:72:00:81:93:28:18:A0:AF:C5:5C:E6:51:52
            X509v3 Authority Key Identifier:
                keyid:B3:76:6E:21:D7:86:D3:6B:5E:DF:13:2F:06:FA:C1:FA:6C:93:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a663064343a3a2f34382d3438203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc:f0d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:8a:b1:4a:2a:4d:42:75:b9:39:36:33:3d:56:ae:13:75:
         15:75:75:c6:1f:4f:97:d4:4c:62:9a:3d:7b:98:b1:68:fd:e4:
         95:5c:5f:25:89:10:ae:6b:0f:a5:c6:bc:93:dd:2a:69:5b:4d:
         63:80:f7:44:cb:73:59:de:f0:18:1b:dc:9c:1b:c5:f3:8e:7b:
         f3:1f:c3:64:e1:89:64:46:fe:62:64:8c:95:cd:79:33:ed:8d:
         f3:07:8a:2a:be:9d:35:32:2a:32:43:3b:71:a9:a1:08:62:23:
         98:ec:69:6f:15:a5:96:2c:54:d6:6f:15:3b:f2:8b:72:a3:55:
         11:8f:f4:3e:65:f6:08:b1:6b:61:f5:46:12:f0:39:e7:24:4e:
         ab:18:53:45:56:52:c9:8a:f2:fc:95:30:a8:42:5b:0b:65:8a:
         bd:26:8b:bd:af:ae:90:b6:52:40:42:63:57:43:f3:31:e2:22:
         e9:5f:e0:5c:ec:21:4f:ea:2c:9d:b3:96:7f:e7:48:f2:15:fc:
         45:82:d9:1b:4b:e7:b3:e2:b9:49:a8:77:77:45:10:b4:5d:5b:
         39:66:43:19:60:ee:88:ee:80:82:ed:5e:ff:3a:57:c1:84:db:
         0e:95:77:3b:0c:d0:52:5a:8a:29:bd:af:46:21:f4:c0:98:67:
         97:ab:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 21:32:31 2024 by rpki-client on console-fra.rpki-client.org