Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a623830303a3a2f33372d3337203d3e20323637333936.roa
File:                     323830343a346364383a623830303a3a2f33372d3337203d3e20323637333936.roa (raw, json)
Hash identifier:          k8QsLJnEZkMPTQJWpTZunXuf076SnXnCM+vxOxV254Y=
Subject key identifier:   D7:DF:A3:A6:39:3D:7F:08:0F:18:D4:7C:7C:99:F7:1D:35:37:52:03
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       1803F0EEFDEDB6586E72ABF6868593F923331B4E
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a623830303a3a2f33372d3337203d3e20323637333936.roa
Signing time:             Tue 23 Apr 2024 18:59:29 +0000
ROA not before:           Tue 23 Apr 2024 18:54:29 +0000
ROA not after:            Tue 22 Apr 2025 18:59:29 +0000
asID:                     267396
IP address blocks:        2804:4cd8:b800::/37 maxlen: 37

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:03:f0:ee:fd:ed:b6:58:6e:72:ab:f6:86:85:93:f9:23:33:1b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Apr 23 18:54:29 2024 GMT
            Not After : Apr 22 18:59:29 2025 GMT
        Subject: CN=D7DFA3A6393D7F080F18D47C7C99F71D35375203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:fc:ef:ed:99:7d:62:47:a9:81:d1:4d:0c:
                    96:51:c6:47:b4:f9:2f:9b:b3:c5:3a:66:be:42:32:
                    1c:73:f4:3e:fc:54:0e:2d:81:b4:54:d2:1a:3f:2a:
                    c4:0d:a2:0c:19:90:7b:11:af:f4:db:ff:43:e8:60:
                    d0:03:2f:7b:17:75:95:fb:17:b6:21:2a:be:08:3b:
                    28:9b:fc:88:c4:7b:49:4a:fb:ee:41:e0:e3:d2:d9:
                    d3:64:ce:58:f3:f0:91:d6:87:08:55:db:eb:d6:c6:
                    d7:09:f7:e3:1e:fe:2f:ce:ee:6e:be:6c:54:f5:53:
                    3a:46:73:4f:f3:b3:4d:59:c5:ab:83:63:9b:bc:de:
                    1b:87:eb:0a:69:42:ce:82:e3:d1:51:0a:ed:4b:02:
                    55:13:90:c1:d8:3d:ef:a0:e9:78:91:13:ab:56:63:
                    33:da:aa:64:da:af:1d:e9:54:0b:0c:ad:fa:9d:20:
                    d6:93:1d:bb:7f:8b:31:d3:1e:b8:0a:10:50:90:f1:
                    4e:42:73:09:93:14:81:19:8b:77:5a:da:f1:55:ed:
                    3b:98:f0:ec:fa:60:0f:6c:13:45:9d:65:f3:e2:2a:
                    ca:a0:fa:ab:74:fb:5c:68:9e:72:d5:26:0f:c4:04:
                    86:fc:50:ed:00:49:05:b0:df:f6:40:a9:66:6d:73:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DF:A3:A6:39:3D:7F:08:0F:18:D4:7C:7C:99:F7:1D:35:37:52:03
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a623830303a3a2f33372d3337203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8:b800::/37

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:e8:6e:9d:93:26:b7:11:97:e7:03:ce:f5:4d:a5:45:10:
         02:0f:16:4e:04:64:ac:86:50:92:2b:47:fd:2c:1e:ed:c6:a8:
         01:ba:90:b9:c6:5c:7e:49:95:ad:1c:35:3f:4c:d9:b3:ee:7f:
         ff:56:2f:2e:31:c2:05:f8:5c:92:5c:f2:e7:bd:bf:be:18:28:
         39:fa:7f:a2:e3:8f:9d:2d:bf:3c:bb:1b:bf:cb:0d:33:09:48:
         ef:4a:57:ba:54:f0:c3:23:15:5a:e7:14:de:92:50:99:11:0f:
         5b:9f:3c:e3:30:bf:b2:d1:9f:c6:52:f3:4d:6e:91:d8:35:a0:
         f9:22:59:4c:aa:ed:7a:25:d9:45:09:a6:8a:71:df:ec:0d:2a:
         be:44:db:af:dd:8f:66:1f:0a:d5:16:96:c0:81:51:23:c1:fb:
         30:d8:10:29:a5:ee:5f:a7:db:da:cc:f1:e4:25:ae:35:f8:b0:
         4c:43:72:50:f3:13:32:f2:15:69:07:95:4f:b4:76:42:74:b7:
         e7:da:7b:76:10:fd:c2:79:07:f1:36:03:5e:6b:f2:0f:42:6e:
         37:e3:07:ad:91:bf:09:24:6e:8a:06:7e:b8:f4:7d:aa:ea:b3:
         4d:54:2d:2e:c0:12:d0:68:63:7f:9e:83:27:e5:61:b7:01:0b:
         b5:9e:bd:94
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGAPw7v3ttlhucqv2hoWT+SMzG04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNEQkZGMkZFMDIxQjM2ODNDMEU4MDZERTAxN0M2RTMx
MDQwQzZEMDAeFw0yNDA0MjMxODU0MjlaFw0yNTA0MjIxODU5MjlaMDMxMTAvBgNV
BAMTKEQ3REZBM0E2MzkzRDdGMDgwRjE4RDQ3QzdDOTlGNzFEMzUzNzUyMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyfzv7Zl9YkepgdFNDJZRxke0
+S+bs8U6Zr5CMhxz9D78VA4tgbRU0ho/KsQNogwZkHsRr/Tb/0PoYNADL3sXdZX7
F7YhKr4IOyib/IjEe0lK++5B4OPS2dNkzljz8JHWhwhV2+vWxtcJ9+Me/i/O7m6+
bFT1UzpGc0/zs01ZxauDY5u83huH6wppQs6C49FRCu1LAlUTkMHYPe+g6XiRE6tW
YzPaqmTarx3pVAsMrfqdINaTHbt/izHTHrgKEFCQ8U5CcwmTFIEZi3da2vFV7TuY
8Oz6YA9sE0WdZfPiKsqg+qt0+1xonnLVJg/EBIb8UO0ASQWw3/ZAqWZtc8f/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU19+jpjk9fwgPGNR8fJn3HTU3UgMwHwYDVR0j
BBgwFoAU89v/L+Ahs2g8DoBt4BfG4xBAxtAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdqTVMyMnA0SEJueEtxQUJQcXAzOTZ2Y3BzdkxuMXhndkRoUkF3a0xV
M1MvMC9GM0RCRkYyRkUwMjFCMzY4M0MwRTgwNkRFMDE3QzZFMzEwNDBDNkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzREJGRjJGRTAyMUIzNjgz
QzBFODA2REUwMTdDNkUzMTA0MEM2RDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHak1TMjJwNEhCbnhLcUFCUHFwMzk2dmNwc3ZMbjF4Z3ZEaFJBd2tMVTNTLzAv
MzIzODMwMzQzYTM0NjM2NDM4M2E2MjM4MzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzYzNzMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygETNi4MA0GCSqGSIb3DQEBCwUA
A4IBAQBHruhunZMmtxGX5wPO9U2lRRACDxZOBGSshlCSK0f9LB7txqgBupC5xlx+
SZWtHDU/TNmz7n//Vi8uMcIF+FySXPLnvb++GCg5+n+i44+dLb88uxu/yw0zCUjv
Sle6VPDDIxVa5xTeklCZEQ9bnzzjML+y0Z/GUvNNbpHYNaD5IllMqu16JdlFCaaK
cd/sDSq+RNuv3Y9mHwrVFpbAgVEjwfsw2BAppe5fp9vazPHkJa41+LBMQ3JQ8xMy
8hVpB5VPtHZCdLfn2nt2EP3CeQfxNgNea/IPQm434wetkb8JJG6KBn649H2q6rNN
VC0uwBLQaGN/noMn5WG3AQu1nr2U
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org