Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a623030303a3a2f33362d3336203d3e20323633393830.roa
File:                     323830343a323863383a623030303a3a2f33362d3336203d3e20323633393830.roa (raw, json)
Hash identifier:          3vsvMTZ06D7muQjy7kKkWMBW2ugbiWEGxOvTDIQDVWA=
Subject key identifier:   B7:47:4C:B2:C7:FB:14:F1:34:D2:B2:7B:40:99:E7:CE:09:A7:83:E7
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       38C782AC9B9EE12635EE4D186198736C41487634
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a623030303a3a2f33362d3336203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:57:24 +0000
ROA not before:           Tue 23 Apr 2024 12:52:24 +0000
ROA not after:            Tue 22 Apr 2025 12:57:24 +0000
asID:                     263980
IP address blocks:        2804:28c8:b000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:82:ac:9b:9e:e1:26:35:ee:4d:18:61:98:73:6c:41:48:76:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:52:24 2024 GMT
            Not After : Apr 22 12:57:24 2025 GMT
        Subject: CN=B7474CB2C7FB14F134D2B27B4099E7CE09A783E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:c7:79:73:78:95:ea:ff:63:3f:89:9b:35:
                    e2:c8:5d:c4:5c:e9:a5:a9:57:1e:65:49:da:0a:02:
                    8e:d3:c8:3d:46:99:08:a4:e6:fb:32:62:db:1e:53:
                    60:5f:0c:ef:85:a3:ae:7f:9a:52:b0:0d:4d:ce:b8:
                    8b:ec:c5:30:7e:81:60:27:67:cd:8d:a6:fd:ae:b5:
                    68:a7:1f:9c:24:7a:38:be:33:8d:87:46:09:7d:d7:
                    9a:14:d7:21:cf:53:e3:7c:86:d4:c5:9a:9e:d9:1e:
                    2a:a2:85:c3:90:eb:cd:6d:00:e1:1c:7e:87:17:2c:
                    09:50:e0:91:ee:6e:59:e2:80:00:ff:d2:b2:d3:b6:
                    dc:f4:7a:d3:ac:30:c5:9c:41:07:02:c1:3a:57:c9:
                    51:9a:fa:fd:f0:60:b1:22:4b:1d:0e:f4:8e:cf:b1:
                    f2:e3:9d:71:a1:12:6d:fa:9b:8d:72:7f:ba:4f:c0:
                    ab:3c:0a:6a:43:d3:b8:b1:2a:08:8b:e5:4e:92:38:
                    36:b4:8c:31:50:2a:18:e5:81:6c:08:fd:0f:24:04:
                    94:8b:8d:78:39:4c:6b:bb:bd:43:d8:83:94:bf:69:
                    72:62:c4:28:f0:30:62:f5:c3:ab:0c:b5:85:28:64:
                    e4:f2:9c:2d:63:7b:b0:36:0c:ec:e6:b5:a0:ed:25:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:47:4C:B2:C7:FB:14:F1:34:D2:B2:7B:40:99:E7:CE:09:A7:83:E7
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a623030303a3a2f33362d3336203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1b:b4:bd:bb:f3:27:51:07:c6:ec:b6:36:fe:02:ce:f2:10:02:
         77:8a:f3:c9:74:4b:68:9a:1b:f5:bd:02:f3:34:82:3d:b3:07:
         f4:b6:be:b2:a9:bf:cc:cd:be:61:31:4d:78:d9:a9:ea:79:60:
         53:5e:e5:87:a3:9c:61:39:df:a7:76:fb:2d:15:d0:fb:20:c6:
         6d:e5:0d:9e:7f:95:6f:2e:1e:d6:70:81:4a:dc:1e:be:3c:a6:
         69:16:b9:2d:37:56:38:fb:55:92:18:dc:25:99:25:e5:2d:63:
         8f:b6:7d:ab:9a:ac:37:5b:2f:77:ce:6e:84:9f:2f:12:22:61:
         5c:73:1d:a5:e6:34:0e:06:b0:c0:5f:0f:85:e4:d3:18:1a:7d:
         b1:3c:c3:5d:a2:07:da:80:bd:12:4c:49:63:0a:24:56:c0:df:
         0e:78:e2:92:c0:f2:37:bb:07:07:a3:fe:67:2e:c3:dd:79:c4:
         f1:45:6b:86:fe:8e:56:08:0a:c0:9c:58:01:58:b3:18:a0:c1:
         f8:48:56:bb:6c:c9:8c:bd:53:10:f2:9a:8b:5f:41:3d:95:b4:
         d9:1a:44:a2:9b:e1:6b:b1:7b:43:51:9a:e2:24:06:ff:17:e9:
         18:21:87:70:6d:63:06:a6:fa:80:2d:fb:d1:cc:3e:e9:b0:20:
         92:53:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org