Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323038303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323038303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          V+D1x3RzxScR+qc+g2h3OwGhM446JRY8Y/Msc0W7a+Y=
Subject key identifier:   10:04:02:5D:07:FB:D1:29:84:DC:57:52:4B:36:A9:46:E8:5A:63:E9
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       1EC9BDAD5CE8BEA9B3802DB8EFA62FF2392965A1
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323038303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:28 +0000
ROA not before:           Thu 16 May 2024 11:33:28 +0000
ROA not after:            Thu 15 May 2025 11:38:28 +0000
asID:                     263338
IP address blocks:        2804:1494:2080::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c9:bd:ad:5c:e8:be:a9:b3:80:2d:b8:ef:a6:2f:f2:39:29:65:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:28 2024 GMT
            Not After : May 15 11:38:28 2025 GMT
        Subject: CN=1004025D07FBD12984DC57524B36A946E85A63E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:2c:37:b6:cb:5e:f9:ac:e2:21:4d:c1:1a:
                    57:b5:68:bb:64:41:65:3b:d9:5f:b7:1b:ae:0a:f8:
                    02:8c:df:5a:42:bb:bb:88:6b:50:51:b7:42:b9:ce:
                    96:d0:ba:eb:58:42:58:d4:21:38:0b:2d:e9:bf:94:
                    9a:96:17:a6:c9:c4:c5:06:ad:84:ab:61:0f:76:97:
                    74:e1:8d:fc:1e:a0:fe:63:13:35:f7:9c:cf:90:06:
                    32:b1:40:67:ee:38:93:dc:aa:9f:a3:ae:55:30:87:
                    4c:da:6e:83:a6:11:a1:d8:a8:d1:7b:9a:63:db:3e:
                    af:f6:63:e7:32:51:ae:f2:11:66:03:3e:9c:da:96:
                    c0:0b:87:dd:47:f1:1c:9d:7a:72:80:8d:22:93:ba:
                    b3:2e:6c:c2:d5:2b:4f:5b:10:b7:41:ef:5a:90:e9:
                    2f:7b:80:07:13:90:0d:2f:0b:92:25:66:5d:78:ab:
                    6b:7e:45:bc:4f:4d:98:98:0a:3c:ef:7a:3c:31:00:
                    22:99:94:9c:3f:2c:77:cb:84:62:ff:86:09:a6:d2:
                    fe:04:10:e6:0f:48:fa:02:2b:41:e0:6b:b6:01:2e:
                    fc:d0:05:bd:c8:9a:b3:9e:bd:56:6e:15:55:07:6f:
                    18:39:a5:8b:34:8b:3b:d5:47:47:32:1f:99:0e:8c:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:04:02:5D:07:FB:D1:29:84:DC:57:52:4B:36:A9:46:E8:5A:63:E9
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323038303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:2080::/45

    Signature Algorithm: sha256WithRSAEncryption
         04:06:03:a4:0c:29:14:18:69:3a:b6:66:4f:3e:42:07:d8:93:
         5c:14:15:1f:a9:eb:aa:0f:23:c4:b6:b1:fd:f2:bd:60:ad:e7:
         b0:c4:ff:75:df:62:8d:27:5f:dd:bc:38:53:f3:1f:b2:76:4e:
         7d:14:26:21:0b:91:13:96:7e:00:16:64:a7:b6:46:60:94:1c:
         f2:fc:5e:b0:c2:f9:63:6c:19:c6:dc:f9:7e:14:13:a5:e9:f3:
         25:ac:38:3d:f1:1c:f6:df:10:10:19:cf:fd:b1:32:b3:af:77:
         6c:92:22:17:98:47:3f:c1:2c:b3:a1:b4:d6:c9:b9:4b:70:0b:
         9e:be:ad:ad:b8:0e:7f:b5:fd:35:81:69:4f:14:df:2a:7f:52:
         27:cc:ee:12:74:be:77:13:69:0a:30:0d:8a:a3:62:72:88:a6:
         6e:17:7b:16:7d:fd:61:80:97:b5:db:e0:d8:7b:42:43:45:cb:
         ca:d2:4f:62:d5:80:88:fe:43:84:5f:b2:23:3b:d2:b8:85:a2:
         9a:0f:cd:05:b0:12:87:4e:5c:23:0f:d8:01:cd:d0:61:b7:65:
         15:2a:dd:2c:5e:4a:07:fc:52:dc:7c:84:3f:25:6b:f7:1e:e3:
         3f:5f:4b:d7:e7:44:e9:31:fb:19:91:23:5e:94:1b:cf:ce:79:
         53:b2:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:09 2024 by rpki-client on console-fra.rpki-client.org