Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3339633a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3339633a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          eo76jatx8VnzWhY6I0+fKEYNIZx9qm83RXJ4HkvuuOI=
Subject key identifier:   FA:A6:62:8E:3A:51:3E:D4:52:B6:31:F9:B6:74:26:FD:03:6F:DE:F6
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       2801FB1475CE3A24AC9CB022C6D662A40B61A370
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3339633a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:30 +0000
ROA not before:           Thu 04 Apr 2024 02:55:30 +0000
ROA not after:            Thu 03 Apr 2025 03:00:30 +0000
asID:                     262459
IP address blocks:        2804:4b0:39c::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:01:fb:14:75:ce:3a:24:ac:9c:b0:22:c6:d6:62:a4:0b:61:a3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:30 2024 GMT
            Not After : Apr  3 03:00:30 2025 GMT
        Subject: CN=FAA6628E3A513ED452B631F9B67426FD036FDEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:3d:b0:4d:22:70:8a:56:87:14:58:40:ca:
                    0c:18:1b:29:1f:77:33:9b:e0:88:71:f1:9e:cf:f0:
                    c9:31:d6:06:8f:7a:c7:45:fa:52:0a:72:53:63:81:
                    e0:78:24:a9:4d:67:7c:bd:42:2e:6c:1e:ed:47:ff:
                    48:1c:c0:c1:bd:35:b9:11:71:74:b6:72:a2:a8:76:
                    d6:47:5d:02:24:94:ea:28:e0:cb:4e:89:c2:5b:de:
                    aa:45:9c:7c:71:f3:b6:4e:2b:6d:7d:33:08:39:51:
                    82:7a:cf:f2:f1:84:28:66:02:1e:0d:e4:6e:8d:d9:
                    75:d1:af:a2:6d:ba:17:76:47:25:a4:ee:0d:44:a1:
                    19:bf:b6:00:e2:5c:90:41:fd:6a:31:6a:03:70:86:
                    72:ab:35:13:e9:9f:74:ff:32:86:72:4a:c6:09:2a:
                    9f:3b:85:d9:98:8a:56:ab:7d:86:02:fc:50:15:e1:
                    63:85:eb:98:ab:e3:c6:1f:ac:33:9f:68:5a:8e:bc:
                    17:d5:e1:f9:49:b5:02:ed:ad:b8:29:03:34:39:7d:
                    5e:fd:c2:1f:c1:9b:af:9d:7a:69:6b:33:36:00:c7:
                    c2:73:bb:da:bb:9b:f6:70:d6:cc:74:e9:8d:89:a4:
                    d9:fd:ae:3a:e7:b0:df:60:99:14:4f:ff:08:12:5a:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A6:62:8E:3A:51:3E:D4:52:B6:31:F9:B6:74:26:FD:03:6F:DE:F6
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3339633a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:39c::/46

    Signature Algorithm: sha256WithRSAEncryption
         f8:33:51:da:33:aa:a7:05:84:c9:91:fa:3d:0d:0f:81:02:64:
         cf:07:83:a6:70:30:40:99:2c:65:cd:a3:14:42:48:d8:af:73:
         7a:52:11:1e:b4:3f:1b:88:57:ef:3d:90:54:d6:c4:7a:c4:8e:
         76:7e:41:91:54:66:54:8f:ee:b7:68:ae:81:bb:c5:42:b0:5b:
         04:b2:fa:ca:09:4b:77:e8:dd:b8:ea:9a:01:8b:a3:14:df:f7:
         95:d4:32:e8:11:dd:98:06:41:6b:1d:ed:cb:4b:ea:49:c4:a1:
         86:e2:ef:f0:b5:84:55:cf:f3:d4:22:d7:96:2b:e4:e6:b4:de:
         d4:83:6d:f1:10:a7:53:93:3c:d8:48:e2:b8:7e:c9:7e:0e:c1:
         d7:0a:ce:d8:ec:a3:75:84:ed:c0:8a:40:a2:0c:e9:64:e7:01:
         4c:4b:1b:5e:cb:34:d5:d4:4a:a7:fe:54:08:fe:d6:33:ca:cf:
         0a:27:d8:b7:08:49:3b:5b:96:1c:2d:16:0e:66:d4:cb:c5:81:
         01:cc:05:72:af:ac:eb:1c:2a:f2:11:d6:7c:20:69:d7:be:32:
         f9:ab:7d:51:d4:b6:6a:09:a4:57:7b:4e:23:0c:38:30:57:1b:
         94:6d:2e:a3:be:ce:b6:77:dc:76:8f:0d:d0:fc:97:90:4c:9e:
         63:17:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:13:32 2024 by rpki-client on console-ams.rpki-client.org