Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3331303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3331303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          dk673ciNkg0l6zCYNEGuJcUMZM58kZ7tfrJc7kAdJ9k=
Subject key identifier:   C7:C4:CA:94:40:15:B1:3C:6F:06:63:09:58:6B:32:3E:AA:4F:B6:DE
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       0E7A8ADA130D16B54BA04F3C7DA790459A71F6BD
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3331303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:28 +0000
ROA not before:           Thu 04 Apr 2024 02:55:28 +0000
ROA not after:            Thu 03 Apr 2025 03:00:28 +0000
asID:                     262459
IP address blocks:        2804:4b0:310::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7a:8a:da:13:0d:16:b5:4b:a0:4f:3c:7d:a7:90:45:9a:71:f6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:28 2024 GMT
            Not After : Apr  3 03:00:28 2025 GMT
        Subject: CN=C7C4CA944015B13C6F066309586B323EAA4FB6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:cb:2f:25:86:e3:a9:36:bb:2e:b7:87:d3:
                    95:62:d2:af:3e:83:b0:78:0d:d3:c6:76:2b:36:85:
                    34:a5:b9:0d:81:75:6a:29:bc:50:31:17:bb:4c:ff:
                    92:d4:08:64:ac:6d:0b:8b:76:6a:fc:87:2d:6f:6b:
                    bf:bb:23:d5:61:1a:fe:d1:cf:3d:de:e9:68:70:63:
                    8b:e9:8e:49:91:93:cc:9b:16:22:ee:dd:c6:a4:44:
                    56:d7:89:50:2e:44:4e:2d:00:6a:a3:eb:f5:54:61:
                    cd:dd:de:be:56:ca:67:88:7c:ac:a2:71:2e:6b:fb:
                    bf:b7:cb:92:b0:1f:d5:10:d3:0c:18:dd:8e:6b:0b:
                    49:f9:d1:5d:11:1e:0a:c4:c2:1f:04:1e:9e:42:15:
                    a8:83:55:05:5a:47:6f:cc:d1:ee:4b:06:52:6e:18:
                    33:22:57:87:68:a6:5e:ea:79:94:d7:1a:5b:c8:35:
                    3d:3e:1f:15:36:c4:bf:08:28:77:42:51:66:7f:92:
                    bd:c8:8f:6f:a2:e6:f8:22:b0:e3:13:e8:1c:5a:e8:
                    33:70:8c:9a:5f:18:26:e7:99:76:0d:73:63:58:1e:
                    b1:1b:25:71:ae:0b:a6:7e:18:0e:40:44:6d:2a:92:
                    5a:fc:02:99:34:22:47:83:b5:25:a8:73:a4:7c:0d:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C4:CA:94:40:15:B1:3C:6F:06:63:09:58:6B:32:3E:AA:4F:B6:DE
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3331303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:310::/46

    Signature Algorithm: sha256WithRSAEncryption
         d2:0f:00:ec:19:0c:19:d8:f6:4e:e9:3b:bb:55:81:2b:c8:be:
         07:44:67:62:1c:c9:14:75:59:44:64:59:3a:b0:47:32:d7:94:
         93:29:e8:0c:0b:93:fd:36:4f:31:f6:03:29:b5:63:7d:9c:6c:
         05:7e:65:13:9b:89:30:d1:ad:dd:23:48:1a:9f:c8:fa:00:4f:
         1e:2a:d7:f0:6a:8f:90:d3:e2:c2:b8:0a:be:c3:db:d2:fd:b1:
         3f:58:3e:8f:49:17:41:3d:15:b5:16:39:cd:35:5f:47:ba:64:
         73:87:f4:00:68:96:3d:03:dc:3d:97:8f:de:6a:0b:53:6b:be:
         61:d9:c7:b6:16:5c:91:09:74:82:45:4d:4c:03:11:19:2b:c7:
         04:a5:52:41:4d:54:9d:5f:2c:57:73:f6:fe:34:a7:a2:c3:48:
         a9:9e:e0:d3:33:60:f6:a4:9c:8c:b7:de:d0:47:72:e6:ee:03:
         4d:50:2e:42:8e:88:a3:50:03:27:c1:3a:82:c4:2f:18:cd:ab:
         38:77:ab:82:8f:fa:bb:77:4b:4d:7b:20:ba:39:83:8e:d0:fb:
         b2:63:b5:17:a4:d1:0a:4e:4d:53:2c:71:93:f5:6b:34:ce:c1:
         a2:b4:94:1d:48:de:b4:03:95:46:6a:70:37:6a:50:01:c8:f1:
         23:05:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:13:32 2024 by rpki-client on console-ams.rpki-client.org