Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3439383a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3439383a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          zuLGOgEea4bN70fzDt9lYRxQTCxcOv7gftIiCwOlsVs=
Subject key identifier:   C2:03:2F:69:5F:D6:6C:31:06:AC:FF:40:0D:73:22:7A:0F:D9:1D:9D
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       092023EEDF902ECD6E70156209DA4E5B5FF369F1
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3439383a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:29 +0000
ROA not before:           Thu 04 Apr 2024 02:55:29 +0000
ROA not after:            Thu 03 Apr 2025 03:00:29 +0000
asID:                     262459
IP address blocks:        2804:4b0:498::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:20:23:ee:df:90:2e:cd:6e:70:15:62:09:da:4e:5b:5f:f3:69:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:29 2024 GMT
            Not After : Apr  3 03:00:29 2025 GMT
        Subject: CN=C2032F695FD66C3106ACFF400D73227A0FD91D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:8a:37:8d:c6:bc:b2:01:2a:a3:b6:15:63:
                    60:b3:53:d7:cb:aa:a4:2e:99:ce:27:bd:34:39:ec:
                    a4:cc:ac:ee:38:61:d5:0d:68:06:6c:39:ff:c4:b5:
                    71:fe:52:53:bf:6f:a5:f5:14:8d:30:ac:a0:9b:2f:
                    e3:0b:47:16:90:a9:93:d8:32:a2:53:6a:1f:d1:d6:
                    94:be:b5:90:f6:8f:e9:27:7e:ec:b4:8e:3a:8e:ca:
                    81:4c:11:df:79:43:87:31:e9:f4:f9:70:69:10:e6:
                    c2:6b:3a:13:cb:ef:ca:de:1d:35:12:d8:ba:20:a4:
                    0e:55:4c:c6:c8:a4:91:dc:3f:af:fc:dd:45:0e:08:
                    74:5d:a3:e4:b7:e3:98:ce:21:01:4e:ef:86:5d:9e:
                    80:04:53:41:21:95:6c:10:19:50:f3:1a:11:67:86:
                    99:c9:32:a9:36:93:f9:43:26:e0:d8:c0:52:b9:8e:
                    af:a9:0f:0a:9a:ca:91:bb:c5:ec:5e:80:60:9d:d6:
                    cf:f3:9d:e7:b1:97:01:da:94:c0:c1:db:31:30:59:
                    4d:13:e7:76:77:e4:b3:8c:35:32:3e:0d:69:69:cf:
                    df:04:15:a4:51:4e:3d:e1:7a:35:14:c5:6f:8d:8e:
                    17:33:a8:f4:7d:88:f9:b9:27:5f:ce:aa:15:c7:a0:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:03:2F:69:5F:D6:6C:31:06:AC:FF:40:0D:73:22:7A:0F:D9:1D:9D
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3439383a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:498::/46

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:55:ab:e7:44:e1:15:70:10:97:d7:e5:83:61:fd:ca:ef:
         17:a7:fc:95:56:3d:12:a7:a7:15:01:e0:0f:1c:e6:62:01:ec:
         71:e3:f8:4b:51:d0:44:1e:19:e7:2f:b9:21:6d:20:5f:e3:29:
         c1:47:48:49:0e:c1:c2:cb:87:22:f7:2d:77:22:34:e0:82:4c:
         af:35:12:59:3a:ac:c9:30:e4:04:4d:4a:f3:6a:13:2d:cf:3a:
         c5:38:6a:13:ec:9e:dd:6f:80:bd:4c:51:9e:cb:a0:3f:cb:b8:
         91:3b:18:7e:18:0c:cf:20:d7:d5:de:74:d5:d9:6b:bf:3b:4d:
         03:8d:f9:27:27:dd:8f:3d:b2:10:ab:49:85:02:e9:f9:f7:a1:
         aa:10:41:e0:30:50:51:40:b2:e7:c4:5a:a3:a5:c9:a3:ca:77:
         1e:4b:49:96:a7:ba:12:f0:31:f3:e3:bd:84:3c:21:9f:bc:b3:
         b6:33:f2:dc:30:80:41:9d:69:37:fb:43:f4:ec:61:20:26:0f:
         00:f3:fd:b2:c4:40:bb:e5:45:ba:d5:2f:ca:23:53:a5:39:5a:
         a7:9c:7a:80:74:72:f2:57:00:9a:a8:dc:71:1d:23:a2:a9:32:
         b6:1d:b5:dc:12:0c:10:1d:78:50:a8:a8:53:c0:da:67:cf:ad:
         18:fd:80:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 21:15:11 2024 by rpki-client on console-fra.rpki-client.org