Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3332203d3e20323632343539.roa
File:                     323830343a3462303a3a2f33322d3332203d3e20323632343539.roa (raw, json)
Hash identifier:          3cEMr/bCjiNMvTpa4iv4o8OTmbE36eNtBfnccCrFsiA=
Subject key identifier:   0A:9D:46:0C:67:9E:0D:D7:39:CA:4E:C3:0B:DB:84:AE:A8:A7:23:EF
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       74B0BF6399EB689CACF69B947916EE16EF88308D
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3332203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:29 +0000
ROA not before:           Thu 04 Apr 2024 02:55:29 +0000
ROA not after:            Thu 03 Apr 2025 03:00:29 +0000
asID:                     262459
IP address blocks:        2804:4b0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b0:bf:63:99:eb:68:9c:ac:f6:9b:94:79:16:ee:16:ef:88:30:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:29 2024 GMT
            Not After : Apr  3 03:00:29 2025 GMT
        Subject: CN=0A9D460C679E0DD739CA4EC30BDB84AEA8A723EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:75:b6:89:2a:3d:25:3a:d4:9f:55:d4:81:
                    9f:fa:2a:2c:bc:84:f9:0f:4f:f6:10:f2:51:16:0d:
                    b1:f6:b8:f9:e2:21:45:59:cb:42:31:de:b3:bc:ae:
                    fb:29:d3:d3:cb:e9:ab:95:7b:a8:36:bb:05:67:75:
                    d5:7e:50:96:e4:35:77:11:ea:6b:06:d2:2d:99:ad:
                    c2:01:27:15:41:32:dc:0f:83:39:77:f2:db:04:be:
                    76:ec:a5:8e:8f:33:47:f6:01:e9:2b:e5:46:ec:5a:
                    e4:11:61:a1:d8:0b:37:b1:de:80:93:c7:78:1f:0e:
                    a2:66:58:cd:e1:60:82:29:2b:2e:dc:e7:2b:58:86:
                    cc:36:67:84:5c:55:35:e1:ff:e6:e9:b4:7d:30:ca:
                    72:30:9f:17:25:3a:04:24:ea:10:96:8a:37:29:8e:
                    db:75:cc:37:26:c1:6d:26:9f:64:8d:9d:79:20:a9:
                    5c:42:b9:95:42:ef:2b:31:90:56:bf:a8:52:3b:43:
                    dd:c7:1d:15:47:1a:17:fb:83:a5:41:d8:f9:c0:c8:
                    20:d1:14:7d:2a:5f:0a:15:01:54:e3:66:9a:8d:a0:
                    8d:c4:b3:52:b3:d3:df:d7:a4:8a:6a:a3:30:79:6c:
                    a2:04:9d:3b:69:34:80:ca:98:32:4d:85:72:e6:88:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:46:0C:67:9E:0D:D7:39:CA:4E:C3:0B:DB:84:AE:A8:A7:23:EF
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3332203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         e2:64:0a:87:ff:19:dc:2b:ab:c6:62:db:6a:11:7b:05:d4:a2:
         9b:58:27:a5:cf:1d:15:f9:fe:47:ec:1d:8b:35:9e:4b:a5:3c:
         e0:fa:dc:be:d9:44:be:9f:f7:17:ca:df:47:17:8b:01:c8:e0:
         e8:11:3c:a5:ca:44:a1:0c:81:9a:55:80:88:b0:92:a1:65:95:
         5f:7e:4d:b1:90:a9:0b:98:22:55:42:85:cd:db:1b:c4:97:ec:
         17:2c:f4:92:4c:b9:e3:34:e9:87:51:dc:69:4e:8a:5f:bb:ca:
         8d:80:ec:18:03:6e:03:c1:62:a5:64:4a:71:b8:fd:b6:b0:57:
         37:ad:09:65:42:ce:fd:4a:51:de:6f:6c:06:10:cc:26:f5:2e:
         eb:4a:b2:99:48:8a:2b:12:55:55:f5:40:0c:4b:1d:f7:15:23:
         4e:43:c2:28:59:61:0a:89:ed:7d:ac:9f:a4:69:02:ec:4d:87:
         d2:0f:a6:ee:a4:79:72:d8:f6:71:0d:3f:8e:0d:0c:23:90:67:
         0d:32:ad:3b:53:f5:c9:6c:7c:49:e8:ed:c4:d1:93:8f:55:fb:
         13:e9:e6:56:9b:3c:07:57:e3:ff:70:92:20:00:e3:56:f7:db:
         23:20:be:8f:43:a6:c2:ce:15:d7:d9:e6:25:7b:38:80:7c:73:
         23:95:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:13:32 2024 by rpki-client on console-ams.rpki-client.org