Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313330303a3a2f34302d3430203d3e20323632343539.roa
File:                     323830343a3462303a313330303a3a2f34302d3430203d3e20323632343539.roa (raw, json)
Hash identifier:          AfR8hASEh9cQahXI+3QgAKUFgW6A4xmBUufWk+HW3lo=
Subject key identifier:   FE:C9:6A:D3:21:50:44:6A:78:7C:BC:30:7F:65:AF:0F:48:05:FB:5B
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       699A82F75F33C0B210882B5400E1E22B5B493594
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313330303a3a2f34302d3430203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:29 +0000
ROA not before:           Thu 04 Apr 2024 02:55:29 +0000
ROA not after:            Thu 03 Apr 2025 03:00:29 +0000
asID:                     262459
IP address blocks:        2804:4b0:1300::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9a:82:f7:5f:33:c0:b2:10:88:2b:54:00:e1:e2:2b:5b:49:35:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:29 2024 GMT
            Not After : Apr  3 03:00:29 2025 GMT
        Subject: CN=FEC96AD32150446A787CBC307F65AF0F4805FB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:7f:5c:9a:a3:b1:18:2c:54:b9:58:3c:1e:
                    3e:71:74:9d:39:0b:bd:9f:64:bf:cc:c4:91:6f:09:
                    d1:a3:07:e4:fc:3b:41:bd:b7:68:91:ed:e8:4f:92:
                    93:8b:40:84:40:40:0e:68:b9:52:ac:de:d8:f2:09:
                    6b:de:76:70:d0:c3:8a:37:79:74:7d:fc:51:13:9e:
                    17:e4:0d:85:9b:05:86:31:9f:87:1d:06:79:da:d3:
                    37:50:66:33:a7:cd:f4:6e:ba:24:f1:19:54:cd:f0:
                    e9:94:86:6b:74:2f:52:b3:f0:12:d6:5f:7a:a8:0f:
                    1a:ad:6a:22:01:0d:a4:52:a9:34:f4:fc:2c:f8:00:
                    d3:17:57:9d:3f:98:3e:e3:dc:d9:73:61:53:e2:3d:
                    75:f4:90:3f:aa:4b:9b:73:64:43:dc:6d:46:85:3e:
                    55:f7:74:4c:8a:9f:5b:9a:43:c6:79:44:a4:00:3b:
                    f7:de:a8:bf:3c:9e:57:68:f4:58:0d:50:51:0c:c6:
                    4a:60:30:87:18:b4:de:08:f7:14:74:05:65:73:68:
                    10:79:fe:b6:37:5c:76:b7:b6:a5:81:04:0b:45:7c:
                    e3:51:60:94:67:9f:40:5f:ad:4d:e7:0b:96:15:f8:
                    82:96:b4:e2:66:4f:91:09:0e:19:65:0f:86:f2:15:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C9:6A:D3:21:50:44:6A:78:7C:BC:30:7F:65:AF:0F:48:05:FB:5B
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313330303a3a2f34302d3430203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:25:99:ad:93:08:dc:69:9b:06:95:96:85:74:9d:83:25:
         02:61:59:85:70:b1:79:d7:55:52:2d:78:7d:78:c0:a3:f3:3e:
         02:1c:3e:1c:8c:58:66:f9:0a:e6:68:52:d8:5f:71:96:a9:ff:
         05:cd:ea:18:ef:43:fe:38:0c:b7:a9:45:0c:47:e6:50:67:2b:
         60:42:67:f4:85:99:a8:af:64:7f:a4:d9:0a:cb:8b:5f:08:63:
         c9:25:19:4f:59:c9:8e:50:63:67:34:de:de:fb:d5:07:e7:b4:
         f6:fc:25:40:e0:45:5b:d8:c8:47:48:85:8f:ee:20:30:f2:29:
         8b:11:cb:08:a5:e3:8b:65:53:44:58:76:d2:b3:ea:57:0c:56:
         ca:f0:41:87:50:1c:69:be:31:b7:25:8c:01:c7:00:51:e6:0d:
         5d:03:36:6f:7c:6b:7a:fc:8c:24:0b:bf:f4:a6:59:bc:e6:88:
         52:c5:22:53:83:80:33:77:4e:3f:c9:8b:2d:28:cf:ec:87:16:
         4d:0b:5b:17:39:3c:af:fb:ed:89:bf:d0:c9:db:56:b7:5a:44:
         71:4d:d3:60:02:15:61:25:dc:2f:99:59:ee:08:05:d6:17:2b:
         82:f7:c8:b3:31:d5:55:c3:e4:58:51:e2:e2:01:a7:5a:9c:1e:
         dc:41:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:13:32 2024 by rpki-client on console-ams.rpki-client.org