Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3465303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3465303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          zhny3minZ9GPwMyDQxrt9JLBhgszYW2BFVpPxYNCuFE=
Subject key identifier:   F3:04:88:1A:E1:3E:F0:28:C7:81:AC:0C:3F:21:B4:3B:99:24:EF:B6
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       1F9D5F9602444DAB13F6D993AC694E97A0724670
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3465303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:31 +0000
ROA not before:           Thu 04 Apr 2024 02:55:31 +0000
ROA not after:            Thu 03 Apr 2025 03:00:31 +0000
asID:                     262459
IP address blocks:        2804:4b0:4e0::/46 maxlen: 46

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9d:5f:96:02:44:4d:ab:13:f6:d9:93:ac:69:4e:97:a0:72:46:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:31 2024 GMT
            Not After : Apr  3 03:00:31 2025 GMT
        Subject: CN=F304881AE13EF028C781AC0C3F21B43B9924EFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:5e:ac:c4:4b:03:f3:32:c2:84:90:5b:c4:
                    91:0d:0f:de:96:b0:72:23:04:5d:2b:f8:63:c2:e0:
                    09:dc:35:26:b7:2c:f8:84:57:17:50:b9:c7:9d:1f:
                    43:1f:0c:b4:2c:11:94:67:ee:53:27:0f:16:4a:61:
                    34:3c:68:27:1b:51:d4:40:35:5b:f8:bf:b3:e8:c1:
                    ab:43:a2:cd:f9:13:0c:d6:1c:87:ef:c7:4d:ff:2f:
                    68:b0:34:3b:cd:30:cc:62:81:af:3b:7f:87:7d:7c:
                    19:17:8b:ef:99:21:69:29:e4:87:35:fa:52:bb:da:
                    13:3f:c8:75:dd:2d:aa:b5:45:95:72:13:34:1c:64:
                    99:7b:a4:41:bb:93:fb:a8:d4:6f:c7:cc:55:5e:75:
                    5b:2c:ad:b8:3a:e3:9c:3a:a6:32:9c:42:44:e6:bb:
                    54:55:61:10:fd:03:f7:e8:cf:73:3f:df:3b:a3:79:
                    43:98:18:c5:08:8f:fe:f7:7a:e0:6d:24:87:e6:a8:
                    64:ca:2b:e6:64:c7:98:fb:a1:19:53:e4:3b:93:f1:
                    dd:7f:ca:75:94:1f:d6:c3:fb:3f:06:9f:c8:e7:02:
                    87:cb:89:56:09:0e:25:71:02:1e:7f:d7:2d:d8:d4:
                    05:55:85:6a:e6:fc:09:0d:b6:5e:15:08:4d:ff:fe:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:04:88:1A:E1:3E:F0:28:C7:81:AC:0C:3F:21:B4:3B:99:24:EF:B6
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3465303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:4e0::/46

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:64:03:7f:6a:9b:1c:a4:c9:c0:b4:19:48:4f:b7:33:88:
         19:27:b8:c2:a8:1f:bc:97:45:d5:8e:0b:12:66:b2:79:3d:3c:
         7c:6d:d5:e8:5a:31:39:9c:c8:58:61:ba:5c:33:24:f3:11:5b:
         71:b6:02:49:40:ad:69:ef:b6:ea:4e:15:ac:cf:bb:f3:32:5b:
         54:be:00:ae:d0:dc:7d:37:3a:fd:76:ad:a9:c0:a5:28:c8:ba:
         a8:09:bc:2c:1a:fe:e0:4c:6a:35:36:a1:01:30:b5:1f:fa:d0:
         d9:52:0e:58:53:f9:50:1b:f8:ec:a9:0f:83:3f:5a:47:d7:ec:
         61:47:ef:ae:a2:5d:c7:0b:00:1b:43:2f:44:6b:dd:07:5d:f8:
         db:ab:d9:ac:4e:c0:21:cf:21:a5:2e:98:47:18:dc:64:05:9a:
         e3:ea:cf:99:b2:a9:58:a9:1b:16:7c:dc:aa:08:75:13:e2:5e:
         eb:66:ec:5b:6f:79:2e:ff:cf:f7:a1:1b:82:f5:bb:0e:76:66:
         96:f3:8e:ac:9e:fd:e6:71:90:54:81:15:c1:56:b5:91:8d:8f:
         99:7f:26:e3:4f:84:e6:b8:9b:90:00:f2:dc:b4:57:8f:8c:6b:
         50:47:36:0f:73:14:d2:21:19:97:8b:dd:d4:07:a0:2d:bd:b6:
         50:79:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:13:32 2024 by rpki-client on console-ams.rpki-client.org