Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3332203d3e20323637333936.roa
File:                     323830343a346364383a3a2f33322d3332203d3e20323637333936.roa (raw, json)
Hash identifier:          eGme5+a+ZAsgWDpXLbE/sxnBWtXszA4M2pcA2faJzL0=
Subject key identifier:   D0:FE:FE:80:8F:73:11:FC:A9:39:9F:A0:C8:90:A2:7D:48:66:8E:9C
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       3EBFF0E7C9AFC300ECB9E20DFB2E4A2A44E2E1ED
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3332203d3e20323637333936.roa
Signing time:             Tue 23 Apr 2024 18:58:59 +0000
ROA not before:           Tue 23 Apr 2024 18:53:59 +0000
ROA not after:            Tue 22 Apr 2025 18:58:59 +0000
asID:                     267396
IP address blocks:        2804:4cd8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bf:f0:e7:c9:af:c3:00:ec:b9:e2:0d:fb:2e:4a:2a:44:e2:e1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Apr 23 18:53:59 2024 GMT
            Not After : Apr 22 18:58:59 2025 GMT
        Subject: CN=D0FEFE808F7311FCA9399FA0C890A27D48668E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:74:42:e5:45:e9:2b:52:0b:dd:d1:f3:87:
                    2c:a5:84:05:f9:80:14:79:7b:39:b2:d0:87:0c:36:
                    89:e3:94:aa:84:7e:cf:66:3a:a2:e2:7a:01:46:89:
                    11:c3:d5:c5:8b:27:f3:3f:5a:e9:7e:22:65:c4:47:
                    47:51:be:c1:df:f7:d4:d2:f5:2e:f3:f4:0a:fb:ce:
                    08:bf:6c:72:ea:78:22:ea:f9:54:21:5b:13:d8:d0:
                    79:21:11:df:c6:9d:0e:68:d9:c5:2d:cd:ec:6b:30:
                    51:2c:47:eb:17:fb:46:cd:fe:72:22:cd:30:d5:c8:
                    da:4f:75:4f:d1:10:27:4c:6d:b8:4e:2a:a0:c0:ea:
                    ce:c3:86:fa:e3:73:3c:89:77:e4:6f:38:d4:0c:83:
                    27:14:b6:fb:e7:fd:1c:5f:2a:d5:d4:02:ca:23:55:
                    c4:a7:8b:f8:30:f1:6b:0e:09:7f:51:19:85:24:a6:
                    2d:73:e6:78:37:5e:d8:30:60:34:0c:cb:dc:3b:a1:
                    b9:9b:fd:ff:f6:1c:4f:3b:f4:6d:79:c0:6d:1e:76:
                    1c:c0:ee:04:b3:47:12:94:c7:44:ed:97:9e:92:9d:
                    13:2e:1e:d1:83:8f:c7:1d:94:b2:3b:7e:af:12:fc:
                    9d:91:5c:28:62:79:d6:69:29:a7:60:42:91:c8:44:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FE:FE:80:8F:73:11:FC:A9:39:9F:A0:C8:90:A2:7D:48:66:8E:9C
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3332203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:f0:e0:b4:40:55:4d:4b:6d:f2:a3:a4:27:94:1d:12:9b:
         d4:71:50:33:50:a5:fc:94:7d:af:c2:52:1f:9c:e6:c3:58:07:
         96:d3:da:b4:07:f9:5c:5a:29:35:f4:b6:58:6e:cf:6b:00:71:
         1f:4c:60:bd:7c:7f:7a:d9:aa:73:cb:a6:28:1b:1d:dc:6a:51:
         e2:3d:c7:eb:e9:b2:0b:98:62:f3:8c:03:5c:41:6f:d6:60:13:
         7a:f5:74:f8:42:6e:4f:1b:25:4c:08:1f:79:31:52:d5:a7:4e:
         ee:0f:65:c9:bc:c4:f1:8a:2c:f6:2e:83:66:39:9e:d3:0f:24:
         de:4e:d7:9a:7e:44:99:68:f3:d9:25:cf:59:09:40:18:67:1e:
         66:21:a7:e2:c7:92:01:4c:59:57:d3:1e:18:11:85:c9:86:c7:
         6b:f7:59:e1:b8:de:e6:83:e0:da:b4:3e:88:33:1b:d2:cb:2f:
         26:0b:9e:03:e3:d2:e1:ec:16:51:69:53:25:b5:ff:92:36:95:
         18:67:97:37:2c:4c:43:7c:5d:e0:d8:f6:c0:8b:cd:c4:2e:01:
         c5:84:91:21:57:fd:08:85:78:2f:17:5d:80:07:41:84:93:a7:
         06:78:0b:19:54:01:29:7f:71:64:91:77:ce:fb:ac:66:ca:a9:
         5e:94:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org