Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a623030303a3a2f33372d3337203d3e20323637333936.roa
File:                     323830343a346364383a623030303a3a2f33372d3337203d3e20323637333936.roa (raw, json)
Hash identifier:          F05brgShLV/vg1uMovuCx87GmNE/TRGoU9dff9G8xf0=
Subject key identifier:   8B:D0:62:2F:06:38:D1:37:62:E6:45:F2:B7:6A:53:1B:9D:1B:C5:04
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       049A4378377FCD763B0198068F2682B668CDDBAB
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a623030303a3a2f33372d3337203d3e20323637333936.roa
Signing time:             Tue 23 Apr 2024 18:59:27 +0000
ROA not before:           Tue 23 Apr 2024 18:54:27 +0000
ROA not after:            Tue 22 Apr 2025 18:59:27 +0000
asID:                     267396
IP address blocks:        2804:4cd8:b000::/37 maxlen: 37

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9a:43:78:37:7f:cd:76:3b:01:98:06:8f:26:82:b6:68:cd:db:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Apr 23 18:54:27 2024 GMT
            Not After : Apr 22 18:59:27 2025 GMT
        Subject: CN=8BD0622F0638D13762E645F2B76A531B9D1BC504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:17:14:b3:b3:73:88:85:8f:d8:9d:c6:a3:
                    af:92:15:f9:6d:6f:ea:f7:3c:f7:32:b5:5d:5c:2b:
                    92:60:5d:7b:87:10:e6:e3:cf:07:a4:83:f5:0f:4e:
                    f5:ef:03:70:91:94:c1:36:19:c6:5b:00:9a:5c:34:
                    3b:5d:7e:9d:0f:6d:05:ba:73:3e:62:0e:40:c6:bc:
                    94:de:71:9f:17:40:69:55:33:67:49:cf:01:86:e8:
                    53:1e:6d:91:9d:4c:29:cc:c4:3c:13:39:17:e4:17:
                    98:0e:c3:66:46:55:23:7f:c2:be:d3:55:22:14:f3:
                    a7:33:ab:df:d4:a8:2d:9c:06:5c:c5:bf:c1:88:91:
                    31:40:b7:3c:9d:9b:c8:6d:99:23:99:13:fe:63:8a:
                    c4:2f:8a:21:79:cc:fb:91:14:dd:20:e4:22:95:2a:
                    68:ee:b2:0a:b7:02:99:6b:d5:53:18:b4:b8:06:ce:
                    e7:f2:38:5e:28:58:84:70:69:c8:ca:93:88:af:dd:
                    07:77:47:82:42:58:b8:21:7f:b8:de:5e:b9:aa:9a:
                    ba:bc:fc:2d:9a:92:b0:58:a0:1f:76:ac:03:9e:c6:
                    a0:e3:07:a1:ce:09:e3:ee:74:b2:37:97:ce:1a:96:
                    ca:ca:a9:2e:07:a3:9a:e2:0e:68:d4:95:f2:50:5a:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D0:62:2F:06:38:D1:37:62:E6:45:F2:B7:6A:53:1B:9D:1B:C5:04
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a623030303a3a2f33372d3337203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8:b000::/37

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:cb:15:e8:23:bd:1d:a5:92:5a:6f:5e:0e:03:b0:f4:c1:
         75:70:af:7f:6b:57:97:76:a0:3e:d4:c1:16:0a:ff:a4:0b:d6:
         52:08:1b:5f:66:4f:21:c6:55:63:fd:ca:2a:fa:0e:70:14:57:
         80:8a:e1:f5:e3:1f:d7:a9:c9:1e:e2:0c:40:e7:2f:22:22:2d:
         cf:6e:6f:61:5e:75:c8:5d:d5:20:8e:f2:bf:ab:c1:8b:00:a9:
         d2:87:99:76:45:59:16:8d:83:ae:1a:b1:64:1a:fd:8d:2f:ba:
         92:4e:dd:5a:8d:c4:19:c4:85:78:73:68:8c:45:24:37:35:82:
         c3:ed:c2:1c:c6:3d:8b:2b:a4:b6:19:0a:9f:a0:90:7e:76:2b:
         93:60:e5:63:9e:20:fd:16:7c:d3:16:7f:3a:a0:7f:46:89:b8:
         15:86:94:d5:1f:01:c2:a3:40:aa:01:20:e3:11:a5:28:64:7a:
         91:f9:8f:42:24:cd:e3:f2:d2:2d:e2:08:99:18:52:7f:49:fe:
         37:cb:8e:b1:8e:ed:7c:d6:87:cb:45:16:4f:d3:8e:c8:a1:1a:
         5e:7c:7e:b3:33:ba:8e:2d:10:4d:0f:ea:a3:fd:64:ea:37:d9:
         af:36:e0:f5:23:fc:e7:35:8f:4f:22:88:41:5a:42:ac:dc:d4:
         a8:82:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org