Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343030303a3a2f34302d3430203d3e20323638383538.roa
File:                     323830343a356239633a343030303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier:          xWzkY/S0WpRQlk1KqOpgVnPukKS04UW9JxwRnBG2r7A=
Subject key identifier:   8F:54:CC:BE:B8:6A:40:72:E5:EB:F5:52:A3:01:CD:09:60:68:97:D7
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       1B62A83AF2FDFB22337B95100B9F30342B2F5AB7
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343030303a3a2f34302d3430203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:54 +0000
ROA not before:           Wed 03 Apr 2024 20:38:54 +0000
ROA not after:            Wed 02 Apr 2025 20:43:54 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 13:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:a8:3a:f2:fd:fb:22:33:7b:95:10:0b:9f:30:34:2b:2f:5a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:54 2024 GMT
            Not After : Apr  2 20:43:54 2025 GMT
        Subject: CN=8F54CCBEB86A4072E5EBF552A301CD09606897D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:06:6e:74:53:8c:51:35:68:7f:8e:7b:82:
                    e2:75:e2:c9:14:e6:13:01:6b:26:b4:85:1e:43:66:
                    4d:55:f7:56:a6:34:11:a9:9e:4b:7d:9f:11:75:a4:
                    1e:4f:73:0a:19:8b:3a:f1:50:98:04:b3:eb:e9:b0:
                    85:b9:76:5c:2a:30:07:47:57:65:5f:8f:dd:4d:0e:
                    b4:8a:b7:6d:8a:da:6e:4a:4f:ef:12:db:ea:d9:76:
                    3c:eb:60:67:42:88:7c:1e:61:ac:6a:db:21:2f:c5:
                    9f:b1:cd:54:db:06:b2:79:c0:1f:6c:43:e5:db:4d:
                    10:bc:76:a3:ff:0d:50:fb:86:34:68:e3:11:c9:84:
                    4c:3b:c9:b6:57:fe:0d:80:c8:32:ff:6d:da:53:78:
                    a4:c1:63:2e:cc:70:e2:89:4d:fd:46:72:3b:5d:ce:
                    7a:40:8f:eb:ea:db:60:18:bc:f3:43:6b:2c:c4:bf:
                    e7:f0:2b:20:8f:cc:a6:e8:ae:88:3f:60:6e:d0:3b:
                    82:7e:99:78:b1:53:f1:19:39:8a:76:ec:3b:e7:c3:
                    ef:b8:94:65:5b:07:dc:d9:ba:d8:fc:44:3f:af:57:
                    63:de:31:e1:65:dc:4b:b5:10:a7:15:d3:c0:a3:3d:
                    06:0b:4f:1b:8e:14:de:84:b8:fd:75:eb:59:e6:70:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:54:CC:BE:B8:6A:40:72:E5:EB:F5:52:A3:01:CD:09:60:68:97:D7
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a343030303a3a2f34302d3430203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:e0:54:cd:74:10:2d:c6:21:4f:16:35:d9:87:5f:a8:e5:
         19:f6:45:83:12:55:94:9a:38:6c:f2:09:b7:5b:c0:5c:dc:92:
         ad:d0:c2:70:23:66:51:39:c5:a4:4a:6f:99:e7:a2:f3:8e:6f:
         fc:43:ab:be:52:4f:66:d2:de:3e:d1:53:4a:be:5f:20:cb:c6:
         01:3d:1d:1f:3b:cf:3c:57:80:cd:0b:e7:6c:23:9f:a3:03:8a:
         f5:dd:7d:95:5c:6d:7c:df:12:7c:a7:17:59:1c:d4:7e:83:60:
         03:78:9a:29:11:05:91:b7:f5:a4:d3:47:94:3f:bf:2e:eb:b1:
         f9:6d:4f:ca:ac:65:9c:64:47:5a:66:30:8b:15:a8:96:d0:1e:
         7f:3b:6d:c7:c5:ee:1a:5e:6d:d7:7d:5e:22:08:47:0b:3c:0a:
         57:19:88:5d:b8:ce:28:b2:1d:9a:ab:6d:ca:9b:aa:ff:3b:0e:
         e1:f9:e7:77:65:db:34:61:b7:ed:9f:bd:9a:43:b3:12:37:e3:
         b3:12:92:d2:5c:04:e3:5d:a8:bc:bd:bd:bf:2e:f2:a1:22:59:
         ad:5d:2f:77:6e:f2:7e:b6:f1:70:92:a0:28:c0:b1:c0:19:7d:
         d0:ea:79:c9:72:b4:5d:b5:44:d7:7b:8b:30:20:93:fd:b0:ce:
         cf:ad:ec:4d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUG2KoOvL9+yIze5UQC58wNCsvWrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZENDMzMjlFMzk4NjAxNjM3MzMzNkY0REM3MTUzNURE
RERBQTMzODAeFw0yNDA0MDMyMDM4NTRaFw0yNTA0MDIyMDQzNTRaMDMxMTAvBgNV
BAMTKDhGNTRDQ0JFQjg2QTQwNzJFNUVCRjU1MkEzMDFDRDA5NjA2ODk3RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWaAZudFOMUTVof457guJ14skU
5hMBaya0hR5DZk1V91amNBGpnkt9nxF1pB5PcwoZizrxUJgEs+vpsIW5dlwqMAdH
V2Vfj91NDrSKt22K2m5KT+8S2+rZdjzrYGdCiHweYaxq2yEvxZ+xzVTbBrJ5wB9s
Q+XbTRC8dqP/DVD7hjRo4xHJhEw7ybZX/g2AyDL/bdpTeKTBYy7McOKJTf1Gcjtd
znpAj+vq22AYvPNDayzEv+fwKyCPzKborog/YG7QO4J+mXixU/EZOYp27Dvnw++4
lGVbB9zZutj8RD+vV2PeMeFl3Eu1EKcV08CjPQYLTxuOFN6EuP1161nmcFE3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUj1TMvrhqQHLl6/VSowHNCWBol9cwHwYDVR0j
BBgwFoAUj9QzKeOYYBY3Mzb03HFTXd3aozgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMS84RkQ0MzMyOUUzOTg2MDE2MzczMzM2RjREQzcxNTM1REREREFBMzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGRDQzMzI5RTM5ODYwMTYz
NzMzMzZGNERDNzE1MzVEREREQUEzMzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzEv
MzIzODMwMzQzYTM1NjIzOTYzM2EzNDMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM4MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEW5xAMA0GCSqGSIb3DQEBCwUA
A4IBAQApyeBUzXQQLcYhTxY12YdfqOUZ9kWDElWUmjhs8gm3W8Bc3JKt0MJwI2ZR
OcWkSm+Z56Lzjm/8Q6u+Uk9m0t4+0VNKvl8gy8YBPR0fO888V4DNC+dsI5+jA4r1
3X2VXG183xJ8pxdZHNR+g2ADeJopEQWRt/Wk00eUP78u67H5bU/KrGWcZEdaZjCL
FaiW0B5/O23Hxe4aXm3XfV4iCEcLPApXGYhduM4osh2aq23Km6r/Ow7h+ed3Zds0
Ybftn72aQ7MSN+OzEpLSXATjXai8vb2/LvKhIlmtXS93bvJ+tvFwkqAowLHAGX3Q
6nnJcrRdtUTXe4swIJP9sM7PrexN
-----END CERTIFICATE-----
Generated at Tue Jul 9 15:52:57 2024 by rpki-client on console-ams.rpki-client.org