Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a323030303a3a2f33362d3336203d3e20323633363334.roa
File:                     323830343a313036383a323030303a3a2f33362d3336203d3e20323633363334.roa (raw, json)
Hash identifier:          4vgDej1Azi7YPGRGNFpMFLnzVjLsQXawvGc3dKU2/ro=
Subject key identifier:   7B:88:61:A4:A0:99:E4:0B:2B:C0:54:12:B5:C3:73:BF:7B:F1:64:14
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       59E8D606B3EA86797A3DFC103E3D55D7F6CD3160
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a323030303a3a2f33362d3336203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:04 +0000
ROA not before:           Mon 18 Nov 2024 13:42:04 +0000
ROA not after:            Mon 17 Nov 2025 13:47:04 +0000
asID:                     263634
IP address blocks:        2804:1068:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e8:d6:06:b3:ea:86:79:7a:3d:fc:10:3e:3d:55:d7:f6:cd:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:04 2024 GMT
            Not After : Nov 17 13:47:04 2025 GMT
        Subject: CN=7B8861A4A099E40B2BC05412B5C373BF7BF16414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:0e:94:40:53:a4:1a:d0:e2:c8:c3:f9:81:
                    52:e9:3c:09:93:f7:a4:34:15:37:0b:00:9c:70:6d:
                    92:ed:02:51:29:69:f1:da:61:65:0e:2f:be:4d:26:
                    64:d7:0a:73:88:b5:f2:92:87:a1:d2:46:2f:56:2f:
                    b8:5a:50:be:2f:10:d3:11:63:a0:ff:78:45:5d:5c:
                    bd:3d:10:8f:e4:8a:e4:ff:18:42:5f:33:16:15:3c:
                    54:48:ba:b5:7f:00:5a:46:34:44:be:34:5d:2a:69:
                    9c:3d:11:32:5f:05:ce:25:6c:52:f0:be:a9:d7:91:
                    3e:a3:8c:30:8e:5f:89:97:a7:93:04:a2:da:4d:c5:
                    3c:45:18:26:e6:48:bb:f5:3b:db:9a:6d:25:63:19:
                    ab:be:b8:14:62:a5:72:98:75:71:87:4a:ba:79:4c:
                    d4:22:b1:8f:6d:a6:c5:b2:61:3c:e1:b4:8e:a1:74:
                    b8:12:79:82:dd:1e:b6:50:84:03:55:32:2e:de:42:
                    85:09:f8:ca:d2:45:b6:df:49:07:2c:c3:6e:e0:0e:
                    3d:36:4d:2a:45:cd:d7:a0:42:8e:11:cb:de:d0:7e:
                    46:f3:8a:03:5f:7c:4e:18:9a:a2:a8:20:1e:bd:5d:
                    b4:e7:f3:cb:b1:b6:16:65:ee:84:e8:f7:73:15:4a:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:88:61:A4:A0:99:E4:0B:2B:C0:54:12:B5:C3:73:BF:7B:F1:64:14
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a323030303a3a2f33362d3336203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:5e:79:48:a3:56:89:7c:3e:77:df:e3:b9:55:06:3f:e3:
         e4:a8:6f:41:14:08:7f:7b:36:27:a4:7d:a5:66:4a:c3:45:01:
         30:fe:22:fa:6f:1d:86:dd:d0:46:b1:26:9c:d1:0a:8e:4b:82:
         10:35:f6:89:a5:03:67:e7:e3:e9:7e:62:e6:06:61:0a:77:3c:
         c8:c2:4d:c3:c5:6e:88:55:f3:97:3f:0d:74:b1:2b:31:6e:07:
         c2:75:0a:4f:42:9b:3d:d2:e8:23:a9:fa:3d:2e:b9:cc:11:b6:
         1a:21:9e:73:90:0e:99:fd:97:69:ac:a8:26:56:d1:93:4f:a6:
         79:f7:89:a3:00:10:ed:02:c1:63:3d:3e:a8:d0:f7:45:e4:d7:
         c8:4c:60:2f:23:76:43:8d:b4:66:0f:ca:56:8c:f1:9e:92:bc:
         c6:2a:81:c3:68:44:33:1a:95:1b:f2:2b:5d:97:c8:52:13:ff:
         77:8b:9a:c1:1f:5a:a1:90:bf:88:8f:63:e8:80:89:41:5b:21:
         6a:3b:64:a2:94:ab:23:c1:15:f6:b0:1f:68:5e:25:e5:8f:a1:
         74:7b:4f:79:81:77:98:4f:d8:13:b4:7b:99:47:58:17:3b:7d:
         53:31:bc:f8:2f:4d:15:56:16:ac:83:7c:3a:da:c0:99:dc:ca:
         08:17:69:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org