Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3439303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3439303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          2/7YAg81T1ssM87bFHsaHhRkLKzjNjKhN/WVKnLyjts=
Subject key identifier:   A0:93:A0:2D:68:83:9E:B4:C5:7D:7D:67:60:E6:16:70:1E:B2:EE:2F
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       7A670661EBC82F3B4CE853712C12E6832BE27C9C
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3439303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:31 +0000
ROA not before:           Thu 04 Apr 2024 02:55:31 +0000
ROA not after:            Thu 03 Apr 2025 03:00:31 +0000
asID:                     262459
IP address blocks:        2804:4b0:490::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:67:06:61:eb:c8:2f:3b:4c:e8:53:71:2c:12:e6:83:2b:e2:7c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:31 2024 GMT
            Not After : Apr  3 03:00:31 2025 GMT
        Subject: CN=A093A02D68839EB4C57D7D6760E616701EB2EE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:35:94:92:71:16:db:7d:e8:06:f1:fe:e2:
                    3b:49:81:24:b2:e0:65:e9:f4:24:da:65:5b:69:e7:
                    7e:2c:c2:b4:1a:5c:8c:3a:7e:34:c8:44:b9:fb:df:
                    ab:49:df:0b:51:02:cd:f7:0d:1d:50:b7:70:c2:e3:
                    92:54:4b:2c:ac:3c:cb:85:ef:f8:af:09:22:58:1f:
                    e4:7b:19:d3:fb:38:2d:ee:c6:71:2c:d6:28:1e:b2:
                    14:63:c6:13:05:50:80:6d:0e:76:8f:f8:c0:08:b4:
                    4d:cd:91:66:76:97:c9:78:0f:45:cb:64:ee:b1:d8:
                    b9:14:d5:43:cb:e6:45:94:32:e9:e4:fc:6b:de:d7:
                    7f:4e:40:f1:87:8f:54:41:70:b6:e3:2d:2d:21:d8:
                    1c:f6:d6:10:a0:27:fa:70:9d:7e:04:b0:c0:3a:4b:
                    cb:41:be:f0:9c:b2:56:97:59:1b:5a:e2:7f:61:8a:
                    d4:4b:f7:f9:14:9a:fd:13:d8:16:09:22:ca:a0:a0:
                    10:17:d3:f1:6f:76:5c:26:71:bd:25:9b:9c:9c:99:
                    f8:36:07:7d:c1:94:14:a6:92:38:c9:a0:79:62:b3:
                    98:eb:88:73:20:06:c7:d8:e9:9b:d0:72:eb:53:74:
                    a2:12:fe:f6:0f:45:fb:b0:2d:af:b9:39:9b:81:0d:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:93:A0:2D:68:83:9E:B4:C5:7D:7D:67:60:E6:16:70:1E:B2:EE:2F
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3439303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:490::/46

    Signature Algorithm: sha256WithRSAEncryption
         86:76:6d:98:ab:1a:4e:f8:ba:b7:38:83:ed:fc:57:f5:42:20:
         1d:c0:46:f5:d8:2e:8e:af:39:c3:34:67:36:dd:33:43:8f:cf:
         d7:c4:01:20:8a:22:72:0a:60:e1:18:52:3e:fa:5c:8a:c0:53:
         17:2a:3e:6f:5e:b6:c2:b2:73:aa:94:76:09:28:9e:1f:00:b8:
         40:25:39:7f:01:d3:93:4f:db:80:8c:6d:57:84:54:b1:43:91:
         e0:6e:78:b6:4c:62:92:f9:f1:95:34:af:87:cf:22:e5:df:d1:
         da:92:c4:1e:da:fe:70:12:1a:64:e8:32:17:08:27:69:43:ab:
         c8:01:0d:b6:f8:52:f8:ce:33:a3:6c:4d:70:cc:50:57:e0:0a:
         a8:56:42:f8:7f:b5:eb:28:dc:29:53:a5:e7:4c:e3:5d:6d:0e:
         2f:fe:86:9c:57:f4:2a:7b:69:a4:cc:7b:42:85:51:f2:fb:c1:
         b1:29:9e:b3:38:58:b6:08:8a:74:c7:3e:64:b5:4d:26:88:48:
         bd:1a:82:c8:07:02:9d:0c:32:56:14:21:0f:b1:b1:f4:4d:63:
         66:7f:1e:b7:3c:4b:e7:1e:e1:ca:18:d3:5a:09:91:39:b4:c8:
         bb:20:4f:28:2e:e2:c4:6c:48:31:36:52:15:57:51:9a:4c:9e:
         44:07:fb:c9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUemcGYevILztM6FNxLBLmgyvifJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyRjg1N0NFNzFFNzJFN0U4OTJDRjk3N0Q4MEI2QThC
NzVDNzhBNDAeFw0yNDA0MDQwMjU1MzFaFw0yNTA0MDMwMzAwMzFaMDMxMTAvBgNV
BAMTKEEwOTNBMDJENjg4MzlFQjRDNTdEN0Q2NzYwRTYxNjcwMUVCMkVFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7zWUknEW233oBvH+4jtJgSSy
4GXp9CTaZVtp534swrQaXIw6fjTIRLn736tJ3wtRAs33DR1Qt3DC45JUSyysPMuF
7/ivCSJYH+R7GdP7OC3uxnEs1igeshRjxhMFUIBtDnaP+MAItE3NkWZ2l8l4D0XL
ZO6x2LkU1UPL5kWUMunk/Gve139OQPGHj1RBcLbjLS0h2Bz21hCgJ/pwnX4EsMA6
S8tBvvCcslaXWRta4n9hitRL9/kUmv0T2BYJIsqgoBAX0/Fvdlwmcb0lm5ycmfg2
B33BlBSmkjjJoHlis5jriHMgBsfY6ZvQcutTdKIS/vYPRfuwLa+5OZuBDXaTAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUoJOgLWiDnrTFfX1nYOYWcB6y7i8wHwYDVR0j
BBgwFoAUsS+FfOcecufoks+XfYC2qLdceKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjhIc3dveUszZ2kzTlUzUHl6am9zWHNnVFVBNmhVY2JQVnVhM2tidzdK
RXAvMS9CMTJGODU3Q0U3MUU3MkU3RTg5MkNGOTc3RDgwQjZBOEI3NUM3OEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMkY4NTdDRTcxRTcyRTdF
ODkyQ0Y5NzdEODBCNkE4Qjc1Qzc4QTQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI4SHN3b3lLM2dpM05VM1B5empvc1hzZ1RVQTZoVWNiUFZ1YTNrYnc3SkVwLzEv
MzIzODMwMzQzYTM0NjIzMDNhMzQzOTMwM2EzYTJmMzQzNjJkMzQzNjIwM2QzZTIw
MzIzNjMyMzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKAQEsASQMA0GCSqGSIb3DQEBCwUAA4IB
AQCGdm2YqxpO+Lq3OIPt/Ff1QiAdwEb12C6OrznDNGc23TNDj8/XxAEgiiJyCmDh
GFI++lyKwFMXKj5vXrbCsnOqlHYJKJ4fALhAJTl/AdOTT9uAjG1XhFSxQ5Hgbni2
TGKS+fGVNK+HzyLl39HaksQe2v5wEhpk6DIXCCdpQ6vIAQ22+FL4zjOjbE1wzFBX
4AqoVkL4f7XrKNwpU6XnTONdbQ4v/oacV/Qqe2mkzHtChVHy+8GxKZ6zOFi2CIp0
xz5ktU0miEi9GoLIBwKdDDJWFCEPsbH0TWNmfx63PEvnHuHKGNNaCZE5tMi7IE8o
LuLEbEgxNlIVV1GaTJ5EB/vJ
-----END CERTIFICATE-----
Generated at Fri Jun 14 21:15:11 2024 by rpki-client on console-fra.rpki-client.org