Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3438383a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3438383a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          37cJHUlcvxR5TAm6568/TV4wpj2Ob6yz+ohQV5WcxVo=
Subject key identifier:   57:48:0F:12:B6:D9:7C:A5:EF:32:6D:B7:59:0F:BE:A9:0B:AB:C5:2E
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       25B4DD309DB49B73A30194F46E02B7EBBB5982D8
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3438383a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:30 +0000
ROA not before:           Thu 04 Apr 2024 02:55:30 +0000
ROA not after:            Thu 03 Apr 2025 03:00:30 +0000
asID:                     262459
IP address blocks:        2804:4b0:488::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b4:dd:30:9d:b4:9b:73:a3:01:94:f4:6e:02:b7:eb:bb:59:82:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:30 2024 GMT
            Not After : Apr  3 03:00:30 2025 GMT
        Subject: CN=57480F12B6D97CA5EF326DB7590FBEA90BABC52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8e:b7:50:ec:9f:c5:2e:d0:6f:96:a2:8f:48:
                    ac:5f:68:fe:c3:ea:ee:17:9b:a6:c8:83:47:ca:32:
                    8e:8e:97:4e:8b:5e:f6:5b:c5:e5:7f:f4:6f:06:e5:
                    ec:b7:69:d6:4e:32:23:5f:9c:50:bd:4e:8a:d7:84:
                    72:8e:90:0e:ab:91:3f:cf:c2:68:dd:fa:37:b8:71:
                    c5:b4:28:7a:a6:00:9d:b2:03:0a:cc:3b:89:a2:a3:
                    0f:09:8b:b1:cf:f3:7b:ae:93:ba:94:e1:26:9e:22:
                    89:78:ac:5d:fe:e8:21:0b:89:91:1a:c6:3d:dd:8b:
                    1e:b7:8f:40:ae:fe:bd:71:e6:e0:18:73:20:e1:9e:
                    22:c3:51:75:b9:39:5a:fe:eb:42:35:d1:a8:4d:d1:
                    30:0f:3e:44:5a:c5:da:5b:99:1f:28:01:55:55:a0:
                    41:25:ed:93:5d:89:cf:1c:c0:25:54:65:1f:19:f2:
                    dc:21:f4:dc:60:d1:96:13:35:45:1b:a5:6c:5b:38:
                    dc:d0:5f:95:bc:5e:29:64:08:42:e7:79:87:9a:e7:
                    91:d1:cd:e4:d0:cf:3c:34:85:51:6c:69:6c:39:07:
                    ce:7c:8c:45:30:66:84:b9:58:48:6d:9b:2e:eb:15:
                    63:b8:21:7b:72:06:87:fc:94:92:81:73:5e:3f:9a:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:0F:12:B6:D9:7C:A5:EF:32:6D:B7:59:0F:BE:A9:0B:AB:C5:2E
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3438383a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:488::/46

    Signature Algorithm: sha256WithRSAEncryption
         25:be:62:c3:b4:ad:78:a5:3f:a1:f2:4f:63:95:9b:67:16:58:
         19:93:fe:6c:76:73:dd:37:23:f0:05:ff:00:fa:de:b4:6d:8b:
         7d:40:16:d8:92:5a:86:3f:79:40:22:dc:a0:14:49:7a:90:26:
         65:2c:6f:c3:47:db:7f:1d:08:b8:e2:46:ce:fe:f8:1e:a8:f6:
         3f:29:f0:78:9e:a1:bc:55:15:57:e4:c8:e4:6b:ee:b0:be:21:
         89:85:21:2e:55:8d:5b:7e:39:5a:dd:f0:8b:5c:1f:d4:2f:cc:
         db:e5:64:46:31:df:d4:5f:08:25:44:e6:de:d0:2e:e9:bb:44:
         04:68:63:b1:c8:74:74:fc:8a:5f:33:46:70:59:ea:5b:b4:db:
         ba:4b:5f:8f:29:06:de:7d:cf:28:3d:21:df:ab:30:2c:06:33:
         59:83:f1:2a:56:28:83:e9:61:c1:75:32:c3:a4:25:78:17:9a:
         d1:54:ef:bc:89:78:d0:80:5d:aa:c4:58:71:d6:3c:1f:14:d3:
         af:66:4f:d2:78:23:61:2c:51:24:fb:25:5f:26:08:78:da:e6:
         4c:d1:e6:94:31:ae:b8:4e:5e:78:55:9e:ca:a1:89:99:80:89:
         9b:7d:40:87:df:1e:30:ad:f0:5f:c9:6e:69:06:da:2d:26:3e:
         80:83:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 21:15:11 2024 by rpki-client on console-fra.rpki-client.org