Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33362d3336203d3e20323638383538.roa
File:                     323830343a356239633a3a2f33362d3336203d3e20323638383538.roa (raw, json)
Hash identifier:          I6bWqT/8oK1xcl538xfEXDFpoRb7dLlTw4QKz45MD1A=
Subject key identifier:   E3:C0:A9:D9:F5:5D:20:1A:AF:82:A6:23:5E:95:F5:B5:32:BE:7B:B1
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       1EE7A3A8D44ED332A641D0B556B8DBB35814B3BD
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33362d3336203d3e20323638383538.roa
Signing time:             Wed 03 Apr 2024 20:43:51 +0000
ROA not before:           Wed 03 Apr 2024 20:38:51 +0000
ROA not after:            Wed 02 Apr 2025 20:43:51 +0000
asID:                     268858
IP address blocks:        2804:5b9c::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 13:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e7:a3:a8:d4:4e:d3:32:a6:41:d0:b5:56:b8:db:b3:58:14:b3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Apr  3 20:38:51 2024 GMT
            Not After : Apr  2 20:43:51 2025 GMT
        Subject: CN=E3C0A9D9F55D201AAF82A6235E95F5B532BE7BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:27:89:39:38:78:e2:15:2a:8f:d8:bf:00:
                    aa:de:34:cb:42:b5:f8:b2:ad:30:e1:00:f6:f7:10:
                    85:a9:ed:19:6e:fc:cf:1f:ff:bf:6d:1c:ca:e6:e9:
                    37:4d:8f:47:bc:c8:70:48:bf:27:12:97:91:93:84:
                    8e:a8:c6:dd:f1:7b:82:1f:24:e8:c3:61:d8:f7:87:
                    49:fa:61:c5:fe:93:23:7b:ab:76:ab:a2:a8:b4:1c:
                    67:d2:be:14:84:46:84:c8:2b:77:7c:20:1d:4f:1a:
                    5c:66:04:72:d7:a2:1c:12:fd:2f:07:54:2e:59:03:
                    d8:3a:e5:19:e5:b4:0d:76:98:0a:20:9d:2f:9c:71:
                    0e:9f:d6:f1:20:57:4e:37:70:81:9d:2b:01:58:ce:
                    d0:f2:51:18:fb:8a:5c:80:0b:f2:f5:e4:38:d5:07:
                    ff:5e:09:14:7a:c8:18:94:bc:c4:cb:17:43:b1:58:
                    c0:a4:14:34:82:5c:1b:9c:b9:d1:08:1c:2e:fb:57:
                    ae:da:a1:4d:13:12:cb:84:2a:12:ee:a3:e1:56:f3:
                    17:07:9d:38:d7:28:98:a4:af:a6:c6:74:00:50:2d:
                    0a:97:1b:41:79:db:c9:b2:04:56:e4:ba:bd:07:fb:
                    1a:66:54:6a:66:af:bb:59:c6:ae:d3:e5:f4:77:5d:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C0:A9:D9:F5:5D:20:1A:AF:82:A6:23:5E:95:F5:B5:32:BE:7B:B1
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a3a2f33362d3336203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c::/36

    Signature Algorithm: sha256WithRSAEncryption
         0a:ea:71:dc:85:5b:98:06:b5:b0:af:d4:d3:53:da:d3:9b:b2:
         ac:59:c1:88:23:45:42:8f:1d:c4:37:bf:3f:1e:c5:01:4d:1b:
         b2:99:98:7a:6a:d4:c3:b7:03:7a:1d:2b:9a:0a:73:79:ed:80:
         f0:a4:98:f5:31:92:16:26:e2:f5:4e:98:0f:b7:8d:eb:5e:78:
         f4:86:5b:b1:f1:20:3a:56:6b:ba:63:58:d3:bf:bb:ef:8e:25:
         3d:2c:f4:ea:2c:7a:37:01:cd:e6:c8:88:a5:5c:62:67:46:fe:
         de:38:f9:54:e5:24:84:fe:8b:d7:b4:58:be:3c:d7:69:ea:36:
         4e:a9:cd:78:9e:9d:1d:02:e7:3f:97:8f:7e:1b:eb:6b:94:d8:
         63:31:b4:7f:0d:52:41:b3:7c:6f:c1:6a:2a:ee:4e:50:9b:66:
         2c:cb:e5:0f:6b:9b:e3:a3:b2:b6:1a:22:65:14:88:ac:ff:6f:
         ca:60:23:0f:03:d2:4f:06:0a:44:76:a6:ff:c2:58:44:f1:d0:
         36:a9:5c:b6:2e:73:52:50:6a:17:b6:d4:21:68:f8:5a:27:18:
         86:71:7e:8e:b6:77:3a:05:24:86:a6:a7:09:25:5e:da:ec:d2:
         43:52:76:f8:1b:6d:d6:22:50:1d:c3:eb:c5:96:4f:fc:39:b4:
         6e:96:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:52:57 2024 by rpki-client on console-ams.rpki-client.org