Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a383030303a3a2f33332d3333203d3e20323637343230.roa
File:                     323830343a346433633a383030303a3a2f33332d3333203d3e20323637343230.roa (raw, json)
Hash identifier:          yXSW5ZJixOAWrUIutHF9vP/ZPPaJgkBfDtZvcEbTiTA=
Subject key identifier:   70:D6:EF:7E:BA:5D:E3:39:1D:D4:3C:33:2B:DC:6D:BE:9A:6A:4A:8B
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       6034443C00EC1EA3E7C99BD9EAB3EA1911E60E0D
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a383030303a3a2f33332d3333203d3e20323637343230.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     267420
IP address blocks:        2804:4d3c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 13:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:34:44:3c:00:ec:1e:a3:e7:c9:9b:d9:ea:b3:ea:19:11:e6:0e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=70D6EF7EBA5DE3391DD43C332BDC6DBE9A6A4A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:bf:46:c6:1b:5f:28:72:ce:84:fd:d6:a8:
                    77:fe:a9:dc:f4:4b:3a:df:ae:c9:92:d8:d4:c8:c7:
                    57:c5:f6:60:e7:ad:42:78:4c:19:da:95:4c:62:87:
                    56:65:3c:40:96:b1:58:96:30:3c:2f:41:4f:46:0c:
                    2b:f5:28:ce:aa:01:06:f1:e4:83:47:da:6b:5d:84:
                    0b:d3:67:85:57:da:cc:9e:71:63:60:99:9e:4c:2c:
                    42:cf:a8:e3:49:8b:5b:c1:a9:a9:54:a0:53:cd:5c:
                    61:9c:5e:fc:2a:2d:b9:d6:4a:9a:68:76:05:7a:82:
                    69:e1:6b:96:8c:9e:32:c1:3b:c9:5d:a8:79:fa:73:
                    e7:6c:a1:4f:e9:2b:04:6c:82:29:31:2f:63:a3:8f:
                    e0:1b:c7:c7:54:b2:2a:62:a3:a2:6e:ed:2d:99:35:
                    85:4b:b1:c5:a4:d3:bb:3d:76:e2:1c:69:8d:7e:a6:
                    32:26:1d:7a:16:3c:8b:7e:d4:f7:c1:7b:58:87:14:
                    f4:f3:7d:e0:79:cc:41:6c:ee:30:b7:e8:94:ef:5f:
                    0e:36:6d:00:30:cf:f0:8a:09:1c:91:fc:5c:60:7b:
                    af:bf:a0:74:1c:5c:89:e0:2f:73:8e:de:a6:31:c4:
                    f4:60:4f:cd:02:58:67:e1:a0:da:1a:a7:53:5b:83:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D6:EF:7E:BA:5D:E3:39:1D:D4:3C:33:2B:DC:6D:BE:9A:6A:4A:8B
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a383030303a3a2f33332d3333203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:2c:96:3f:b0:c5:07:25:0a:bd:8e:45:75:a3:92:7f:59:
         6d:d9:3d:e8:31:e5:57:54:46:0a:8a:b6:f6:31:a3:3e:f6:04:
         df:90:c0:fa:45:00:27:5b:c0:8e:d0:42:08:2a:3b:03:fc:7c:
         a4:22:58:b6:df:e4:a1:aa:92:5b:7e:7b:98:e9:3e:f5:29:8a:
         07:85:cd:31:56:e1:64:af:77:46:54:0f:8a:81:9e:a2:26:a0:
         05:93:60:6a:16:c2:9b:f4:c4:37:39:e0:95:8e:1a:bc:02:9e:
         bd:2c:40:da:26:7a:e0:16:98:ed:58:ce:b6:e0:2a:6d:af:a5:
         0f:3d:96:c2:86:00:df:87:97:c2:19:25:1a:4e:53:ef:e6:01:
         c5:52:52:4b:65:35:c3:75:f3:0b:b2:fb:b7:8c:a1:22:59:74:
         96:a0:40:93:92:2e:36:65:7b:ae:69:7b:f7:8a:43:44:be:67:
         e9:08:8f:2f:66:57:27:d0:b2:16:14:53:dc:f2:a6:20:7e:8a:
         e4:dd:73:56:6f:c3:a3:3a:42:0a:7d:e7:95:7e:0c:28:62:7b:
         bf:36:4c:51:f8:5e:a2:a6:d8:ba:56:90:8e:2f:28:4e:41:ce:
         22:0c:7e:ef:e0:af:d0:d4:00:bb:33:dc:64:0b:e5:2a:7b:ee:
         fd:fd:a3:67
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYDREPADsHqPnyZvZ6rPqGRHmDg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3QkE5Mjk0NDY0QkUwMUI0QzJBNTAwNzA4REQ1NUNB
ODc5NTg0RDAeFw0yNDExMTkyMTE2MzZaFw0yNTExMTgyMTIxMzZaMDMxMTAvBgNV
BAMTKDcwRDZFRjdFQkE1REUzMzkxREQ0M0MzMzJCREM2REJFOUE2QTRBOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cL9GxhtfKHLOhP3WqHf+qdz0
SzrfrsmS2NTIx1fF9mDnrUJ4TBnalUxih1ZlPECWsViWMDwvQU9GDCv1KM6qAQbx
5INH2mtdhAvTZ4VX2syecWNgmZ5MLELPqONJi1vBqalUoFPNXGGcXvwqLbnWSppo
dgV6gmnha5aMnjLBO8ldqHn6c+dsoU/pKwRsgikxL2Ojj+Abx8dUsipio6Ju7S2Z
NYVLscWk07s9duIcaY1+pjImHXoWPIt+1PfBe1iHFPTzfeB5zEFs7jC36JTvXw42
bQAwz/CKCRyR/Fxge6+/oHQcXIngL3OO3qYxxPRgT80CWGfhoNoap1Nbg49TAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcNbvfrpd4zkd1DwzK9xtvppqSoswHwYDVR0j
BBgwFoAUPHupKURkvgG0wqUAcI3VXKh5WE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC8zQzdCQTkyOTQ0NjRCRTAxQjRDMkE1MDA3MDhERDU1Q0E4Nzk1ODRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0JBOTI5NDQ2NEJFMDFC
NEMyQTUwMDcwOERENTVDQTg3OTU4NEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzIzODMwMzQzYTM0NjQzMzYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzM0MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETTyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCGwSyWP7DFByUKvY5FdaOSf1lt2T3oMeVXVEYKirb2MaM+9gTfkMD6RQAn
W8CO0EIIKjsD/HykIli23+ShqpJbfnuY6T71KYoHhc0xVuFkr3dGVA+KgZ6iJqAF
k2BqFsKb9MQ3OeCVjhq8Ap69LEDaJnrgFpjtWM624Cptr6UPPZbChgDfh5fCGSUa
TlPv5gHFUlJLZTXDdfMLsvu3jKEiWXSWoECTki42ZXuuaXv3ikNEvmfpCI8vZlcn
0LIWFFPc8qYgfork3XNWb8OjOkIKfeeVfgwoYnu/NkxR+F6ipti6VpCOLyhOQc4i
DH7v4K/Q1AC7M9xkC+Uqe+79/aNn
-----END CERTIFICATE-----