Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653830303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a653830303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          E4zF9tQTBMaHJeQskTMwf7U8Keg/Pn569OcrtIy/H28=
Subject key identifier:   4D:95:35:78:5F:52:BC:CD:8A:3F:1D:1B:F2:8C:87:3C:BC:B6:07:96
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       64D5316BEA4FE0345C8600A2F45C7922FACB54F4
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653830303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:05 +0000
ROA not before:           Fri 08 Nov 2024 14:19:05 +0000
ROA not after:            Fri 07 Nov 2025 14:24:05 +0000
asID:                     267027
IP address blocks:        2804:4708:e800::/37 maxlen: 37

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 12:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d5:31:6b:ea:4f:e0:34:5c:86:00:a2:f4:5c:79:22:fa:cb:54:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:05 2024 GMT
            Not After : Nov  7 14:24:05 2025 GMT
        Subject: CN=4D9535785F52BCCD8A3F1D1BF28C873CBCB60796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:9b:2a:a5:21:83:4f:32:18:dc:32:8b:13:
                    1a:45:2f:8e:33:da:55:7e:d4:66:8a:70:f9:ac:e0:
                    50:14:ce:47:8f:d6:04:f5:25:7a:33:60:d3:40:69:
                    f3:4d:90:d3:38:be:87:7b:9a:01:f1:a9:24:eb:9a:
                    43:cc:4b:f3:b7:01:a0:4a:88:fa:a5:19:0b:e1:5d:
                    de:c7:c1:e6:b5:32:ad:60:e6:f6:bb:ec:ba:8e:c8:
                    ab:a5:08:cb:95:c3:65:fa:a9:4b:7a:d0:a9:3d:e8:
                    69:1b:41:72:ab:b3:ad:cd:db:61:01:a0:03:1a:58:
                    37:14:b2:e6:63:84:80:59:55:68:1f:70:82:3e:2d:
                    9a:19:d4:8b:21:4e:ad:c4:45:d6:09:f3:af:b0:a3:
                    8d:f3:76:ec:30:7d:24:18:6b:a1:7f:fe:c5:5b:dc:
                    1b:20:43:66:a1:33:fc:04:2f:49:d0:be:e5:7c:25:
                    d0:27:b9:90:83:e0:8c:89:e5:8e:ed:b7:12:ff:86:
                    7d:8b:32:b7:b0:42:a3:80:f5:eb:af:59:11:21:ab:
                    40:95:be:d3:e2:8d:55:c7:8d:eb:6a:36:98:01:14:
                    29:68:b9:09:20:17:90:3e:68:36:e2:d0:25:66:8f:
                    51:14:c3:cf:b4:e5:26:2f:a7:f3:19:ff:45:74:58:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:35:78:5F:52:BC:CD:8A:3F:1D:1B:F2:8C:87:3C:BC:B6:07:96
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a653830303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:e800::/37

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:9c:ea:2d:d9:59:53:f6:c9:41:ac:72:59:94:38:26:7e:
         ec:9a:ab:90:67:56:c6:72:43:fb:f2:dc:d5:ce:d7:0a:29:4b:
         4b:f4:55:df:9c:e5:59:22:f6:a3:50:80:2d:35:ad:72:09:67:
         29:e9:19:34:2c:7a:43:f6:72:3d:eb:4f:52:18:bc:47:3d:00:
         fb:72:ad:9f:8d:99:8d:de:28:29:28:75:82:83:49:62:dc:f2:
         12:46:db:cf:0b:21:1b:8a:95:89:2a:c5:bd:7a:45:f0:1c:30:
         a4:cf:dc:f2:8f:6e:d6:97:c5:5a:f1:c8:3f:97:78:37:e1:e0:
         7b:c3:b4:74:a3:10:8f:72:a9:1f:2e:5c:09:0a:b0:4b:89:1a:
         56:cc:ed:8b:bc:40:98:37:2d:a6:1b:48:2a:38:68:fd:a1:38:
         c6:91:ca:a8:6f:04:6b:18:ad:10:19:53:a5:76:cf:59:bb:e4:
         87:9e:cd:e8:cb:00:f1:bc:92:1b:a3:61:56:51:30:9f:81:7b:
         a4:aa:f7:e4:ba:31:b9:06:82:49:b0:a4:b6:eb:76:4a:02:33:
         e9:47:a1:94:af:d4:f8:13:e0:3e:4d:c9:be:ef:5d:41:d8:20:
         94:46:57:0a:b6:62:36:f2:6c:4e:e4:0c:36:ec:3c:26:ac:1c:
         db:6f:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org