Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a663830303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a663830303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          i4gA4fQBOWiPqbr9pE+ZhYAN7zsl4DmeyoXJW6NkrWc=
Subject key identifier:   FF:B7:E0:4E:96:B0:F8:34:8D:13:A4:5E:10:02:68:4D:99:C3:1E:63
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       1D752DE29EA854D69092973AAB67D4ABC9A51FCD
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a663830303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:00 +0000
ROA not before:           Fri 08 Nov 2024 14:19:00 +0000
ROA not after:            Fri 07 Nov 2025 14:24:00 +0000
asID:                     267027
IP address blocks:        2804:4708:f800::/37 maxlen: 37

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 12:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:2d:e2:9e:a8:54:d6:90:92:97:3a:ab:67:d4:ab:c9:a5:1f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:00 2024 GMT
            Not After : Nov  7 14:24:00 2025 GMT
        Subject: CN=FFB7E04E96B0F8348D13A45E1002684D99C31E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:54:bb:3f:dc:1c:5e:eb:0e:43:fd:be:db:
                    d0:f0:e5:0f:ee:33:d7:97:19:c3:7c:c8:f3:28:a1:
                    fd:57:42:03:80:3e:19:47:d5:59:ec:9c:26:7c:42:
                    de:ec:0b:1d:92:fc:99:9e:6c:69:d4:c9:5c:d9:3a:
                    d6:22:fd:54:71:09:bd:db:01:9c:e8:7f:7c:cb:59:
                    0d:a9:10:ca:31:28:61:5b:52:6a:6b:89:05:02:ea:
                    73:87:44:c4:31:f8:c7:b3:af:61:01:7e:7d:cc:72:
                    30:40:40:77:32:0f:03:a6:76:dc:1c:d3:7d:93:08:
                    07:f9:b3:47:5e:28:5d:c8:b1:14:90:76:d2:11:2c:
                    f3:23:bc:59:8b:9a:78:de:e2:d6:49:6d:b4:8e:45:
                    11:83:d3:65:77:af:54:52:a9:dc:f5:24:a4:47:f9:
                    b1:04:ef:63:2c:c6:35:a6:a9:a1:24:39:3c:2e:60:
                    30:d9:1a:78:52:de:22:7a:03:f6:82:1e:20:27:d5:
                    f8:2e:c8:96:5d:7c:07:bd:80:af:79:13:73:b3:e2:
                    e5:49:0a:40:b5:89:0d:52:81:b6:5f:6f:d2:85:dc:
                    93:a5:74:19:a9:ef:9e:57:be:9f:94:d4:f4:41:a2:
                    26:44:13:2d:bd:3f:5d:33:7d:35:2c:db:25:9a:5f:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B7:E0:4E:96:B0:F8:34:8D:13:A4:5E:10:02:68:4D:99:C3:1E:63
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a663830303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:f800::/37

    Signature Algorithm: sha256WithRSAEncryption
         23:04:db:72:28:72:b7:cd:af:cb:1d:ef:aa:66:57:d6:2c:ee:
         31:b7:c0:ce:69:20:fe:af:42:18:0a:fd:4d:df:a9:11:30:97:
         2b:70:da:2a:5e:f0:a3:85:73:3e:20:13:de:36:82:65:59:e0:
         99:68:fa:27:d1:4b:40:f4:05:80:f4:84:9c:06:23:08:12:f1:
         cd:50:10:15:4e:cd:fd:a8:79:b9:8d:3c:d8:0c:db:30:15:8c:
         80:04:68:79:48:44:5f:c3:69:54:67:17:ac:b5:a6:20:0d:3e:
         c1:9d:8e:26:91:5a:7b:fc:af:cb:94:05:ee:49:e4:fa:fa:3e:
         ec:e3:bc:a9:e2:f4:dc:b7:36:07:cc:3c:ca:76:3b:31:22:6f:
         07:66:cd:17:a7:35:81:d8:45:56:45:bc:b3:f2:f7:79:b1:78:
         15:7e:5d:1c:33:0d:bd:82:dd:d9:9b:ff:cb:e1:75:1e:37:49:
         c0:85:fc:9e:4d:5e:31:60:44:d2:72:17:ae:da:62:aa:b2:98:
         9c:44:19:21:65:47:d7:a2:93:ae:60:cf:2d:e5:e2:ce:49:0e:
         1b:6e:a6:fa:29:51:ce:15:d7:c1:9c:d5:9c:06:a6:ea:59:2c:
         d4:f8:f4:62:cf:ed:7a:ae:1b:39:ef:89:ab:b9:f0:d1:1c:76:
         01:a7:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org