Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a393030323a3a2f34382d3438203d3e20323633363334.roa
File:                     323830343a313036383a393030323a3a2f34382d3438203d3e20323633363334.roa (raw, json)
Hash identifier:          k5rDtIdhoiYqPNd3CxsXYFETEDUY3azYnPLJY5V27h0=
Subject key identifier:   9B:76:47:9F:79:BC:A7:EB:CE:55:A6:EE:1E:80:4D:BB:BB:F9:E2:39
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       5E2CB3E6F8F9F6C849D43527F692815A42DD70DF
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a393030323a3a2f34382d3438203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:46:58 +0000
ROA not before:           Mon 18 Nov 2024 13:41:58 +0000
ROA not after:            Mon 17 Nov 2025 13:46:58 +0000
asID:                     263634
IP address blocks:        2804:1068:9002::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2c:b3:e6:f8:f9:f6:c8:49:d4:35:27:f6:92:81:5a:42:dd:70:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:41:58 2024 GMT
            Not After : Nov 17 13:46:58 2025 GMT
        Subject: CN=9B76479F79BCA7EBCE55A6EE1E804DBBBBF9E239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:3a:a8:29:54:a4:eb:25:7c:35:a9:58:ec:
                    5d:b9:9e:9d:83:15:fe:18:3b:32:cc:80:bf:de:45:
                    70:77:09:e3:d0:8b:10:d2:c6:a6:2c:29:0e:9e:03:
                    76:1e:16:a1:cd:e5:ef:7b:a1:54:a4:9a:d4:53:57:
                    12:fc:08:e5:0f:f5:06:bc:a2:53:e9:eb:a0:57:4d:
                    49:aa:aa:ed:ec:fe:40:90:7f:fb:e8:f3:0c:56:4c:
                    ad:0e:d5:d0:85:6e:6d:af:b4:fe:d4:11:d6:4e:49:
                    5b:71:bc:a7:f7:45:a3:82:a2:81:ae:70:cf:88:59:
                    d2:89:04:5b:66:b7:67:b4:fd:d2:80:b0:7a:9c:f8:
                    21:1e:1f:51:4a:8c:b1:04:c5:2e:39:bf:ed:05:14:
                    d1:d6:3a:81:d1:62:77:a7:6b:50:16:9e:ad:ca:76:
                    59:18:e6:cb:07:3b:5b:6f:35:61:6e:80:97:ee:32:
                    e0:bc:9c:ad:82:7b:2c:ad:b7:aa:43:83:48:60:69:
                    ae:6b:a1:0e:c8:0b:ec:29:a4:a5:4c:ab:1c:c3:bb:
                    6b:ab:02:b3:98:40:21:f0:bc:83:e2:c0:0d:dc:ee:
                    d3:41:bd:dc:5b:6e:1b:8e:44:bb:47:c2:57:8d:0e:
                    68:31:dd:53:53:53:7d:05:64:1d:f3:66:d2:99:23:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:47:9F:79:BC:A7:EB:CE:55:A6:EE:1E:80:4D:BB:BB:F9:E2:39
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a393030323a3a2f34382d3438203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:9002::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:24:3e:9b:c4:a8:c8:0b:b6:1e:fb:d2:c9:1b:45:ce:e7:
         7e:82:b4:24:13:61:2c:ee:7d:c2:b2:6f:ea:e9:aa:3e:e5:34:
         fb:ea:bc:56:86:98:94:9e:59:77:4b:19:85:0c:bf:16:8d:c6:
         d1:a1:2f:34:cc:8d:28:c9:54:b7:c3:33:43:33:c6:6e:4d:ba:
         59:6c:3c:b7:7f:d7:01:36:ad:7e:6d:5b:d8:ac:d5:c4:8b:45:
         70:5d:54:4f:0b:3c:0b:75:15:bb:34:48:da:55:53:70:86:ee:
         10:04:10:c3:c5:b4:1b:12:c2:bd:b6:ca:c4:32:37:56:24:bb:
         bd:e9:0e:79:4a:3c:17:ba:10:28:ee:ad:27:2b:01:75:b5:40:
         33:97:6c:a7:65:2c:f1:c8:1f:ac:15:0a:27:7d:9a:a1:42:d0:
         e5:99:99:47:60:72:93:06:9c:b9:00:f9:81:bc:62:37:e0:3e:
         12:c1:9f:06:6f:cd:13:3e:a3:b7:0a:ff:b3:f8:13:82:39:55:
         45:4d:6f:ad:7b:6b:1f:ba:ae:38:ed:e1:c4:56:c1:56:d5:5c:
         21:dc:97:5b:3d:4e:62:e5:a7:00:99:93:e1:ac:a5:0b:4d:97:
         1f:cc:c5:98:92:d2:ce:4b:96:1e:4d:5b:33:74:1e:39:cc:23:
         20:e0:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:36 2024 by rpki-client on console-fra.rpki-client.org