Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313538303a3a2f34312d3431203d3e20323632343539.roa
File:                     323830343a3462303a313538303a3a2f34312d3431203d3e20323632343539.roa (raw, json)
Hash identifier:          lcnqsVXp14Vh0daCLKYJHK7S1NYX4Jcutml/mrH81dM=
Subject key identifier:   96:83:47:64:3E:26:86:5D:FF:C2:50:C8:26:8D:BC:92:D3:E0:F4:1F
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       33DFE37A7570F7EDD844FBF09A62099D5AFCD288
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313538303a3a2f34312d3431203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:30 +0000
ROA not before:           Thu 04 Apr 2024 02:55:30 +0000
ROA not after:            Thu 03 Apr 2025 03:00:30 +0000
asID:                     262459
IP address blocks:        2804:4b0:1580::/41 maxlen: 41

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:df:e3:7a:75:70:f7:ed:d8:44:fb:f0:9a:62:09:9d:5a:fc:d2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:30 2024 GMT
            Not After : Apr  3 03:00:30 2025 GMT
        Subject: CN=968347643E26865DFFC250C8268DBC92D3E0F41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:eb:98:fd:b5:a5:b9:89:01:9d:61:18:7a:
                    59:db:8c:fb:33:9a:0c:7d:53:77:31:cd:98:8a:41:
                    c0:48:bd:5f:62:cf:99:a9:aa:a9:2c:5e:4d:c9:dd:
                    89:82:3b:5d:cd:9d:95:6a:09:12:cb:bd:51:2c:79:
                    6e:d3:d6:8c:ee:b0:11:ee:25:f4:3a:45:d9:1a:0a:
                    a7:5e:2a:73:1b:76:9b:0b:eb:35:94:ae:76:b4:fb:
                    25:0b:ec:67:f8:05:95:cc:39:d3:f1:38:c3:93:59:
                    37:31:74:87:5f:2d:04:2f:42:94:91:8d:b3:05:d4:
                    c6:8d:9d:7b:12:4d:21:72:c8:40:b4:b4:25:ef:98:
                    e5:41:65:04:28:b6:d6:0c:5c:7c:b7:1f:fe:f6:be:
                    1b:cc:1d:f1:7f:a2:bf:ff:78:df:78:8a:76:e7:86:
                    f0:8e:c3:89:de:09:b5:f3:f4:78:71:0b:09:48:02:
                    0a:89:3d:cd:fd:49:c3:9f:35:f6:23:81:91:0e:dc:
                    51:90:47:25:7f:7d:b2:ae:fc:51:8d:41:6a:e5:d0:
                    c6:ef:c2:7f:60:c7:8d:4a:62:14:23:bd:ba:d3:b8:
                    e8:81:fa:e3:24:29:c5:8c:ba:a6:e8:a5:e2:a9:a0:
                    f5:67:6b:b2:29:56:8f:c6:d1:71:a9:e6:bf:21:88:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:47:64:3E:26:86:5D:FF:C2:50:C8:26:8D:BC:92:D3:E0:F4:1F
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a313538303a3a2f34312d3431203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:1580::/41

    Signature Algorithm: sha256WithRSAEncryption
         86:30:71:ce:41:01:36:c6:0d:a5:6c:4d:00:ea:8c:c9:94:92:
         4a:ea:fa:9b:5b:4d:d1:fd:92:e0:f2:cd:b2:bf:c2:4b:bc:fc:
         29:a0:ae:37:35:f8:d5:11:41:fc:b4:91:a4:26:e1:74:7d:75:
         6c:f1:ac:97:9f:a5:c2:3d:22:b7:6e:7a:8b:96:e4:fb:27:1e:
         60:20:53:ef:91:cb:00:96:bf:53:b8:76:07:55:a5:49:a4:98:
         4f:6b:e3:02:b7:71:9b:29:24:de:27:46:94:4c:9d:f8:33:52:
         52:d3:d2:98:26:8a:40:7c:ba:bb:5e:ae:f4:ac:4c:84:7f:de:
         d9:76:fe:db:56:e8:9c:01:79:63:3d:8b:bf:53:8d:25:d4:b8:
         6c:a0:9a:ef:b9:5e:8b:bd:20:02:ee:d1:46:2f:b3:eb:21:b7:
         e1:13:0d:21:ba:78:d7:08:bc:2d:c4:2a:05:91:8a:98:17:19:
         5d:84:61:a5:b7:b5:7b:06:bf:11:db:f5:75:ba:2a:4e:4c:eb:
         60:28:a0:1f:86:40:14:6f:73:a5:b2:15:b5:ff:17:c6:4f:89:
         79:ad:1f:96:b0:78:f9:d9:64:0d:fd:b1:45:35:4d:04:46:61:
         6b:f0:f7:2c:9f:25:53:f4:b7:72:a4:28:32:1d:ec:1d:8c:d0:
         1c:e5:13:8b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUM9/jenVw9+3YRPvwmmIJnVr80ogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyRjg1N0NFNzFFNzJFN0U4OTJDRjk3N0Q4MEI2QThC
NzVDNzhBNDAeFw0yNDA0MDQwMjU1MzBaFw0yNTA0MDMwMzAwMzBaMDMxMTAvBgNV
BAMTKDk2ODM0NzY0M0UyNjg2NURGRkMyNTBDODI2OERCQzkyRDNFMEY0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgOuY/bWluYkBnWEYelnbjPsz
mgx9U3cxzZiKQcBIvV9iz5mpqqksXk3J3YmCO13NnZVqCRLLvVEseW7T1ozusBHu
JfQ6RdkaCqdeKnMbdpsL6zWUrna0+yUL7Gf4BZXMOdPxOMOTWTcxdIdfLQQvQpSR
jbMF1MaNnXsSTSFyyEC0tCXvmOVBZQQottYMXHy3H/72vhvMHfF/or//eN94inbn
hvCOw4neCbXz9HhxCwlIAgqJPc39ScOfNfYjgZEO3FGQRyV/fbKu/FGNQWrl0Mbv
wn9gx41KYhQjvbrTuOiB+uMkKcWMuqbopeKpoPVna7IpVo/G0XGp5r8hiMohAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUloNHZD4mhl3/wlDIJo28ktPg9B8wHwYDVR0j
BBgwFoAUsS+FfOcecufoks+XfYC2qLdceKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjhIc3dveUszZ2kzTlUzUHl6am9zWHNnVFVBNmhVY2JQVnVhM2tidzdK
RXAvMS9CMTJGODU3Q0U3MUU3MkU3RTg5MkNGOTc3RDgwQjZBOEI3NUM3OEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMkY4NTdDRTcxRTcyRTdF
ODkyQ0Y5NzdEODBCNkE4Qjc1Qzc4QTQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI4SHN3b3lLM2dpM05VM1B5empvc1hzZ1RVQTZoVWNiUFZ1YTNrYnc3SkVwLzEv
MzIzODMwMzQzYTM0NjIzMDNhMzEzNTM4MzAzYTNhMmYzNDMxMmQzNDMxMjAzZDNl
MjAzMjM2MzIzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwcoBASwFYAwDQYJKoZIhvcNAQELBQAD
ggEBAIYwcc5BATbGDaVsTQDqjMmUkkrq+ptbTdH9kuDyzbK/wku8/Cmgrjc1+NUR
Qfy0kaQm4XR9dWzxrJefpcI9IrdueouW5PsnHmAgU++RywCWv1O4dgdVpUmkmE9r
4wK3cZspJN4nRpRMnfgzUlLT0pgmikB8urtervSsTIR/3tl2/ttW6JwBeWM9i79T
jSXUuGygmu+5Xou9IALu0UYvs+sht+ETDSG6eNcIvC3EKgWRipgXGV2EYaW3tXsG
vxHb9XW6Kk5M62AooB+GQBRvc6WyFbX/F8ZPiXmtH5awePnZZA39sUU1TQRGYWvw
9yyfJVP0t3KkKDId7B2M0BzlE4s=
-----END CERTIFICATE-----
Generated at Fri Jun 14 21:15:11 2024 by rpki-client on console-fra.rpki-client.org