Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a343030303a3a2f33362d3336203d3e20323633363334.roa
File:                     323830343a313036383a343030303a3a2f33362d3336203d3e20323633363334.roa (raw, json)
Hash identifier:          sLLpWNMPSQ/Wx9oWQvPrKbiiZtBHj6zA+eF5fnxlQDU=
Subject key identifier:   45:81:29:95:D8:3D:0F:D1:57:8F:D7:4C:44:05:A4:25:73:BF:49:01
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       6BC90C22234A7D757DF41B0124B62577BADA0BD1
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a343030303a3a2f33362d3336203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:04 +0000
ROA not before:           Mon 18 Nov 2024 13:42:04 +0000
ROA not after:            Mon 17 Nov 2025 13:47:04 +0000
asID:                     263634
IP address blocks:        2804:1068:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c9:0c:22:23:4a:7d:75:7d:f4:1b:01:24:b6:25:77:ba:da:0b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:04 2024 GMT
            Not After : Nov 17 13:47:04 2025 GMT
        Subject: CN=45812995D83D0FD1578FD74C4405A42573BF4901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:36:05:6b:b8:1c:8a:64:27:92:90:d0:ef:
                    05:28:66:5f:55:44:25:9f:04:f9:e2:fa:44:41:7c:
                    06:55:f4:ee:3a:7b:40:5c:88:26:ec:cb:ae:b4:34:
                    25:ce:f4:86:5a:9c:e1:9d:df:43:cd:d4:c5:6f:03:
                    57:18:27:96:59:f2:ee:42:9a:29:d8:cf:99:31:62:
                    5c:2c:24:30:e2:af:1e:dd:59:f9:1d:7f:ce:28:b0:
                    23:28:84:c6:8c:49:15:3b:15:4b:85:02:5a:2a:cd:
                    ea:48:d2:06:84:e9:d4:77:c6:d6:87:2b:46:58:7c:
                    28:c3:9e:c0:cd:21:77:d5:d2:dd:a5:c5:e3:c2:5c:
                    b9:c2:46:85:cb:9f:e4:36:c8:a9:a3:4c:b4:f5:9d:
                    c2:df:73:f1:75:66:48:09:64:46:c6:36:c4:72:ab:
                    13:ae:76:24:c9:58:62:b2:15:9c:e9:02:5d:68:7b:
                    29:46:30:e6:ba:c0:22:cb:aa:f0:aa:12:52:a3:ba:
                    a9:c4:9c:65:58:43:11:7e:9a:02:f9:08:b0:98:c6:
                    9f:e0:ed:09:13:5d:c4:28:4e:67:55:c8:36:94:80:
                    11:d9:03:f7:ad:a4:02:7b:18:0e:7f:21:36:9f:8e:
                    18:72:19:e0:94:d0:04:38:dc:4c:17:68:3f:5d:56:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:81:29:95:D8:3D:0F:D1:57:8F:D7:4C:44:05:A4:25:73:BF:49:01
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a343030303a3a2f33362d3336203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:4d:f7:14:69:6f:27:23:16:0e:4d:e2:5a:9b:69:36:77:b6:
         a7:41:57:4e:31:ab:5b:7c:31:ad:02:a4:36:9f:a7:d4:95:e6:
         47:67:f9:de:01:2a:5e:f5:e3:ef:10:27:78:3b:95:ce:c5:f4:
         b2:dc:78:a4:a6:1d:0b:b6:7a:96:c1:be:b1:48:ab:8e:73:56:
         01:44:2c:f2:4f:82:62:98:83:ca:2a:10:0c:7e:58:cc:2e:e1:
         77:5f:19:5b:22:95:0a:11:e4:8d:1e:55:30:97:18:23:16:2d:
         aa:a7:08:cb:f7:b8:c8:bd:0b:f8:cd:af:0c:ab:b0:c0:90:09:
         2e:df:51:91:aa:9a:6c:4f:40:4a:5f:97:ab:73:b7:fb:f5:82:
         f8:2c:74:2e:f1:43:2a:41:55:72:8c:7b:fa:56:30:0f:ec:a1:
         84:93:fc:fd:8e:a7:c8:ec:c5:03:e8:ad:90:18:c3:a3:7b:42:
         f7:24:6c:89:6a:50:4d:0a:19:4c:4b:68:55:c8:74:74:3d:1b:
         12:fa:0b:e3:16:b9:99:b2:12:c5:9a:3b:df:d2:5d:63:f1:15:
         88:70:aa:ab:37:ff:4d:3a:ec:97:16:f3:97:79:ce:37:96:3b:
         67:7e:b2:10:a2:92:90:60:bd:24:0c:a9:27:80:c0:0d:62:23:
         e9:11:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org