Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a313030303a3a2f33362d3336203d3e20323633393830.roa
File:                     323830343a323863383a313030303a3a2f33362d3336203d3e20323633393830.roa (raw, json)
Hash identifier:          KydSutc9EPhX/g3a5o1PpPkE7i4r+J6UObu3g92jpbk=
Subject key identifier:   88:82:EE:8F:BD:4D:63:6F:A0:79:FA:35:0F:A4:83:E8:06:CE:9D:64
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       581D9172995C218E8E8AED5EFF7102B5A31AC715
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a313030303a3a2f33362d3336203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:56:56 +0000
ROA not before:           Tue 23 Apr 2024 12:51:56 +0000
ROA not after:            Tue 22 Apr 2025 12:56:56 +0000
asID:                     263980
IP address blocks:        2804:28c8:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1d:91:72:99:5c:21:8e:8e:8a:ed:5e:ff:71:02:b5:a3:1a:c7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:51:56 2024 GMT
            Not After : Apr 22 12:56:56 2025 GMT
        Subject: CN=8882EE8FBD4D636FA079FA350FA483E806CE9D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c2:57:56:df:c1:f5:f3:bb:ad:63:e4:6f:26:
                    68:34:72:77:be:0c:56:da:6a:50:d0:53:fe:4b:f7:
                    59:02:bb:ce:75:1f:27:c6:76:08:f5:4e:41:7b:63:
                    35:ef:bf:89:44:00:84:23:7f:f5:86:27:83:8c:3f:
                    e7:5b:0a:69:ea:ee:f8:c9:ca:bc:b3:20:6c:f5:51:
                    dc:d1:20:3f:8c:4f:22:10:10:27:88:9a:0b:8f:51:
                    7f:9b:e5:57:7b:07:61:e4:45:c6:4b:ff:7d:4c:53:
                    ab:9a:00:38:0c:6e:ac:52:cb:4a:a4:e7:2f:27:f0:
                    1d:4a:7c:39:d9:3c:f3:04:c8:36:5e:61:2c:8c:72:
                    29:44:6d:42:38:f3:c5:0a:01:5d:25:0b:b9:b3:1b:
                    10:a8:45:4d:4c:13:df:20:1e:20:7a:24:0e:b1:14:
                    a0:2e:ba:d3:5a:f5:62:3a:d0:49:8a:90:59:77:78:
                    d2:e9:e8:83:f0:0c:98:24:7f:cb:e4:d1:cf:cf:22:
                    43:b0:44:d1:d2:6d:3a:8c:22:45:2c:66:14:32:d5:
                    81:cf:23:9d:35:11:88:ce:ce:99:6b:87:9e:13:3a:
                    21:69:30:cc:45:03:32:06:a6:7a:f3:99:3c:db:1e:
                    c0:a5:89:4b:2b:82:c0:1f:25:66:ec:3b:88:95:af:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:82:EE:8F:BD:4D:63:6F:A0:79:FA:35:0F:A4:83:E8:06:CE:9D:64
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a313030303a3a2f33362d3336203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:c7:a2:37:84:37:0d:5a:ec:b5:e9:3c:d9:b1:99:f0:74:7c:
         b5:fa:99:16:95:77:3a:8d:52:99:9d:d0:00:e8:0f:d1:17:1b:
         73:f2:e9:49:88:10:bf:6e:3c:9f:68:a6:8a:c8:ce:18:d7:0f:
         a2:68:6b:90:0c:72:b1:14:2a:a5:67:5e:8d:2f:2a:e6:32:6c:
         07:10:5c:75:2d:f2:2a:57:80:b6:51:65:d9:17:a9:4e:b8:01:
         e0:3a:10:7c:ca:8d:fd:1d:4d:b4:0b:84:6a:95:e6:55:a3:7c:
         85:6a:12:70:b3:27:fd:8f:fa:ff:ef:79:f2:41:58:bf:65:0f:
         97:04:8a:ca:3e:f4:22:80:d3:60:59:c8:26:2f:b1:1f:ba:c3:
         4e:87:2a:4e:41:b7:ae:56:6c:57:db:5c:bf:22:24:fb:01:0f:
         6d:82:39:51:4f:2c:50:d5:f2:5d:f8:13:13:51:db:87:5a:00:
         4b:4c:33:de:4b:7c:58:3f:48:cd:50:e5:6b:f0:b7:ce:cf:76:
         a4:84:35:28:f3:b4:54:e2:9c:f0:b9:59:87:5c:00:8a:c2:fb:
         1c:1a:e3:3f:11:7a:77:db:e2:53:73:96:f3:df:91:4c:41:89:
         05:0e:16:6c:63:16:89:f2:51:9f:02:da:88:85:f0:2e:73:50:
         9e:fa:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org