Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3466303a3a2f34342d3434203d3e20323632343539.roa
File:                     323830343a3462303a3466303a3a2f34342d3434203d3e20323632343539.roa (raw, json)
Hash identifier:          IrTWlETUg8QgZ71/z1bdSYj6CHfWFa17rKaAiZq9n14=
Subject key identifier:   D9:00:9F:99:4C:0C:88:51:62:84:22:A7:4B:3A:9B:5D:F6:B1:AC:FF
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       2C08C4629AAAAD037AC698E360FD79C3E7185FB8
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3466303a3a2f34342d3434203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:27 +0000
ROA not before:           Thu 04 Apr 2024 02:55:27 +0000
ROA not after:            Thu 03 Apr 2025 03:00:27 +0000
asID:                     262459
IP address blocks:        2804:4b0:4f0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:08:c4:62:9a:aa:ad:03:7a:c6:98:e3:60:fd:79:c3:e7:18:5f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:27 2024 GMT
            Not After : Apr  3 03:00:27 2025 GMT
        Subject: CN=D9009F994C0C8851628422A74B3A9B5DF6B1ACFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ee:1b:1b:61:87:4d:1b:92:81:d1:c6:3e:cd:
                    6a:b0:43:78:b3:a8:db:92:80:c0:d7:95:5f:4d:69:
                    75:74:98:81:c6:21:b5:d8:53:91:3a:ab:2b:be:c4:
                    98:d6:f5:4e:a8:31:7e:a1:67:5f:cd:22:07:83:7e:
                    cf:45:02:97:ec:48:f6:c0:5d:38:e7:fb:55:c1:ef:
                    56:96:f0:46:16:d8:f7:2e:a8:5d:e5:a3:ed:47:e6:
                    8b:28:4d:53:f1:2e:d4:af:c0:5f:2a:5f:c9:c1:a2:
                    8f:9c:9a:85:88:45:69:1d:f2:3f:9b:6d:76:11:67:
                    e8:b3:23:32:4b:85:81:49:89:5d:ab:88:21:33:06:
                    93:c8:42:95:83:40:d3:d2:c5:a1:3f:d1:c0:75:04:
                    bd:b9:9e:cc:20:ff:b0:75:74:0e:79:88:8a:a5:e6:
                    c5:a0:7c:02:64:2e:c0:e6:e8:c3:ea:58:b6:08:f9:
                    c1:99:51:b0:c4:4d:45:d5:1c:54:90:dc:e0:42:40:
                    dc:4b:39:a5:d2:2e:88:b7:6f:9d:d0:c5:3a:42:82:
                    38:34:b3:5e:2f:86:ec:99:51:b4:ef:3c:47:c7:b4:
                    1e:05:a0:2b:ca:6a:ed:c8:e3:dd:c6:30:fe:20:bf:
                    56:c2:e8:2e:2b:a5:a1:ac:79:91:c6:d2:28:f9:3c:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:9F:99:4C:0C:88:51:62:84:22:A7:4B:3A:9B:5D:F6:B1:AC:FF
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3466303a3a2f34342d3434203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:4f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:64:6d:25:d3:39:7e:cb:3e:07:d6:29:f8:d1:83:31:98:
         35:4d:f4:c5:3d:78:26:f4:76:b9:0c:cc:4d:db:74:65:53:a6:
         1f:98:31:5e:39:e0:1e:7b:8f:a1:e8:f8:c3:35:c8:da:5a:12:
         a5:1c:95:2a:71:f1:2a:97:0a:bb:b8:45:4e:8c:d9:c2:fb:cd:
         e8:1b:10:0c:cc:02:7d:57:7d:51:35:9d:59:99:2d:d3:14:de:
         94:75:98:7f:0b:90:a8:2c:1f:19:11:0f:27:50:cf:82:7b:01:
         c6:d7:c6:cc:5c:cb:df:14:9e:c2:e0:76:1d:22:ac:61:64:ba:
         f0:48:62:30:d0:1b:22:a0:17:bc:c7:1b:e2:35:76:86:00:09:
         27:6d:e6:f9:92:b5:22:e2:a0:e5:ad:68:61:10:05:93:0e:1e:
         ea:5a:72:a7:37:df:07:ce:2c:9b:3c:74:4d:04:c3:77:8c:7c:
         2d:14:02:15:40:28:f6:54:7e:72:3c:ef:dd:5f:37:4f:03:96:
         ba:0f:5f:b0:87:75:14:98:59:68:31:1b:1b:ed:a1:73:e0:60:
         bf:0d:99:3f:26:1f:ec:a3:a2:c8:6c:63:a8:90:d4:e2:d0:d8:
         da:f2:d9:25:da:8a:b9:a9:6c:4a:9e:5c:f8:84:6b:5a:4f:b9:
         f9:89:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 21:15:11 2024 by rpki-client on console-fra.rpki-client.org