Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356438303a3a2f34332d3433203d3e20323637343230.roa
File:                     323830343a346433633a356438303a3a2f34332d3433203d3e20323637343230.roa (raw, json)
Hash identifier:          3REM1SP5wUAvWilYmIqGcgypBz9B/1RNcSamY8cUyfI=
Subject key identifier:   3B:38:49:99:7D:47:A7:A6:07:1D:41:5E:2C:2E:68:56:5F:3A:C0:34
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       160ACFF5CD9093059FD94E961665E68E9A692B6C
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356438303a3a2f34332d3433203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5d80::/43 maxlen: 43

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0a:cf:f5:cd:90:93:05:9f:d9:4e:96:16:65:e6:8e:9a:69:2b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=3B3849997D47A7A6071D415E2C2E68565F3AC034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:de:67:f2:bd:dc:d0:2e:c3:66:78:d7:a1:
                    ac:9a:f1:ac:05:05:59:75:14:c2:b2:8c:aa:8a:f4:
                    c8:0e:fe:57:b8:11:ef:78:22:7a:e1:9c:6d:4a:c8:
                    b9:3b:1f:30:19:fa:56:c8:5b:93:eb:b2:af:d1:8d:
                    3d:d4:ce:41:ce:ac:a1:69:73:85:b4:e5:9a:17:af:
                    2e:57:f0:54:e9:9d:fe:d1:d5:42:35:08:75:b5:dc:
                    6c:18:b3:48:e3:c3:f3:6f:56:01:e9:ce:33:ac:8e:
                    6b:95:7c:eb:7c:a1:0d:a1:de:7e:cb:59:34:e1:86:
                    30:c4:69:a9:38:33:9f:75:98:64:88:d6:cb:ff:0e:
                    b2:63:e8:85:2a:bf:e0:6f:dd:69:7d:9c:b0:d0:36:
                    2d:10:7f:b4:c4:41:7d:6d:4a:31:81:4c:1d:2c:16:
                    2f:b0:ac:e7:f3:23:a0:e6:df:1f:17:74:af:ae:4f:
                    41:28:a9:70:86:fd:e7:cb:74:88:b2:55:20:c8:44:
                    f0:11:05:06:f8:2e:86:f2:a4:18:99:8d:a7:35:d6:
                    56:e1:06:74:c4:3b:1a:ce:fe:0b:b0:a4:da:59:fa:
                    e3:29:ce:c7:0b:c5:c6:77:13:53:15:04:4a:79:d8:
                    98:7a:a7:8a:27:13:10:29:79:ce:53:6c:08:8d:b2:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:38:49:99:7D:47:A7:A6:07:1D:41:5E:2C:2E:68:56:5F:3A:C0:34
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/323830343a346433633a356438303a3a2f34332d3433203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5d80::/43

    Signature Algorithm: sha256WithRSAEncryption
         ad:10:db:12:14:02:1e:d9:e7:29:0e:54:7a:ec:b5:72:d2:0f:
         36:35:d8:4b:a2:46:e4:a2:8f:04:03:c3:47:f1:b8:2d:b2:69:
         7e:a6:a7:c3:d9:42:d4:40:50:57:47:24:b3:53:1f:7e:65:2c:
         b1:e6:82:f8:8b:fd:db:42:d8:06:09:2d:06:e8:46:4b:27:e6:
         ef:b5:43:a8:e3:c0:da:55:84:29:53:4b:24:ca:9e:d8:b1:0a:
         52:4b:ce:09:d1:a5:34:fe:4d:d5:36:ae:25:68:09:0b:ff:2b:
         35:8f:38:c4:fd:c1:b4:0a:d2:98:51:5c:fb:6b:d8:1f:3a:aa:
         b9:8f:b9:71:6e:d7:35:64:31:45:56:ec:e1:2e:b4:cf:a2:ca:
         7c:bb:5b:32:b9:f1:07:b8:a3:58:9d:02:f9:fb:77:c2:8a:51:
         a0:4e:d1:7a:86:e6:ac:24:57:94:08:b5:1e:83:b3:30:a3:92:
         99:80:3e:f6:ec:e1:61:41:cb:e4:56:ad:81:72:cc:24:18:d4:
         8f:c9:5c:a1:3a:fb:e1:d4:40:61:25:56:cb:6c:7b:6a:ad:1b:
         f2:03:73:c9:72:c3:dd:33:ec:d4:4f:97:a7:fd:f8:d8:7b:58:
         b0:fa:29:8c:64:7b:ba:0e:91:c8:1d:85:7a:f7:7b:1e:fe:76:
         88:18:ee:59
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUFgrP9c2QkwWf2U6WFmXmjpppK2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc2NDY0MjUwNTM3MDhDQzkzOEVDNDU0MEVDQkJGNDRC
Mjg0OTU0NDAeFw0yNDA0MDUwMTU1MzdaFw0yNTA0MDQwMjAwMzdaMDMxMTAvBgNV
BAMTKDNCMzg0OTk5N0Q0N0E3QTYwNzFENDE1RTJDMkU2ODU2NUYzQUMwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM095n8r3c0C7DZnjXoaya8awF
BVl1FMKyjKqK9MgO/le4Ee94InrhnG1KyLk7HzAZ+lbIW5Prsq/RjT3UzkHOrKFp
c4W05ZoXry5X8FTpnf7R1UI1CHW13GwYs0jjw/NvVgHpzjOsjmuVfOt8oQ2h3n7L
WTThhjDEaak4M591mGSI1sv/DrJj6IUqv+Bv3Wl9nLDQNi0Qf7TEQX1tSjGBTB0s
Fi+wrOfzI6Dm3x8XdK+uT0EoqXCG/efLdIiyVSDIRPARBQb4LobypBiZjac11lbh
BnTEOxrO/guwpNpZ+uMpzscLxcZ3E1MVBEp52Jh6p4onExApec5TbAiNsqfTAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUOzhJmX1Hp6YHHUFeLC5oVl86wDQwHwYDVR0j
BBgwFoAU92RkJQU3CMyTjsRUDsu/RLKElUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMS9GNzY0NjQyNTA1MzcwOENDOTM4RUM0NTQwRUNCQkY0NEIyODQ5NTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3NjQ2NDI1MDUzNzA4Q0M5
MzhFQzQ1NDBFQ0JCRjQ0QjI4NDk1NDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzEv
MzIzODMwMzQzYTM0NjQzMzYzM2EzNTY0MzgzMDNhM2EyZjM0MzMyZDM0MzMyMDNk
M2UyMDMyMzYzNzM0MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgETTxdgDANBgkqhkiG9w0BAQsF
AAOCAQEArRDbEhQCHtnnKQ5Ueuy1ctIPNjXYS6JG5KKPBAPDR/G4LbJpfqanw9lC
1EBQV0cks1MffmUsseaC+Iv920LYBgktBuhGSyfm77VDqOPA2lWEKVNLJMqe2LEK
UkvOCdGlNP5N1TauJWgJC/8rNY84xP3BtArSmFFc+2vYHzqquY+5cW7XNWQxRVbs
4S60z6LKfLtbMrnxB7ijWJ0C+ft3wopRoE7ReobmrCRXlAi1HoOzMKOSmYA+9uzh
YUHL5FatgXLMJBjUj8lcoTr74dRAYSVWy2x7aq0b8gNzyXLD3TPs1E+Xp/342HtY
sPopjGR7ug6RyB2Fevd7Hv52iBjuWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org