Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313230303a3a2f34302d3430203d3e20323632343539.roa
File:                     323830343a3462303a313230303a3a2f34302d3430203d3e20323632343539.roa (raw, json)
Hash identifier:          YALlaWv4StT2qejLyBiqx2oIkrIOEpdQChVhc0r4iiU=
Subject key identifier:   D5:4F:31:E5:01:9B:25:9F:B9:B5:A5:00:6F:D9:A6:3A:6B:24:3D:E9
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       453D73A12A35AE4B5BB7FD45B4297004DC1DE951
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313230303a3a2f34302d3430203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:31 +0000
ROA not before:           Thu 04 Apr 2024 02:55:31 +0000
ROA not after:            Thu 03 Apr 2025 03:00:31 +0000
asID:                     262459
IP address blocks:        2804:4b0:1200::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:73:a1:2a:35:ae:4b:5b:b7:fd:45:b4:29:70:04:dc:1d:e9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:31 2024 GMT
            Not After : Apr  3 03:00:31 2025 GMT
        Subject: CN=D54F31E5019B259FB9B5A5006FD9A63A6B243DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:d6:39:12:02:48:83:2b:cb:ee:a7:cb:0a:
                    0f:44:5f:42:fd:0d:da:d7:7b:75:96:4b:75:9b:22:
                    6f:a4:d0:cc:b7:08:81:f0:4f:c7:ef:b0:48:c6:f9:
                    a3:41:03:ab:ca:5d:95:95:b4:9d:82:8a:8c:1c:83:
                    37:77:22:4a:23:8f:48:dc:57:6d:bd:b4:72:40:2a:
                    61:4f:98:0c:71:1c:1b:1d:a4:79:a6:72:93:4e:4b:
                    19:24:e8:d9:c7:8b:94:df:4a:bb:a6:ae:db:a0:21:
                    12:67:c9:0f:09:73:58:b9:e7:8f:12:d1:99:21:3a:
                    83:83:87:d9:24:2b:16:b1:d8:b7:8a:be:a1:cc:d1:
                    0e:48:88:d8:86:fd:a8:7d:7c:d9:51:44:35:87:04:
                    84:85:f5:6e:01:d0:23:15:c6:ac:41:fa:b5:44:a0:
                    d5:42:a4:3a:ea:4b:00:2b:19:75:a2:b8:00:9d:e4:
                    d9:4e:5d:fd:17:ed:a9:9d:fb:9e:68:0d:0f:97:b2:
                    73:ab:1a:d9:e2:a7:eb:97:1b:30:c5:1e:56:41:39:
                    bb:cc:41:2b:eb:10:85:03:25:c0:81:f4:89:78:71:
                    f5:47:bb:b0:45:3d:43:fb:06:98:bb:e4:66:53:4b:
                    05:5a:ab:0f:6f:fa:b3:b0:19:7a:d3:91:6b:ed:f2:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4F:31:E5:01:9B:25:9F:B9:B5:A5:00:6F:D9:A6:3A:6B:24:3D:E9
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313230303a3a2f34302d3430203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:99:c0:9d:c9:87:a2:2e:7b:fb:4f:d5:05:2f:01:91:a0:f0:
         32:fc:6f:10:c4:c2:0f:6c:91:a1:5a:7b:37:d6:bd:26:1b:3f:
         f7:4d:c8:c3:50:2c:0f:c9:5e:b2:f2:02:a5:15:d6:2d:7c:ba:
         79:e0:80:96:33:62:f1:bd:38:2d:d7:bc:0f:36:58:e4:10:ad:
         76:4d:2f:fc:b2:26:08:8d:b9:9a:98:45:b6:92:b3:05:c5:de:
         55:2a:fb:91:c8:d8:44:e6:81:fc:4d:0a:25:2a:7f:24:af:df:
         f7:43:9f:18:40:79:49:7f:40:b5:19:29:d2:42:c1:ee:94:9c:
         38:c5:4c:4f:76:af:0f:8e:5b:8a:b3:51:33:24:b7:fc:4b:dd:
         e1:a4:80:f6:38:16:12:cd:cf:8c:da:e2:e3:cc:8c:30:f2:cb:
         5c:05:6f:a6:f5:d9:b0:69:af:7f:34:e5:86:c4:ba:a6:30:6f:
         4f:6d:bf:c6:73:70:c1:2e:30:30:dc:34:82:25:75:5f:bc:3a:
         7f:23:2a:e2:46:5c:6b:9f:9a:9c:b1:45:88:12:35:9a:63:26:
         c3:7e:53:6d:b5:c2:67:50:6e:bc:23:9b:0f:f6:a9:83:45:a1:
         89:3f:16:d1:ee:0c:88:f6:1a:81:c9:ed:54:08:ec:da:a1:32:
         c4:0d:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 21:15:11 2024 by rpki-client on console-fra.rpki-client.org