Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa (raw, json)
Hash identifier:          YJ6kIy2ZencIiF0IAYt+MbPXHMtHr0U0i3tM69sYfnk=
Subject key identifier:   0C:3F:0B:62:C6:AA:B7:19:AC:B9:3C:FA:43:2A:72:60:BA:5A:04:E5
Certificate issuer:       /CN=B139021633E78ADF542F9ECA67CAD78E1B463ED2
Certificate serial:       38D6E6852AE1C0B82F0E0784DD4F58E0B56E5BEA
Authority key identifier: B1:39:02:16:33:E7:8A:DF:54:2F:9E:CA:67:CA:D7:8E:1B:46:3E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa
Signing time:             Tue 09 May 2023 16:37:11 +0000
ROA not before:           Tue 09 May 2023 16:32:11 +0000
ROA not after:            Tue 07 May 2024 16:37:11 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/41 maxlen: 41

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d6:e6:85:2a:e1:c0:b8:2f:0e:07:84:dd:4f:58:e0:b5:6e:5b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B139021633E78ADF542F9ECA67CAD78E1B463ED2
        Validity
            Not Before: May  9 16:32:11 2023 GMT
            Not After : May  7 16:37:11 2024 GMT
        Subject: CN=0C3F0B62C6AAB719ACB93CFA432A7260BA5A04E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:81:6a:8b:29:83:3c:be:46:37:db:0b:32:
                    61:ea:58:3c:48:03:92:8e:fa:f8:98:0f:51:49:02:
                    83:9a:08:34:d7:c3:fe:48:73:92:4c:32:b1:da:0b:
                    4e:6b:38:ca:6b:27:bb:d0:27:90:cc:cf:64:62:56:
                    7d:98:79:58:9b:2f:55:f7:71:79:77:b3:67:85:3e:
                    b0:cd:22:f0:df:cf:50:52:35:9b:31:fb:20:51:8c:
                    64:13:c8:fc:22:b6:37:93:b6:52:fd:ef:9c:1a:56:
                    03:69:88:cc:6b:35:41:76:38:53:3a:0c:54:b4:b4:
                    71:4a:d8:cf:0d:08:8a:65:60:83:26:57:52:de:94:
                    8b:4b:41:6d:4e:37:5a:29:c5:d6:ef:5c:0d:96:35:
                    23:9d:36:72:7d:d3:5b:84:e3:28:15:14:8e:0b:13:
                    03:b9:03:ce:f6:52:72:3d:a2:8c:bd:f3:f0:6e:34:
                    6a:d4:a7:63:38:ff:c6:95:39:3c:13:7b:ba:1d:a1:
                    58:43:97:fc:75:9d:67:19:d2:64:7c:ec:43:51:d9:
                    0d:ef:1d:78:c7:b5:ba:56:09:eb:c3:61:c0:bd:55:
                    f1:59:50:ed:86:f3:cb:f0:b0:b1:f5:99:90:e5:62:
                    c8:2c:da:25:22:29:c7:7e:ff:6b:db:bb:6f:5b:77:
                    4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3F:0B:62:C6:AA:B7:19:AC:B9:3C:FA:43:2A:72:60:BA:5A:04:E5
            X509v3 Authority Key Identifier:
                keyid:B1:39:02:16:33:E7:8A:DF:54:2F:9E:CA:67:CA:D7:8E:1B:46:3E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/41

    Signature Algorithm: sha256WithRSAEncryption
         b0:1a:fa:48:4e:bb:97:20:b2:d2:7a:44:31:96:14:3c:f6:4d:
         3c:fe:ce:8b:b0:30:db:65:66:e7:c4:b2:1d:31:9c:a1:3c:49:
         59:08:f4:0e:67:13:b8:f7:79:16:bb:2f:30:b0:1a:5a:24:a5:
         84:bc:1a:3c:05:99:0e:47:f0:1e:b6:74:e5:37:a3:41:fb:9d:
         64:cc:00:b0:66:32:c4:e4:74:8a:c8:f5:83:1a:2f:c8:d4:11:
         90:7c:12:e7:9a:80:11:70:35:1f:bc:c2:65:5c:97:b3:49:48:
         a1:c0:0f:27:da:5d:55:61:a9:d8:9c:6d:f1:57:75:1b:e8:c1:
         fd:ef:bf:5e:17:34:64:c3:31:77:31:50:ff:8f:0f:a6:fc:23:
         ab:78:f1:c5:56:2e:f4:d3:29:50:f7:84:09:a8:05:a4:a7:99:
         3c:10:88:4a:69:bd:b8:9f:20:be:4f:a3:4a:91:af:9b:94:2c:
         1f:c5:f4:9e:d7:9a:ad:27:eb:34:8c:de:a1:a0:ff:3e:bd:a2:
         74:f0:0f:23:44:21:0d:6e:2e:5e:0a:a7:15:d6:f7:f5:99:91:
         f2:c5:9e:43:91:77:21:66:68:9f:ba:11:8f:74:c8:d1:a8:5a:
         5a:7f:fa:1d:a3:64:a7:84:38:8e:0f:69:82:78:5a:56:e8:bc:
         db:c9:7d:01
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUONbmhSrhwLgvDgeE3U9Y4LVuW+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzOTAyMTYzM0U3OEFERjU0MkY5RUNBNjdDQUQ3OEUx
QjQ2M0VEMjAeFw0yMzA1MDkxNjMyMTFaFw0yNDA1MDcxNjM3MTFaMDMxMTAvBgNV
BAMTKDBDM0YwQjYyQzZBQUI3MTlBQ0I5M0NGQTQzMkE3MjYwQkE1QTA0RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgYFqiymDPL5GN9sLMmHqWDxI
A5KO+viYD1FJAoOaCDTXw/5Ic5JMMrHaC05rOMprJ7vQJ5DMz2RiVn2YeVibL1X3
cXl3s2eFPrDNIvDfz1BSNZsx+yBRjGQTyPwitjeTtlL975waVgNpiMxrNUF2OFM6
DFS0tHFK2M8NCIplYIMmV1LelItLQW1ON1opxdbvXA2WNSOdNnJ901uE4ygVFI4L
EwO5A872UnI9ooy98/BuNGrUp2M4/8aVOTwTe7odoVhDl/x1nWcZ0mR87ENR2Q3v
HXjHtbpWCevDYcC9VfFZUO2G88vwsLH1mZDlYsgs2iUiKcd+/2vbu29bd04DAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUDD8LYsaqtxmsuTz6QypyYLpaBOUwHwYDVR0j
BBgwFoAUsTkCFjPnit9UL57KZ8rXjhtGPtIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnB4VTFrSDdXUnB1R29HR25hSDdmVWpNM0pvY2F4cnNTcjdLZTJBV3lQ
bm8vMC9CMTM5MDIxNjMzRTc4QURGNTQyRjlFQ0E2N0NBRDc4RTFCNDYzRUQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxMzkwMjE2MzNFNzhBREY1
NDJGOUVDQTY3Q0FENzhFMUI0NjNFRDIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JweFUxa0g3V1JwdUdvR0duYUg3ZlVqTTNKb2NheHJzU3I3S2UyQVd5UG5vLzAv
MzIzODMwMzEzYTM4MzAzYTM0MzAzMDMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIw
MzIzNzMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHKAEAgEAAMA0GCSqGSIb3DQEBCwUAA4IB
AQCwGvpITruXILLSekQxlhQ89k08/s6LsDDbZWbnxLIdMZyhPElZCPQOZxO493kW
uy8wsBpaJKWEvBo8BZkOR/AetnTlN6NB+51kzACwZjLE5HSKyPWDGi/I1BGQfBLn
moARcDUfvMJlXJezSUihwA8n2l1VYanYnG3xV3Ub6MH9779eFzRkwzF3MVD/jw+m
/COrePHFVi700ylQ94QJqAWkp5k8EIhKab24nyC+T6NKka+blCwfxfSe15qtJ+s0
jN6hoP8+vaJ08A8jRCENbi5eCqcV1vf1mZHyxZ5DkXchZmifuhGPdMjRqFpaf/od
o2SnhDiOD2mCeFpW6LzbyX0B
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:30 2023 by rpki-client on console.sobornost.net