Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3330343a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3330343a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          MpgVboHE51FJjEyMuh6ScIejplLohUd749beJqnDQU8=
Subject key identifier:   87:27:87:75:D6:F9:B3:06:EB:D6:12:50:0C:1D:F7:9C:53:60:D1:51
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       1FD662E09BAACE85C0859DCD65724C3281F10252
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3330343a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:28 +0000
ROA not before:           Thu 04 Apr 2024 02:55:28 +0000
ROA not after:            Thu 03 Apr 2025 03:00:28 +0000
asID:                     262459
IP address blocks:        2804:4b0:304::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d6:62:e0:9b:aa:ce:85:c0:85:9d:cd:65:72:4c:32:81:f1:02:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:28 2024 GMT
            Not After : Apr  3 03:00:28 2025 GMT
        Subject: CN=87278775D6F9B306EBD612500C1DF79C5360D151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4e:bc:7f:ca:1a:77:7d:50:dc:c1:7d:2d:d7:
                    54:4f:e2:d2:dc:2f:28:d5:56:65:80:f3:d4:cf:f5:
                    f3:73:bb:c7:38:60:33:35:a4:9c:c0:a1:f5:a1:5b:
                    e9:1b:58:a0:89:01:9d:5c:b5:fc:7d:60:9b:32:5c:
                    37:25:76:a1:7d:38:1b:3f:05:3e:c7:50:0f:e5:bc:
                    05:db:4c:b4:59:95:69:70:01:36:5a:24:bb:0d:63:
                    41:d1:f4:95:c0:95:43:aa:13:de:19:47:07:44:f4:
                    cf:94:a0:4e:7b:7b:56:39:58:4c:68:7a:a9:ec:a1:
                    7e:83:4d:70:81:95:d0:d7:62:91:21:d2:ba:58:cc:
                    8a:1e:49:c7:69:ea:e2:4c:26:be:9a:e0:a9:fd:29:
                    d9:66:26:4b:23:48:97:fb:78:c1:2b:a1:d7:bc:ca:
                    ee:1f:e0:68:cc:bd:a1:ef:e7:f0:98:1c:f7:85:0c:
                    e6:da:2a:e0:bb:c3:da:af:44:89:df:c4:5d:d4:84:
                    46:d9:17:ce:de:fe:0e:dc:38:53:69:44:47:8e:00:
                    d6:de:34:8d:81:2f:52:e8:4f:0d:bc:88:00:dd:fb:
                    b6:78:c0:ea:fe:21:78:a3:e8:de:45:b6:a6:da:85:
                    bd:56:e4:12:25:fb:00:db:2c:04:5a:b7:ee:fd:b1:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:27:87:75:D6:F9:B3:06:EB:D6:12:50:0C:1D:F7:9C:53:60:D1:51
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3330343a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:304::/46

    Signature Algorithm: sha256WithRSAEncryption
         88:13:df:7a:49:bb:6d:3e:b1:b7:fa:eb:92:9b:99:15:bd:63:
         3a:9b:4f:b5:de:d2:99:6b:50:27:75:c4:5e:5d:ac:a5:09:28:
         e4:08:b0:a4:7c:34:a5:8f:1e:34:5d:e3:9a:2e:97:94:15:0a:
         e3:a0:c6:0b:f4:1c:c4:b9:f9:5f:91:ef:ee:34:60:36:90:00:
         48:0b:49:66:a3:2f:2d:49:21:cc:f0:5c:5c:74:34:b6:b2:e4:
         b4:28:08:57:47:d6:20:20:56:80:80:7a:6f:6c:9d:ef:a3:d9:
         82:83:0d:27:43:15:23:47:38:b0:03:2f:e8:96:fd:ae:2b:d1:
         c5:0c:43:6c:cb:c2:e1:60:06:61:86:4a:de:52:c1:2a:ea:be:
         d9:f0:a3:d7:77:c0:61:ea:66:c8:d0:66:d2:72:90:8e:71:41:
         dd:38:db:ea:68:15:f6:10:67:c6:9b:0f:ba:15:c7:2d:8b:6d:
         ec:95:1d:d2:98:c6:3c:28:1a:46:c2:dc:0f:7a:de:f2:e6:ce:
         d5:a2:b2:73:9a:b2:96:60:24:86:4b:08:8d:84:1b:49:df:58:
         71:22:ab:3e:8b:68:1e:3a:f7:26:a8:bf:b8:7a:0a:d4:b3:f2:
         4a:78:a9:3e:49:39:30:d5:f6:9a:9a:5c:75:46:98:e7:95:2e:
         61:bf:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 21:15:11 2024 by rpki-client on console-fra.rpki-client.org