Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33342d3334203d3e20323637343230.roa
File:                     323830343a346433633a3a2f33342d3334203d3e20323637343230.roa (raw, json)
Hash identifier:          Ar6jEM01xVRJ+1wg7nNukkalfgngr40IT7uBzdKTOw0=
Subject key identifier:   58:44:4F:54:59:07:BE:A0:CA:47:76:E3:97:B9:C6:8F:AD:C3:B1:3D
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       55E67848378C1B9F7240965AF10FB1D9A19BCBAD
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33342d3334203d3e20323637343230.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     267420
IP address blocks:        2804:4d3c::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 13:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e6:78:48:37:8c:1b:9f:72:40:96:5a:f1:0f:b1:d9:a1:9b:cb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=58444F545907BEA0CA4776E397B9C68FADC3B13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:8a:4a:cd:92:85:47:ab:43:a5:17:f7:06:
                    98:51:ed:05:8d:f4:08:e2:b1:4a:52:69:4a:69:c1:
                    28:41:8a:b9:59:6c:71:7a:fe:58:6c:49:90:69:f7:
                    3c:92:d2:a5:4d:23:97:39:81:1b:3b:b2:88:87:51:
                    04:97:f0:a0:1f:f2:df:c4:75:68:13:93:9d:0e:2f:
                    8f:cf:e3:1d:71:04:e7:30:c2:1d:43:10:2f:8d:97:
                    9c:f2:ee:45:e1:63:dd:08:cc:6f:6c:92:67:91:db:
                    8c:3b:77:90:b3:c8:35:18:53:02:7d:7e:fa:e2:61:
                    90:2c:94:92:52:22:2a:be:c3:e7:fc:6c:3e:0b:28:
                    19:ef:4d:7b:99:f0:c4:5f:2f:96:73:64:7b:f0:b1:
                    28:7e:3e:2b:24:b9:9f:09:4f:39:e3:31:8f:ed:ff:
                    c0:c4:fc:b3:76:15:70:9f:c5:f9:a2:5e:e6:96:ce:
                    e8:b6:a9:7d:19:a8:8a:4c:50:90:18:9b:c2:f7:31:
                    9a:51:46:34:e1:af:77:ab:27:fa:44:b3:4c:f0:69:
                    4b:86:b3:bb:9c:80:71:51:9a:4c:2a:9e:cd:36:cd:
                    9c:af:ce:de:48:78:9b:9f:fc:72:a4:55:e6:20:0c:
                    91:a2:db:5c:33:ed:09:19:7b:d0:f9:af:49:59:a1:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:4F:54:59:07:BE:A0:CA:47:76:E3:97:B9:C6:8F:AD:C3:B1:3D
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33342d3334203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:98:32:e8:5b:0f:c2:97:99:12:04:2b:62:57:d7:95:7d:20:
         14:31:8e:7f:8e:32:0b:d6:6d:41:0d:52:7a:11:09:7b:bd:00:
         49:17:87:6d:b4:c6:1b:39:33:ac:cb:2c:fd:27:c9:3f:0d:21:
         a9:c8:04:c2:7e:75:6e:30:76:1c:11:26:49:d5:4e:4a:a9:2e:
         db:ab:2c:54:02:10:20:7a:70:ea:85:73:36:0a:53:51:97:c5:
         45:6f:c8:02:12:b1:8e:92:f1:94:7b:ac:59:8e:80:ca:95:9f:
         9f:e3:44:be:96:e7:d9:94:12:2e:f1:a4:19:d5:15:50:b4:ba:
         8e:01:d4:6e:33:b2:09:19:c4:80:a2:f7:7d:e6:ac:a0:94:58:
         5a:75:5a:c6:6f:46:5d:a4:13:b0:bc:43:63:5d:bc:5b:92:36:
         aa:ac:67:8b:f2:2f:44:84:1a:1a:47:1b:53:46:29:0c:0f:0b:
         6e:2f:9a:a8:c4:4b:29:52:b7:1e:06:21:45:fa:16:03:c4:29:
         fa:c4:e6:dc:2f:d9:00:40:b0:c0:0b:ea:e6:10:f3:f5:38:6d:
         2b:bf:c5:32:86:00:6b:2e:32:95:cd:3d:6f:18:f0:ff:5f:a7:
         c7:56:45:88:05:5a:de:36:dc:d0:88:78:e4:3d:24:39:3c:4b:
         82:e6:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:21 2024 by rpki-client on console-ams.rpki-client.org