Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313130303a3a2f34302d3430203d3e20323730363834.roa
File:                     323830343a366663383a313130303a3a2f34302d3430203d3e20323730363834.roa (raw, json)
Hash identifier:          36CtMtsoUJCn6MjfOc28pEeny84p8gsC8HCBDqmQuzk=
Subject key identifier:   F0:C2:BB:63:04:E8:9F:73:0B:AC:EA:A9:B0:9C:DA:9E:15:73:EA:79
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       52AFB5026541F05E46BBF8FBE79D1E3444E6DAD0
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313130303a3a2f34302d3430203d3e20323730363834.roa
Signing time:             Sat 03 Feb 2024 21:18:11 +0000
ROA not before:           Sat 03 Feb 2024 21:13:11 +0000
ROA not after:            Sat 01 Feb 2025 21:18:11 +0000
asID:                     270684
IP address blocks:        2804:6fc8:1100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 03 Feb 2024 23:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:af:b5:02:65:41:f0:5e:46:bb:f8:fb:e7:9d:1e:34:44:e6:da:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 21:13:11 2024 GMT
            Not After : Feb  1 21:18:11 2025 GMT
        Subject: CN=F0C2BB6304E89F730BACEAA9B09CDA9E1573EA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:36:3b:3b:e2:21:92:9e:f6:b7:9a:b6:b7:
                    ac:5f:41:c5:6e:27:33:02:19:d9:4a:d1:5d:58:9f:
                    a1:8f:e0:66:b0:40:8c:80:48:01:cd:91:9b:6c:41:
                    c7:31:27:d2:29:3e:cf:97:a1:c2:08:76:ea:d5:1c:
                    13:66:02:f9:43:e3:3d:32:4e:4f:99:95:6a:28:a9:
                    bc:ed:d1:41:d5:4f:dd:bd:13:0b:da:46:d1:6a:64:
                    4a:27:74:a3:e5:58:cd:91:d0:d3:ae:a3:3a:26:12:
                    8f:27:39:ca:e1:9c:62:94:96:20:40:b4:28:47:f2:
                    e3:7d:0d:7f:ea:d2:6b:9d:20:78:18:db:1e:5e:92:
                    2c:5b:df:6f:ff:2c:b0:93:fa:3e:0c:8c:a8:3e:ac:
                    71:02:d4:a5:c2:7a:07:ba:f4:8a:93:14:88:96:9b:
                    9d:c0:51:48:9f:65:7b:d4:dd:83:a8:fa:e3:ef:13:
                    a8:f6:c9:3a:56:a3:68:cf:b4:41:37:69:f4:3f:09:
                    f8:04:5b:67:2a:e8:d6:d9:af:f8:c7:2e:7c:1c:a9:
                    28:20:be:f8:c0:a7:8f:b3:46:fe:27:77:b7:4a:17:
                    30:ae:93:fd:8d:f2:74:41:b1:48:f2:17:15:77:42:
                    12:10:96:a8:89:c4:b5:4b:9e:91:3f:be:27:0b:cb:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:BB:63:04:E8:9F:73:0B:AC:EA:A9:B0:9C:DA:9E:15:73:EA:79
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313130303a3a2f34302d3430203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:ea:54:37:34:3c:bc:f0:13:f9:0f:06:70:73:6e:17:92:
         1b:de:a1:7a:4d:c0:47:d0:a6:a2:3e:59:0f:44:e0:f0:22:22:
         85:55:20:bd:c3:d7:d9:49:e4:91:d5:43:86:85:d3:a0:33:2d:
         c1:3f:a1:14:f1:39:d3:cb:b9:e5:db:49:cb:bd:5c:1f:7b:d7:
         65:01:c6:81:17:69:fc:59:ee:f8:10:b7:b5:c8:06:ab:be:fb:
         9c:f5:7f:f2:3b:de:ed:fe:61:0e:8e:b9:70:fb:13:df:00:7d:
         13:f3:49:17:02:57:fd:60:a7:26:5f:b7:d1:b5:63:95:b2:07:
         d5:3d:0b:a9:95:e9:29:e5:d1:f8:92:85:a5:7e:33:03:10:ed:
         68:01:d4:4e:be:89:33:9d:18:71:72:58:ce:a5:74:ed:4b:34:
         4b:ce:b1:82:9d:5f:99:7d:58:cc:e0:14:06:fd:0b:1e:e8:bb:
         21:95:7d:b0:a2:6c:2a:2f:90:87:1e:46:48:67:6a:22:73:df:
         ae:36:ba:42:0b:6f:31:c1:ec:8a:ba:2d:17:4f:50:c3:f8:14:
         16:93:95:73:e4:cb:57:12:72:75:9f:34:31:ba:d3:9b:f2:2d:
         17:ae:42:8f:07:4b:77:58:d7:95:b6:a5:69:28:0e:4c:1b:9f:
         dd:4c:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 02:30:40 2024 by rpki-client on console-ams.rpki-client.org