Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a323030303a3a2f33362d3336203d3e20323633393830.roa
File:                     323830343a323863383a323030303a3a2f33362d3336203d3e20323633393830.roa (raw, json)
Hash identifier:          hWPjyt2FgG0QeAzRydeHgdzI63uDZJl05rxR8RavARY=
Subject key identifier:   F3:36:61:4A:E5:F6:C1:CD:65:70:8B:FC:6E:D5:D6:87:09:A1:94:31
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       5052094295B5A9914EA13A8AD28202CAE83DEA8A
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a323030303a3a2f33362d3336203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:57:00 +0000
ROA not before:           Tue 23 Apr 2024 12:52:00 +0000
ROA not after:            Tue 22 Apr 2025 12:57:00 +0000
asID:                     263980
IP address blocks:        2804:28c8:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:52:09:42:95:b5:a9:91:4e:a1:3a:8a:d2:82:02:ca:e8:3d:ea:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:52:00 2024 GMT
            Not After : Apr 22 12:57:00 2025 GMT
        Subject: CN=F336614AE5F6C1CD65708BFC6ED5D68709A19431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:a7:e8:60:57:a3:bf:a1:55:b4:b3:97:50:
                    a4:bf:f0:e2:f2:5c:49:3c:92:95:68:df:9c:f9:25:
                    89:07:30:54:00:94:51:89:b4:3b:4f:47:d1:6e:99:
                    15:65:80:f1:ec:17:c3:a7:7e:5b:f3:e7:56:03:b1:
                    a7:89:e0:1f:b9:80:bc:12:8d:e0:21:b5:57:33:38:
                    15:69:2b:d5:49:48:c0:c9:3a:8e:b4:51:fa:65:53:
                    58:93:0c:97:77:9e:c9:f8:46:4f:a2:60:26:d0:23:
                    ee:e8:fd:ec:51:42:a3:43:7a:44:0b:95:8b:d3:54:
                    3c:29:94:ef:6d:92:d1:c0:20:84:a6:6e:89:a1:06:
                    cf:19:98:a0:02:bd:8d:0b:80:a4:0a:ed:a6:96:e2:
                    e0:15:56:d0:5f:f5:e5:ec:b2:94:67:1f:5d:9e:06:
                    11:02:7d:d1:99:1d:fa:21:07:88:7d:dc:08:39:9a:
                    6c:35:76:53:da:5e:c8:d9:2a:c1:ef:d7:6e:4d:72:
                    71:16:14:b5:a9:38:9b:31:7c:fb:ee:22:53:58:99:
                    52:99:5d:65:94:1c:73:b8:19:ee:a7:f7:04:77:a9:
                    85:18:0d:e4:7e:cc:13:bf:03:17:98:22:2c:5c:dd:
                    d4:8e:5a:9a:cf:13:a5:01:aa:99:29:84:28:27:3e:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:36:61:4A:E5:F6:C1:CD:65:70:8B:FC:6E:D5:D6:87:09:A1:94:31
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a323030303a3a2f33362d3336203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:18:a6:fa:b7:61:f5:6d:80:45:0b:0e:9f:0e:de:6a:44:dd:
         1b:0d:4a:95:a4:97:34:c2:63:25:f2:3b:45:2c:34:7a:e3:13:
         46:0e:c8:36:e6:82:4b:18:7a:bf:07:b3:a8:f1:d3:63:9d:87:
         5d:26:ae:f0:3b:eb:b3:10:61:3c:bc:0e:58:eb:ff:19:18:14:
         52:a2:56:6a:6d:97:f0:73:84:3a:08:4f:b1:94:f2:be:28:b2:
         94:f7:ed:be:b7:9a:0c:0e:6a:d4:ee:46:28:39:2e:7a:c9:f3:
         4e:7d:ec:c3:3c:b3:e0:de:46:0e:d1:98:00:cc:6c:71:3e:85:
         4b:67:4b:f7:0e:82:79:85:ca:bf:5f:e3:67:2c:60:c7:28:e2:
         07:c1:40:8e:eb:9e:e7:88:d5:3b:a2:d1:83:79:5b:61:4c:bd:
         7a:47:e7:42:b0:61:28:91:c8:2d:fc:a8:30:6c:4a:e9:28:2f:
         81:98:31:c1:54:94:24:72:c5:09:6e:0e:2a:f2:f8:1d:6d:d7:
         99:9a:98:d2:90:a1:a6:3a:d6:9a:ef:30:1a:64:58:24:f1:0c:
         06:7b:ec:42:0a:38:ed:d2:04:14:d1:2e:77:4e:53:cd:28:3b:
         73:17:63:fd:c4:2f:ea:d8:92:df:34:69:cd:51:07:09:ff:1f:
         5a:33:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org