Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333030303a3a2f33372d3337203d3e20323633363334.roa
File:                     323830343a313036383a333030303a3a2f33372d3337203d3e20323633363334.roa (raw, json)
Hash identifier:          1l85Aody8XG0jyMZ6R2ioXRb9f11qfsXsBeWh9awhiM=
Subject key identifier:   97:42:1E:84:8B:A5:A5:1A:FA:5D:CB:F5:B7:50:E9:D1:ED:FE:8E:D2
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       71F99DAC0D46B5A41F81A4B196010FE1380E33FA
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333030303a3a2f33372d3337203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:02 +0000
ROA not before:           Mon 18 Nov 2024 13:42:02 +0000
ROA not after:            Mon 17 Nov 2025 13:47:02 +0000
asID:                     263634
IP address blocks:        2804:1068:3000::/37 maxlen: 37

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f9:9d:ac:0d:46:b5:a4:1f:81:a4:b1:96:01:0f:e1:38:0e:33:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:02 2024 GMT
            Not After : Nov 17 13:47:02 2025 GMT
        Subject: CN=97421E848BA5A51AFA5DCBF5B750E9D1EDFE8ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:75:f8:40:38:62:11:f0:bc:53:96:ec:37:
                    72:d3:5b:de:d9:8a:84:e8:9f:40:5e:c8:88:74:5e:
                    40:bb:78:f7:78:fa:c9:09:10:19:c4:48:4b:5e:f7:
                    f8:7c:0f:cb:1d:69:44:39:aa:5f:84:0f:0b:65:e2:
                    f6:a4:81:8a:f4:01:09:3f:b0:e1:55:c2:86:73:30:
                    5d:12:35:63:f1:ad:40:4f:b8:56:0d:51:4a:7e:34:
                    f9:c8:f8:59:e6:ec:11:4f:d7:67:8d:cb:71:11:f4:
                    4d:44:ee:98:a3:fb:02:a3:0b:1f:3d:a4:aa:ca:0f:
                    0b:ee:e0:4f:d7:79:16:88:e9:19:f7:5b:68:9e:f4:
                    af:32:fc:a2:da:01:fa:69:ba:33:f6:b2:08:ad:0e:
                    5a:ce:d5:bf:ad:ee:67:30:c9:e2:51:2e:91:d2:e9:
                    d3:8a:d2:67:ad:1e:ca:35:41:64:6a:2c:3a:d2:9e:
                    ab:f5:8f:81:f7:9a:b8:38:ee:2a:32:d2:59:d4:6d:
                    0b:07:ac:3a:d1:76:47:89:7f:9e:96:96:c8:4e:42:
                    53:3e:72:3d:75:3e:8b:86:ac:fe:8e:1c:ec:f5:c8:
                    b3:78:89:18:33:79:b1:e8:81:42:58:2a:f1:31:4e:
                    db:13:bc:51:5d:f2:e5:38:37:84:17:33:a1:e9:f9:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:42:1E:84:8B:A5:A5:1A:FA:5D:CB:F5:B7:50:E9:D1:ED:FE:8E:D2
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333030303a3a2f33372d3337203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         28:85:70:fc:1e:48:94:16:ca:19:59:23:47:c0:20:c0:e8:a8:
         2c:53:d0:56:05:21:6c:70:61:93:8d:5a:ee:c4:19:fc:5e:6c:
         ab:57:d7:d8:e0:22:4c:62:3d:ee:ec:8d:19:71:87:d1:16:7d:
         4a:01:22:64:d4:92:0f:ab:e4:0b:ca:24:f5:64:03:40:16:1c:
         30:78:b8:31:13:04:75:f2:72:78:4e:42:35:59:f8:7a:63:09:
         28:0d:2b:c0:4c:a8:51:f4:25:75:ea:da:e9:c1:ba:f8:55:a7:
         6f:fc:3e:5f:db:c6:91:8f:ad:95:91:4a:56:2c:b0:e3:a2:20:
         d8:67:6d:81:f7:c3:8d:cd:f3:b5:30:95:7e:97:91:df:17:95:
         30:9c:c5:33:46:3e:27:42:b2:04:57:01:cd:24:25:e6:36:25:
         d1:12:9f:fa:ea:95:18:82:28:47:43:fb:9c:4a:a1:02:b7:a4:
         86:8c:30:28:ac:cb:d7:33:7f:79:a7:26:18:e2:1d:a1:35:40:
         53:0d:ad:0a:29:4b:ce:c9:a6:19:91:b2:d6:aa:4f:cb:c5:61:
         c2:27:32:a8:59:f5:8a:1c:99:af:71:f8:fd:31:f7:b1:98:27:
         c0:11:ae:81:98:6f:97:11:fa:c3:64:d0:85:33:e7:ac:db:8d:
         d2:55:43:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----