Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3335303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3335303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          cyO4/h5n+4uXxyok3/vU1KOqoj13A/VyJFjMwBAJHPM=
Subject key identifier:   D3:FB:6C:3D:7E:E4:A2:6E:E5:6A:05:D1:29:0F:C2:57:B2:00:56:B8
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       48909115F63278FCFE8DD00064187CB9101140F5
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3335303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:31 +0000
ROA not before:           Thu 04 Apr 2024 02:55:31 +0000
ROA not after:            Thu 03 Apr 2025 03:00:31 +0000
asID:                     262459
IP address blocks:        2804:4b0:350::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:90:91:15:f6:32:78:fc:fe:8d:d0:00:64:18:7c:b9:10:11:40:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:31 2024 GMT
            Not After : Apr  3 03:00:31 2025 GMT
        Subject: CN=D3FB6C3D7EE4A26EE56A05D1290FC257B20056B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:ee:5d:e2:88:4d:fe:56:a4:0a:7f:51:10:
                    a6:6f:65:79:1b:c2:73:44:f1:e3:d7:94:9c:a6:86:
                    3c:26:4e:0c:ae:b1:b6:53:4d:11:fa:dc:0f:05:d3:
                    86:cb:7d:bf:52:68:37:64:72:32:1a:7e:d1:28:82:
                    41:5c:71:2b:1f:ab:7f:22:68:fb:b1:70:cf:ff:f6:
                    74:39:07:51:4a:ed:a9:99:4d:10:b0:1c:84:08:23:
                    8b:68:b4:49:6c:52:60:6a:37:59:c5:3c:32:00:21:
                    7c:c6:64:0d:6e:0d:93:c2:22:95:b7:fa:f1:78:88:
                    31:25:75:bd:e7:5e:02:97:3e:df:b0:62:93:e6:19:
                    db:8d:9a:fa:53:f6:d4:93:b1:7d:46:38:5c:98:35:
                    8a:f0:a7:5b:4c:ed:c6:b9:b5:aa:50:7d:aa:f9:12:
                    2a:46:ca:a5:ea:97:5e:66:7f:bf:e5:46:46:cd:73:
                    6b:07:56:32:e7:e4:a1:a2:78:90:e2:b3:5d:56:ad:
                    cb:95:50:9a:72:f6:f7:8c:b1:33:37:c3:9e:fe:34:
                    1f:14:da:e8:78:48:5a:d0:5a:3e:aa:5e:6c:58:d4:
                    cd:42:9c:55:f1:6b:5f:3e:17:af:68:a0:36:d0:ee:
                    dd:13:9d:b9:1c:32:bb:a6:ce:64:14:0b:5c:5d:82:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FB:6C:3D:7E:E4:A2:6E:E5:6A:05:D1:29:0F:C2:57:B2:00:56:B8
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3335303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:350::/46

    Signature Algorithm: sha256WithRSAEncryption
         41:18:f9:3c:2c:86:43:68:a1:31:1c:bf:1b:f2:b4:c4:c1:09:
         4b:90:4e:7a:4f:8f:2e:9a:22:13:8c:bb:f4:45:a6:4a:d3:27:
         b3:03:a4:85:e1:cd:12:c1:2e:0d:33:ac:c9:f7:85:49:75:0c:
         9f:0a:70:da:73:e1:05:f2:72:40:96:d6:76:37:29:9f:53:bf:
         96:18:74:f1:fe:ca:89:f2:4c:ad:99:6e:9a:6b:75:f6:ac:eb:
         30:71:36:de:e1:53:91:ed:54:0f:f2:7c:57:53:df:cf:1a:c4:
         42:96:c1:c8:90:39:c5:1a:37:0f:8b:89:47:41:ac:95:fa:53:
         f7:57:5a:0d:60:6a:26:38:56:47:5f:bd:b1:36:f1:4f:a7:89:
         31:d3:8b:a7:32:01:9d:7f:bc:17:a5:10:0e:0c:a9:2b:b5:f2:
         fe:89:54:0e:4e:6c:24:75:ef:b6:07:76:0b:99:04:3c:7e:9a:
         ce:62:19:f4:05:c8:9e:b7:ee:ef:5f:19:95:68:fc:e9:b2:bb:
         8e:d2:06:6a:7e:54:48:ed:a5:ff:0f:55:e4:59:05:ab:c4:91:
         f2:cf:1c:d1:00:4c:b7:d9:0d:67:41:4e:8b:32:e6:dc:3d:88:
         d7:5f:bf:84:ba:66:d8:72:21:e3:59:7f:85:5e:e6:0c:4c:29:
         1f:4a:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:13:32 2024 by rpki-client on console-ams.rpki-client.org