Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a363030303a3a2f33362d3336203d3e20323633363334.roa
File:                     323830343a313036383a363030303a3a2f33362d3336203d3e20323633363334.roa (raw, json)
Hash identifier:          OCfyK+BcM49VIjK/9YTcmCjiP/bsgNG5a8oJORuHJMM=
Subject key identifier:   89:65:1A:28:A0:CD:96:CA:03:AF:6C:7D:C7:84:2D:A1:EF:1F:BC:25
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       78C5CB8A7B97C8861EE5504554F58EB6F0E74037
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a363030303a3a2f33362d3336203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:46:57 +0000
ROA not before:           Mon 18 Nov 2024 13:41:57 +0000
ROA not after:            Mon 17 Nov 2025 13:46:57 +0000
asID:                     263634
IP address blocks:        2804:1068:6000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c5:cb:8a:7b:97:c8:86:1e:e5:50:45:54:f5:8e:b6:f0:e7:40:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:41:57 2024 GMT
            Not After : Nov 17 13:46:57 2025 GMT
        Subject: CN=89651A28A0CD96CA03AF6C7DC7842DA1EF1FBC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:12:c1:df:81:f9:9c:13:2a:56:07:3c:86:
                    24:88:97:44:49:60:29:60:79:92:cc:e2:c2:63:21:
                    64:c8:bc:2d:7c:fa:6b:42:6f:2d:7b:96:75:38:13:
                    ad:65:2e:a2:fc:1b:01:5e:19:43:a7:34:2f:5f:18:
                    c7:66:50:a4:0a:04:47:81:38:21:5d:37:b2:fb:c7:
                    18:69:f5:94:af:f7:96:59:2c:39:e8:83:58:51:4f:
                    ab:74:a2:b3:7a:1a:07:c3:94:10:40:d0:b1:b8:dc:
                    f1:47:48:03:84:91:48:3a:0f:c1:66:e2:c3:7f:fc:
                    52:f5:44:69:c2:0d:f4:11:3b:13:33:26:4d:46:0e:
                    d0:41:98:a8:fa:3d:ae:aa:bd:0b:45:25:7c:1b:e8:
                    d4:ad:60:6c:79:d7:ff:66:03:df:48:2e:59:a1:52:
                    0f:b8:73:f3:21:85:0b:c3:f5:14:e4:bd:00:15:2d:
                    a2:a8:7d:d8:35:e6:9f:bf:97:07:cf:ba:c4:86:0b:
                    6d:92:2b:0c:ca:6f:6d:6d:b1:c0:08:38:ca:fa:0c:
                    70:10:f3:1d:a6:17:85:d4:04:f6:1a:34:0c:af:3c:
                    8d:f3:d6:e8:a9:8c:1b:42:7f:6b:71:11:f2:26:af:
                    ab:7f:6b:38:43:d8:3c:c2:7b:dd:02:bf:54:13:fd:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:1A:28:A0:CD:96:CA:03:AF:6C:7D:C7:84:2D:A1:EF:1F:BC:25
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a363030303a3a2f33362d3336203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:b2:69:a1:75:46:c7:84:d7:04:84:c9:24:50:74:48:2b:33:
         ed:91:d1:01:33:33:c3:e9:56:25:19:98:bb:3a:6c:7a:ec:91:
         17:6b:50:4c:14:63:8c:e2:a1:07:37:60:4d:e5:d3:33:b1:c7:
         61:5d:52:15:be:be:1a:48:81:10:0f:1a:bc:06:d6:90:b0:aa:
         ee:63:16:03:dc:a2:73:f6:8b:74:23:cc:82:c9:c9:93:69:68:
         f2:16:ba:d4:1d:97:99:88:93:91:65:a4:9e:2b:df:48:e6:e7:
         d3:1c:0c:55:ec:f6:a9:23:3b:df:05:1e:47:da:5e:f6:9d:f0:
         a2:74:19:6c:71:59:44:82:34:7a:86:f4:0d:b6:83:05:84:32:
         d3:07:1a:5a:1e:00:2b:f0:71:42:1c:2b:ed:9e:24:20:84:80:
         68:c7:bf:67:ba:35:1c:44:62:d8:46:b7:30:db:96:3a:2a:6b:
         9e:f9:19:4d:a4:8e:2f:63:e3:8a:87:1e:89:f5:33:fe:c0:2d:
         01:6d:c8:38:74:1f:a1:2e:ab:53:c8:6e:ce:7e:c2:62:52:aa:
         c0:89:46:0f:e1:cf:86:0d:39:5d:24:a2:9d:1e:68:4d:41:e8:
         bf:b6:95:2b:27:5b:6d:90:3b:bb:d2:c5:2c:83:23:30:71:da:
         3f:f5:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----