Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323039383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323039383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          0w8FFJceZ9s9BVc7eZytVtDCBQWEoa22jGHxHCfSXlA=
Subject key identifier:   59:88:2A:59:CF:4E:F8:19:F8:3F:F8:9B:09:47:31:7B:D6:E6:1E:4B
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       32E2665B02C3033FA2C12CE897BCE9F35B3CA240
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323039383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:20 +0000
ROA not before:           Thu 16 May 2024 11:33:20 +0000
ROA not after:            Thu 15 May 2025 11:38:20 +0000
asID:                     263338
IP address blocks:        2804:1494:2098::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e2:66:5b:02:c3:03:3f:a2:c1:2c:e8:97:bc:e9:f3:5b:3c:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:20 2024 GMT
            Not After : May 15 11:38:20 2025 GMT
        Subject: CN=59882A59CF4EF819F83FF89B0947317BD6E61E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:9b:29:2c:2c:e2:b8:0a:6a:46:76:db:d6:
                    a2:f6:46:96:3e:52:7d:80:f0:35:66:ba:38:e5:0c:
                    74:2a:72:2a:45:b6:0b:0a:22:dc:1e:7a:f2:95:d2:
                    e1:59:36:20:23:d0:c1:0d:34:5c:f2:47:62:95:13:
                    1c:d4:c0:a1:5b:2f:50:ed:51:c4:0d:25:04:35:e6:
                    e9:2d:9d:0f:51:45:da:d6:62:53:8a:52:f6:1e:e4:
                    69:2a:8f:59:e5:f5:d7:9a:18:8a:31:dd:80:2a:1c:
                    41:ec:4b:04:d4:31:82:7f:dd:c4:a6:59:a0:72:79:
                    89:d2:ba:5e:2f:b9:f2:5b:72:4d:46:15:1d:eb:25:
                    43:a1:6b:97:91:75:c4:2f:5f:bd:de:12:fc:5b:d2:
                    71:23:ed:8f:16:df:b6:0f:95:09:56:a3:8b:a3:d8:
                    25:b8:c9:f7:4b:3f:18:d5:67:81:5d:13:e6:be:01:
                    de:f3:17:4b:7a:86:01:ec:8e:2a:43:f8:72:66:4f:
                    f4:cd:48:65:76:62:9d:61:7d:ac:8b:36:d7:c7:e4:
                    b0:35:54:0d:e6:20:fa:29:83:7b:6a:6d:f4:40:07:
                    4e:9c:87:13:6d:ee:04:77:a8:7a:61:36:44:fe:c7:
                    97:46:4b:26:7d:16:39:06:90:4f:12:ad:35:ff:84:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:88:2A:59:CF:4E:F8:19:F8:3F:F8:9B:09:47:31:7B:D6:E6:1E:4B
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323039383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:2098::/45

    Signature Algorithm: sha256WithRSAEncryption
         87:89:1c:c3:24:99:90:1f:8f:9a:e9:1d:01:46:f4:70:1f:92:
         27:fd:6a:ae:d5:60:63:1e:31:84:82:59:78:d2:e3:93:3b:0e:
         70:73:bf:85:dc:b3:6e:75:a6:e2:29:54:ad:5a:cc:0f:20:d8:
         4c:47:dd:32:84:14:7d:c3:59:c4:75:4d:ec:41:06:42:83:0d:
         3a:eb:4a:95:e6:41:e4:db:46:35:3a:3e:d7:5a:f2:a8:86:2b:
         1a:7d:e2:97:38:24:94:06:33:c0:e2:7b:77:43:b2:90:48:08:
         ed:88:54:a8:5f:dd:fd:11:a9:fe:a1:b3:95:20:96:81:d9:f4:
         2f:cc:1c:7e:ea:11:4d:51:a0:99:a6:57:68:92:97:19:e2:e5:
         84:52:71:6a:1e:31:4d:88:2f:bc:c6:bd:cc:10:d1:c8:52:49:
         2c:b5:ef:88:73:0c:da:5a:af:7e:d8:f8:60:59:5c:0f:33:32:
         f6:2e:61:d0:34:98:70:94:d8:cf:26:e0:b9:93:9b:02:4a:16:
         e2:41:4d:7c:35:f0:7a:15:08:17:1d:3a:05:4c:c5:66:a8:ee:
         06:87:08:70:21:6c:89:93:df:8e:8a:c9:bd:8b:2e:df:92:4a:
         89:86:49:a0:f9:d3:76:89:6e:32:74:3d:c8:a1:4a:bd:15:27:
         f2:12:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:09 2024 by rpki-client on console-fra.rpki-client.org