Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a383030303a3a2f33372d3337203d3e20323637333936.roa
File:                     323830343a346364383a383030303a3a2f33372d3337203d3e20323637333936.roa (raw, json)
Hash identifier:          0hnEheqS38u8kHz9Wzy8LcZkWnBbkZ9KtQBkB9zVO3U=
Subject key identifier:   14:4F:2C:A4:CA:81:F6:24:6E:AE:53:0E:44:04:F4:F0:E3:30:8A:94
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       137C05C25B8B9DDFC63CFDC92AE326B8536F1A9E
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a383030303a3a2f33372d3337203d3e20323637333936.roa
Signing time:             Tue 23 Apr 2024 18:59:02 +0000
ROA not before:           Tue 23 Apr 2024 18:54:02 +0000
ROA not after:            Tue 22 Apr 2025 18:59:02 +0000
asID:                     267396
IP address blocks:        2804:4cd8:8000::/37 maxlen: 37

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7c:05:c2:5b:8b:9d:df:c6:3c:fd:c9:2a:e3:26:b8:53:6f:1a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Apr 23 18:54:02 2024 GMT
            Not After : Apr 22 18:59:02 2025 GMT
        Subject: CN=144F2CA4CA81F6246EAE530E4404F4F0E3308A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:c5:7b:ce:ca:00:99:90:82:0f:92:27:77:
                    63:f7:86:03:51:87:56:30:0f:63:20:28:9e:48:17:
                    fb:8b:77:ac:28:e6:6d:e4:d3:51:82:b5:53:10:ca:
                    2a:46:05:ac:9d:4f:05:fb:df:da:39:0a:cd:58:cf:
                    13:08:5d:98:00:fe:60:27:a9:32:a0:b6:a4:eb:05:
                    5f:b3:5e:14:9d:81:1c:bb:26:20:4a:35:f9:40:0c:
                    d8:91:d7:a4:49:f7:04:b1:c6:09:04:03:67:29:65:
                    2a:b6:e9:d1:a5:7d:b2:92:ac:11:23:01:f0:2f:49:
                    1e:93:00:bf:21:66:f3:ab:bd:23:cf:07:b6:69:b6:
                    57:a2:bc:b1:00:f1:ae:96:4b:c7:37:95:c8:a9:97:
                    68:66:2c:75:33:00:bc:cc:97:02:07:e8:4b:e6:b7:
                    b8:8e:aa:56:27:7e:23:05:bc:68:96:37:28:21:e8:
                    58:e9:7d:a0:9b:19:2d:c6:de:82:2d:38:fc:a1:46:
                    33:df:53:58:66:91:f0:bb:88:fe:07:3d:d5:f4:67:
                    f7:ae:af:64:68:5f:24:96:de:15:1e:fd:eb:c9:7b:
                    f5:5a:d1:55:88:aa:71:3a:0a:a9:60:6c:a3:43:46:
                    fd:40:90:ff:8e:df:39:43:d5:24:0d:f6:b1:79:e2:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4F:2C:A4:CA:81:F6:24:6E:AE:53:0E:44:04:F4:F0:E3:30:8A:94
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a383030303a3a2f33372d3337203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8:8000::/37

    Signature Algorithm: sha256WithRSAEncryption
         25:28:35:0a:67:b1:af:f5:43:bd:df:09:b9:75:ee:95:df:62:
         64:ee:14:bb:ea:9d:e5:8c:a1:1a:b5:9e:f5:77:d4:cc:91:eb:
         83:f7:5b:4f:ed:d9:7b:1e:12:38:de:ef:38:67:7e:e8:90:fb:
         c9:f4:9a:3a:68:4a:36:8d:db:22:74:9b:1e:b5:83:b6:0d:ed:
         20:e2:69:fc:05:cb:2b:7c:99:3e:3c:a2:70:ec:6e:99:74:1d:
         0a:b0:5a:bf:6c:9c:82:ea:89:29:28:24:4d:41:45:1e:50:05:
         6a:99:f6:f9:4b:4e:ba:31:a6:77:3e:74:74:82:4a:4f:0f:ef:
         78:e6:83:f4:22:17:e0:c1:c6:65:6d:f0:c5:7e:96:7c:dd:89:
         c5:cf:f9:66:d5:91:32:8c:1f:bf:8d:ec:62:6a:37:b5:40:d3:
         3d:f3:00:d7:2d:66:ef:69:74:27:7f:b1:4d:25:9f:7a:73:74:
         20:93:09:35:e5:27:86:d5:6b:fb:a6:03:bc:76:5d:13:a1:cb:
         be:cb:27:b0:17:b0:8b:9e:42:d0:92:04:c7:cb:f8:0a:da:20:
         c2:40:8b:53:f7:e2:57:3a:34:f6:28:65:01:d9:ae:dd:7c:87:
         e8:5d:02:4a:ea:cb:d0:8c:5d:de:ba:18:98:37:35:a5:89:5e:
         13:87:98:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUE3wFwluLnd/GPP3JKuMmuFNvGp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNEQkZGMkZFMDIxQjM2ODNDMEU4MDZERTAxN0M2RTMx
MDQwQzZEMDAeFw0yNDA0MjMxODU0MDJaFw0yNTA0MjIxODU5MDJaMDMxMTAvBgNV
BAMTKDE0NEYyQ0E0Q0E4MUY2MjQ2RUFFNTMwRTQ0MDRGNEYwRTMzMDhBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuw8V7zsoAmZCCD5Ind2P3hgNR
h1YwD2MgKJ5IF/uLd6wo5m3k01GCtVMQyipGBaydTwX739o5Cs1YzxMIXZgA/mAn
qTKgtqTrBV+zXhSdgRy7JiBKNflADNiR16RJ9wSxxgkEA2cpZSq26dGlfbKSrBEj
AfAvSR6TAL8hZvOrvSPPB7ZptleivLEA8a6WS8c3lcipl2hmLHUzALzMlwIH6Evm
t7iOqlYnfiMFvGiWNygh6FjpfaCbGS3G3oItOPyhRjPfU1hmkfC7iP4HPdX0Z/eu
r2RoXySW3hUe/evJe/Va0VWIqnE6CqlgbKNDRv1AkP+O3zlD1SQN9rF54k5ZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFE8spMqB9iRurlMORAT08OMwipQwHwYDVR0j
BBgwFoAU89v/L+Ahs2g8DoBt4BfG4xBAxtAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdqTVMyMnA0SEJueEtxQUJQcXAzOTZ2Y3BzdkxuMXhndkRoUkF3a0xV
M1MvMC9GM0RCRkYyRkUwMjFCMzY4M0MwRTgwNkRFMDE3QzZFMzEwNDBDNkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzREJGRjJGRTAyMUIzNjgz
QzBFODA2REUwMTdDNkUzMTA0MEM2RDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHak1TMjJwNEhCbnhLcUFCUHFwMzk2dmNwc3ZMbjF4Z3ZEaFJBd2tMVTNTLzAv
MzIzODMwMzQzYTM0NjM2NDM4M2EzODMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzYzNzMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygETNiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAlKDUKZ7Gv9UO93wm5de6V32Jk7hS76p3ljKEatZ71d9TMkeuD91tP7dl7
HhI43u84Z37okPvJ9Jo6aEo2jdsidJsetYO2De0g4mn8BcsrfJk+PKJw7G6ZdB0K
sFq/bJyC6okpKCRNQUUeUAVqmfb5S066MaZ3PnR0gkpPD+945oP0IhfgwcZlbfDF
fpZ83YnFz/lm1ZEyjB+/jexiaje1QNM98wDXLWbvaXQnf7FNJZ96c3Qgkwk15SeG
1Wv7pgO8dl0Tocu+yyewF7CLnkLQkgTHy/gK2iDCQItT9+JXOjT2KGUB2a7dfIfo
XQJK6svQjF3euhiYNzWliV4Th5id
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org