Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a393030373a3a2f34382d3438203d3e20323637343230.roa
File:                     323830343a346433633a393030373a3a2f34382d3438203d3e20323637343230.roa (raw, json)
Hash identifier:          Fjm/lueszXZckuzSxccRDQ/B7LOLnSGHx0D2tvGVCHo=
Subject key identifier:   59:97:C6:C2:A9:6E:0F:AE:B2:75:7D:D4:D7:4B:75:A8:7C:59:F7:8B
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       165D670431AE34461E7410A9974DB022B5D2D599
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a393030373a3a2f34382d3438203d3e20323637343230.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     267420
IP address blocks:        2804:4d3c:9007::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 13:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5d:67:04:31:ae:34:46:1e:74:10:a9:97:4d:b0:22:b5:d2:d5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=5997C6C2A96E0FAEB2757DD4D74B75A87C59F78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:09:88:c7:af:68:05:84:69:2e:c1:1a:34:
                    b1:a0:8f:43:0c:b2:24:cd:b8:e6:b5:24:7a:1e:19:
                    02:eb:97:5d:b9:ca:41:bd:86:47:02:d3:fc:16:18:
                    cf:9e:c0:c4:5b:e3:05:dc:1f:ab:11:b9:c3:ed:25:
                    80:98:fb:41:91:85:79:e5:3d:63:dc:16:a0:33:ce:
                    c9:b7:a9:82:97:5f:68:38:8d:bf:f5:09:c3:f2:ed:
                    7a:42:47:f6:8e:fe:f9:55:f0:61:7b:35:39:07:8b:
                    90:a4:af:ec:39:6a:60:e0:9d:03:c1:f8:5f:b9:f1:
                    c9:cd:12:45:85:b2:cf:eb:b2:d1:56:66:87:4f:34:
                    37:b7:eb:71:f4:b2:69:67:a8:71:39:8c:87:1d:7a:
                    11:ef:2c:42:e1:c9:7b:67:c6:83:a5:9e:60:72:4f:
                    66:d0:93:05:52:19:63:47:e4:e7:b9:24:eb:ef:a5:
                    78:7d:92:7c:2e:8b:e3:f6:15:f3:d8:c7:1b:0a:76:
                    81:ce:ec:e7:3d:4c:18:bf:06:74:47:b6:8c:3a:03:
                    db:c2:75:a3:e3:a9:11:40:e1:3e:c9:f7:e6:dd:a7:
                    aa:56:80:3c:95:e4:a5:c5:83:7d:5e:4a:5c:f2:92:
                    3b:4c:21:97:98:33:56:93:e1:e6:0f:6d:b1:22:24:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:C6:C2:A9:6E:0F:AE:B2:75:7D:D4:D7:4B:75:A8:7C:59:F7:8B
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a393030373a3a2f34382d3438203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:9007::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:73:c5:79:9f:a6:a7:a2:f9:d0:32:8f:22:4f:cf:8e:b7:
         ff:ac:43:4a:71:29:b1:1e:19:21:85:a1:8c:1a:6f:02:dc:1f:
         69:ae:3b:cc:8d:b3:3b:d9:a6:eb:4f:d1:45:5e:e5:3b:73:16:
         08:a2:3f:b4:46:bc:07:20:4e:e6:29:17:a4:07:88:65:27:fd:
         a1:b3:79:d3:c7:e1:f0:69:cd:90:4b:72:5b:6e:2e:29:6c:30:
         07:12:8f:e8:b2:3f:96:de:89:97:89:52:e3:4e:bc:2a:de:6c:
         a0:71:1f:c3:26:14:1d:b0:6f:16:e2:51:ca:de:06:57:3f:3f:
         6b:16:12:51:69:67:78:bc:c7:97:68:52:79:b8:37:89:ad:7a:
         16:fb:87:99:20:11:12:0c:de:d0:f6:83:20:41:74:41:54:cd:
         92:cc:ee:61:bf:80:c9:5b:24:1e:10:09:81:af:e4:a2:dd:5a:
         e9:4a:59:8f:b4:20:7e:cf:65:04:72:a6:b5:60:67:c0:a7:26:
         27:75:2f:39:47:f3:88:63:06:1f:61:af:3b:01:c9:c5:72:b4:
         8d:c5:b8:3f:6d:85:bb:d3:40:6e:29:b3:f8:48:93:c0:c0:ee:
         f0:2c:10:0c:44:ce:8a:55:3b:99:4e:3b:11:81:4f:bf:a5:b3:
         b6:0a:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:21 2024 by rpki-client on console-ams.rpki-client.org