Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a613830303a3a2f33372d3337203d3e20323637333936.roa
File:                     323830343a346364383a613830303a3a2f33372d3337203d3e20323637333936.roa (raw, json)
Hash identifier:          oUpjXRydS9ZO8QP4nofreP5+OuuB//+a58/NxjePWZY=
Subject key identifier:   A9:06:3E:11:7F:C1:95:C7:AB:D9:45:41:AF:B1:86:BE:F7:E4:98:A3
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       0611556C4A8E2E9D2051B87C20B8DBDF0B032199
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a613830303a3a2f33372d3337203d3e20323637333936.roa
Signing time:             Tue 23 Apr 2024 18:59:24 +0000
ROA not before:           Tue 23 Apr 2024 18:54:24 +0000
ROA not after:            Tue 22 Apr 2025 18:59:24 +0000
asID:                     267396
IP address blocks:        2804:4cd8:a800::/37 maxlen: 37

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:11:55:6c:4a:8e:2e:9d:20:51:b8:7c:20:b8:db:df:0b:03:21:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Apr 23 18:54:24 2024 GMT
            Not After : Apr 22 18:59:24 2025 GMT
        Subject: CN=A9063E117FC195C7ABD94541AFB186BEF7E498A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2c:b2:73:7a:45:00:94:7a:3c:ac:2f:46:57:
                    d1:4c:c1:21:ae:14:96:00:76:d8:69:cc:e4:61:a2:
                    43:ae:d7:10:3d:e3:b5:90:d8:22:a4:ad:50:1a:9a:
                    77:83:cf:05:6a:13:7a:53:e4:72:02:83:69:19:b8:
                    c3:48:f7:42:fd:d0:bd:08:59:ab:21:8c:9e:34:f6:
                    6d:8b:2c:df:d8:b4:3c:10:a1:0e:e7:35:a7:8e:13:
                    1b:a0:eb:e4:d3:95:57:34:ec:01:2a:3f:5c:93:12:
                    6c:6a:a7:2a:ce:51:d8:35:e4:c6:30:c4:5c:c7:0d:
                    d2:80:cb:f7:eb:56:e0:b4:05:76:51:cd:23:46:b1:
                    40:22:17:eb:21:fc:72:2f:2a:25:d3:79:9a:77:82:
                    a3:b7:33:38:49:2a:57:51:b2:a9:e8:21:59:15:c8:
                    2c:93:52:0d:5c:15:3d:94:28:a7:47:30:f5:d1:bc:
                    e4:82:ca:b7:7b:c2:36:c2:85:e2:cd:da:7f:55:01:
                    20:91:07:ef:f9:68:6d:07:63:96:d3:d1:49:ee:a0:
                    d9:1e:38:6c:7c:e9:03:24:d6:6f:4f:26:db:88:cb:
                    0a:0a:90:41:04:fe:91:bb:84:70:0a:9b:05:bf:30:
                    6d:4d:3c:f7:ce:b7:4d:8e:12:a4:b8:b9:cc:15:ff:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:06:3E:11:7F:C1:95:C7:AB:D9:45:41:AF:B1:86:BE:F7:E4:98:A3
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a613830303a3a2f33372d3337203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8:a800::/37

    Signature Algorithm: sha256WithRSAEncryption
         7d:01:17:1f:bb:9d:da:6c:f4:22:2c:f2:9e:c2:5c:fc:94:15:
         69:31:18:86:e0:ed:23:83:52:5c:dd:c0:25:74:4c:fd:a7:2f:
         1c:67:6e:22:95:b6:9c:34:d6:63:e7:67:83:e2:84:aa:a5:34:
         d6:b4:d7:bc:65:41:0c:ac:4a:37:08:4d:67:eb:8f:5c:4d:e5:
         fd:42:53:43:22:4a:58:16:7b:0f:9a:43:a7:2e:32:5b:17:0d:
         63:5c:5c:e7:ea:b2:10:c6:3e:42:a7:94:52:37:33:79:f0:96:
         f1:74:de:a5:d6:b2:6c:f8:76:96:db:b8:b4:5b:f5:72:cf:2b:
         f2:b4:4c:a2:a7:ad:8c:58:46:b5:88:5d:12:46:a8:30:7b:da:
         c2:16:23:c7:21:cb:eb:87:da:d8:b2:23:84:5d:95:d2:ac:c6:
         01:f0:8f:6c:b9:9c:19:3a:55:ef:d1:02:b3:d0:8c:64:a6:c8:
         75:62:79:61:c5:5c:32:fd:9e:6e:c4:50:72:7f:06:8b:db:e9:
         0d:8b:33:0f:bf:1f:53:68:fd:99:9f:60:45:a1:62:a2:03:11:
         c0:cf:41:ca:2c:e6:42:39:6a:52:bb:d4:e5:8a:1a:a0:c3:8e:
         bc:91:63:d8:d0:af:11:e8:76:1e:2c:ba:d8:a7:80:f2:3c:31:
         65:36:e0:1d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBhFVbEqOLp0gUbh8ILjb3wsDIZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNEQkZGMkZFMDIxQjM2ODNDMEU4MDZERTAxN0M2RTMx
MDQwQzZEMDAeFw0yNDA0MjMxODU0MjRaFw0yNTA0MjIxODU5MjRaMDMxMTAvBgNV
BAMTKEE5MDYzRTExN0ZDMTk1QzdBQkQ5NDU0MUFGQjE4NkJFRjdFNDk4QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbLLJzekUAlHo8rC9GV9FMwSGu
FJYAdthpzORhokOu1xA947WQ2CKkrVAamneDzwVqE3pT5HICg2kZuMNI90L90L0I
WashjJ409m2LLN/YtDwQoQ7nNaeOExug6+TTlVc07AEqP1yTEmxqpyrOUdg15MYw
xFzHDdKAy/frVuC0BXZRzSNGsUAiF+sh/HIvKiXTeZp3gqO3MzhJKldRsqnoIVkV
yCyTUg1cFT2UKKdHMPXRvOSCyrd7wjbCheLN2n9VASCRB+/5aG0HY5bT0UnuoNke
OGx86QMk1m9PJtuIywoKkEEE/pG7hHAKmwW/MG1NPPfOt02OEqS4ucwV/znvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqQY+EX/Blcer2UVBr7GGvvfkmKMwHwYDVR0j
BBgwFoAU89v/L+Ahs2g8DoBt4BfG4xBAxtAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdqTVMyMnA0SEJueEtxQUJQcXAzOTZ2Y3BzdkxuMXhndkRoUkF3a0xV
M1MvMC9GM0RCRkYyRkUwMjFCMzY4M0MwRTgwNkRFMDE3QzZFMzEwNDBDNkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzREJGRjJGRTAyMUIzNjgz
QzBFODA2REUwMTdDNkUzMTA0MEM2RDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHak1TMjJwNEhCbnhLcUFCUHFwMzk2dmNwc3ZMbjF4Z3ZEaFJBd2tMVTNTLzAv
MzIzODMwMzQzYTM0NjM2NDM4M2E2MTM4MzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzYzNzMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygETNioMA0GCSqGSIb3DQEBCwUA
A4IBAQB9ARcfu53abPQiLPKewlz8lBVpMRiG4O0jg1Jc3cAldEz9py8cZ24ilbac
NNZj52eD4oSqpTTWtNe8ZUEMrEo3CE1n649cTeX9QlNDIkpYFnsPmkOnLjJbFw1j
XFzn6rIQxj5Cp5RSNzN58JbxdN6l1rJs+HaW27i0W/VyzyvytEyip62MWEa1iF0S
Rqgwe9rCFiPHIcvrh9rYsiOEXZXSrMYB8I9suZwZOlXv0QKz0Ixkpsh1YnlhxVwy
/Z5uxFByfwaL2+kNizMPvx9TaP2Zn2BFoWKiAxHAz0HKLOZCOWpSu9Tlihqgw468
kWPY0K8R6HYeLLrYp4DyPDFlNuAd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org