Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a663030303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a663030303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          8XlKjlTme/R009eOnyJx5jaA6eiJwKu3A8TlnaOWJqo=
Subject key identifier:   CA:D5:DB:93:99:39:B9:57:A6:C6:13:8B:F7:74:05:B4:B4:37:0C:02
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       7CFF4C2BBBC835783578794D0BF097AD8F49D6B5
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a663030303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:05 +0000
ROA not before:           Fri 08 Nov 2024 14:19:05 +0000
ROA not after:            Fri 07 Nov 2025 14:24:05 +0000
asID:                     267027
IP address blocks:        2804:4708:f000::/37 maxlen: 37

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 12:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ff:4c:2b:bb:c8:35:78:35:78:79:4d:0b:f0:97:ad:8f:49:d6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:05 2024 GMT
            Not After : Nov  7 14:24:05 2025 GMT
        Subject: CN=CAD5DB939939B957A6C6138BF77405B4B4370C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:aa:b6:ac:19:e1:5a:03:18:f1:2a:61:7e:
                    2c:6d:d8:ac:7a:c8:5d:39:1a:ab:29:44:8c:2b:3e:
                    c9:94:a7:94:ef:0b:6c:83:ee:67:ef:6d:78:7e:19:
                    ee:be:b7:bd:e6:3b:de:dd:29:a6:4e:3e:c1:0f:d4:
                    e2:c9:ee:20:df:6f:9a:d4:11:d5:cb:4c:b9:e3:1e:
                    5c:a0:8e:75:47:59:b3:cb:e3:9f:52:97:33:4e:d9:
                    1f:cf:c0:bc:77:e9:cb:db:ec:53:9c:d5:6f:02:87:
                    1b:16:37:88:d8:3e:62:cb:53:dc:b2:10:08:67:5e:
                    93:39:8a:42:4d:f6:65:20:86:81:be:be:4f:bd:51:
                    27:f0:71:9a:16:f6:3f:07:a9:f7:6c:1f:9b:0a:d7:
                    01:88:78:22:0d:16:a5:ec:d0:e0:8e:16:42:87:ea:
                    7e:d6:4b:6a:0c:0d:59:37:30:cf:bb:39:29:49:1c:
                    a9:aa:db:b5:6d:36:41:d7:d5:85:86:19:02:fc:6b:
                    a8:68:2f:49:18:43:26:48:66:67:f5:d9:05:4c:79:
                    36:45:a7:cd:ce:d0:6b:9e:2d:b6:ea:6f:4f:b0:7b:
                    3f:b6:34:e9:19:c8:cf:80:16:da:22:7b:32:84:5d:
                    c7:ad:4d:9d:27:7c:ba:78:63:8b:f1:cd:10:47:bd:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:DB:93:99:39:B9:57:A6:C6:13:8B:F7:74:05:B4:B4:37:0C:02
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a663030303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:f000::/37

    Signature Algorithm: sha256WithRSAEncryption
         66:63:07:55:ac:e8:99:bf:f9:f6:85:a6:16:d7:68:4a:19:3e:
         94:44:63:8c:8a:75:0d:ed:a9:56:5d:a3:d5:ec:2c:8b:52:92:
         19:fb:c0:a0:a8:1a:23:fb:94:30:55:18:15:1b:46:11:6f:a2:
         b5:de:14:0e:ee:28:06:2e:16:03:db:c3:32:fb:6a:c5:80:ad:
         c6:e0:34:51:d2:84:81:e9:a3:81:29:91:0b:2f:ce:84:d4:0e:
         5c:e5:89:73:ee:8d:b9:ea:da:a9:2f:5f:6b:9c:12:41:eb:e6:
         c7:cc:8b:b8:12:9a:3f:26:e3:7e:61:d4:3e:40:50:5f:c3:69:
         c5:40:1a:29:3b:af:c2:00:1b:12:cc:13:9f:7d:3d:95:53:ab:
         fe:50:01:57:14:00:c6:3f:ea:87:19:93:38:ec:7e:71:44:a0:
         03:ce:f3:4d:8d:7b:44:70:cf:7f:83:59:56:2d:d6:ed:76:f7:
         61:ed:18:e4:af:ac:01:3b:fb:1a:e0:d1:b6:08:df:4f:b5:c4:
         6b:c8:bc:50:52:89:29:65:de:c8:11:9f:7c:b1:5a:55:35:bb:
         1a:f1:94:35:fa:bf:5a:c1:06:6b:1f:2d:ec:bf:f2:0b:62:3d:
         d7:1f:4c:a1:3f:5f:8d:9a:9b:6a:4e:f7:7f:57:e1:96:34:f8:
         39:4e:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org