Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313030303a3a2f33362d3336203d3e20323730363834.roa
File:                     323830343a366663383a313030303a3a2f33362d3336203d3e20323730363834.roa (raw, json)
Hash identifier:          wFoRZI9RLVfHC8JJPH5i/vUVDOpqO3U3lzhWI49yCkg=
Subject key identifier:   14:7D:92:46:0E:54:FB:93:13:9C:8A:83:90:D3:43:9F:49:C0:60:98
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       2D7E973777745029A9CA3B4E603280A96115CCDD
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313030303a3a2f33362d3336203d3e20323730363834.roa
Signing time:             Sat 03 Feb 2024 21:18:12 +0000
ROA not before:           Sat 03 Feb 2024 21:13:12 +0000
ROA not after:            Sat 01 Feb 2025 21:18:12 +0000
asID:                     270684
IP address blocks:        2804:6fc8:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sat 03 Feb 2024 23:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7e:97:37:77:74:50:29:a9:ca:3b:4e:60:32:80:a9:61:15:cc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 21:13:12 2024 GMT
            Not After : Feb  1 21:18:12 2025 GMT
        Subject: CN=147D92460E54FB93139C8A8390D3439F49C06098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:ad:a6:df:ed:72:7f:76:2d:8d:26:03:2f:
                    78:c7:d5:e2:34:50:d0:b3:d2:71:8d:c9:49:7d:ee:
                    e8:39:cd:ec:72:77:ef:8a:87:3f:00:fb:1e:c7:d7:
                    0c:0d:3e:3f:b7:16:b7:6c:f2:17:c9:8b:7e:9d:e8:
                    b8:5e:04:fc:4a:66:61:23:b0:cd:a4:d5:ad:54:74:
                    b0:80:4d:22:00:d2:09:2f:6a:83:6f:25:5b:78:48:
                    52:86:e2:55:af:67:ee:2b:ca:c4:d9:a5:5a:02:b2:
                    de:c2:5f:c6:2b:a2:f2:08:cc:97:05:6d:40:07:0d:
                    5a:4b:a6:b0:1a:d6:2a:82:ec:e0:94:17:c0:8f:e9:
                    6c:01:c6:20:92:c0:2a:a0:13:ea:bd:f9:1b:ad:a3:
                    48:5e:d2:ad:9e:94:66:2f:4f:0d:ab:ae:92:e6:6b:
                    0d:56:2b:a3:03:c8:09:b8:7b:03:ed:a0:11:3d:1e:
                    ba:3e:62:c7:dd:26:74:98:70:ff:cb:3a:9d:1f:f6:
                    e3:fa:9b:82:9f:aa:75:9f:da:40:87:3d:a3:ac:f2:
                    1c:a4:fa:ba:ab:6e:84:64:ac:3f:82:71:bc:87:9c:
                    df:d9:f9:43:f7:4c:28:42:bc:67:b8:f5:2c:e6:83:
                    52:2f:f2:4a:ef:0a:e1:c3:81:0e:87:ca:1d:49:0f:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7D:92:46:0E:54:FB:93:13:9C:8A:83:90:D3:43:9F:49:C0:60:98
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313030303a3a2f33362d3336203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:0d:85:69:6a:24:02:9f:3a:6d:15:e1:3a:13:ee:c5:5a:7d:
         29:fd:ca:f8:e4:60:95:a8:bf:37:08:ce:80:5c:55:d2:b4:43:
         54:63:d7:5f:06:c6:a3:8e:7f:94:af:ed:d0:eb:e9:99:7c:3c:
         da:de:b0:7e:ad:bb:65:4e:48:03:d9:39:a7:af:c3:37:41:d2:
         8b:82:0b:94:5c:0c:ef:0e:9f:55:0e:f2:df:ff:ad:9a:c9:68:
         3a:ae:bd:d7:ec:02:13:1e:2b:85:65:0d:0b:dd:94:d9:18:11:
         a5:11:9a:19:5b:2f:86:44:48:62:4b:fd:34:c6:f9:9f:ad:dc:
         b0:a6:1e:1f:39:a0:01:00:8c:b7:4d:3a:ef:04:97:5b:c5:88:
         01:bd:1d:76:88:72:f9:83:ed:c5:aa:e8:fe:e3:89:0d:eb:8a:
         8c:18:05:80:19:2b:06:a8:6b:d4:28:a1:8d:f7:61:7b:74:1f:
         2e:75:db:ea:f8:de:ba:3a:e2:c2:41:c2:02:9b:cb:fc:c3:29:
         f9:e2:ad:b0:f7:c3:3d:f7:51:83:76:13:8c:64:41:4a:23:75:
         54:bf:6a:eb:eb:4c:27:35:3a:2f:2a:f9:f3:86:d8:e6:71:c4:
         12:c3:2e:3f:18:a1:93:3e:50:4a:61:17:f5:ac:04:22:38:93:
         6d:a0:20:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 01:53:56 2024 by rpki-client on console-fra.rpki-client.org