Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a353030303a3a2f33362d3336203d3e20323633363334.roa
File:                     323830343a313036383a353030303a3a2f33362d3336203d3e20323633363334.roa (raw, json)
Hash identifier:          LWYi6fSs48aKy6yKqku5+GiZCplxeja3z3J0izgmKlw=
Subject key identifier:   0F:4A:44:27:AD:B6:50:D4:39:26:21:7D:F7:FB:4F:07:CC:11:F1:56
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       01ACFAE8A23D69A80A19EB900096FF1D6AFD68F8
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a353030303a3a2f33362d3336203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:02 +0000
ROA not before:           Mon 18 Nov 2024 13:42:02 +0000
ROA not after:            Mon 17 Nov 2025 13:47:02 +0000
asID:                     263634
IP address blocks:        2804:1068:5000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:fa:e8:a2:3d:69:a8:0a:19:eb:90:00:96:ff:1d:6a:fd:68:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:02 2024 GMT
            Not After : Nov 17 13:47:02 2025 GMT
        Subject: CN=0F4A4427ADB650D43926217DF7FB4F07CC11F156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:96:31:81:8e:80:b8:38:d0:64:a6:9c:2f:
                    81:7c:86:b4:72:df:17:19:bf:c1:ee:95:89:70:f8:
                    4d:8e:5b:74:28:a0:54:2b:61:24:46:81:80:39:af:
                    52:6d:90:48:46:5c:5d:bb:a1:2f:fc:32:16:6c:90:
                    89:d4:a8:ed:f1:ce:57:bc:49:02:be:a6:fd:fd:53:
                    34:7d:46:24:09:14:05:cd:ad:2f:fa:20:b9:c0:86:
                    fd:69:92:ab:6d:c3:fa:1b:ef:6a:8c:84:50:9b:ca:
                    5c:e7:bc:ea:1a:9c:27:64:4e:e9:56:c6:be:11:f6:
                    06:62:12:3f:2a:5b:18:47:60:f6:ed:24:81:21:c9:
                    44:23:37:98:92:24:8b:0d:f5:02:2b:e5:17:ab:b4:
                    23:7e:d5:6d:ca:31:21:8d:b0:d9:c0:60:79:1d:4e:
                    1b:0b:22:66:66:ff:d4:46:d4:61:39:b5:94:39:b3:
                    84:62:db:83:4c:fe:77:fc:42:f7:e8:c3:d4:c8:8b:
                    a2:6d:88:9e:55:6f:07:86:d1:9f:2c:f2:f1:18:59:
                    2e:13:ba:d8:5f:72:b3:8f:ad:3d:30:15:fa:51:67:
                    df:9b:7f:d7:ea:3a:43:d3:e0:52:be:0f:dc:96:02:
                    3f:42:30:dc:aa:67:79:01:f9:bc:02:68:a8:5e:a6:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4A:44:27:AD:B6:50:D4:39:26:21:7D:F7:FB:4F:07:CC:11:F1:56
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a353030303a3a2f33362d3336203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:ae:76:9b:bf:bf:4d:9a:76:aa:5f:8b:d7:e8:c2:f1:a9:
         61:25:38:92:76:c0:dd:4b:bc:b1:c2:69:a9:78:74:7a:65:29:
         85:c4:6c:28:e4:41:2e:bc:36:76:56:78:e0:3a:22:49:35:57:
         2c:c4:7d:84:25:26:41:91:b6:bd:99:e6:20:e0:5d:3a:e7:1d:
         ce:60:e3:ce:3f:f0:da:ec:a9:30:db:6c:24:a9:25:14:b4:dd:
         4c:da:7c:8f:fa:7b:23:20:77:21:ab:03:66:a1:51:81:be:40:
         fa:5e:1f:c1:6b:8c:59:a8:0e:c1:63:ca:97:89:5c:9c:75:a9:
         35:00:62:61:96:7a:d9:33:b1:25:b0:67:ac:af:63:8b:ab:9a:
         d9:31:28:8e:01:e0:36:54:ba:7e:d1:bb:14:73:67:9f:8a:48:
         28:00:62:74:dd:1f:bc:8b:cf:10:29:b2:b4:70:60:71:4d:1f:
         72:83:c1:b5:42:aa:d8:8b:16:84:b9:83:b1:46:d0:8a:b5:d2:
         2b:5e:c6:72:c1:69:a2:c0:08:a2:6a:7f:c7:b9:6d:91:d4:03:
         fc:26:13:cc:83:56:a3:c5:9b:1f:1b:bc:10:0a:6e:00:c5:e6:
         70:1f:86:3f:3d:d1:b3:3c:84:5e:36:f4:0b:cd:18:98:b2:d6:
         d2:79:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:36 2024 by rpki-client on console-fra.rpki-client.org