Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323061303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323061303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          kF3YziFfobuB02HFdfiTuGeKbXGGFUII6FOZY5YRPX8=
Subject key identifier:   57:92:97:F2:F9:F4:0A:2D:A8:73:B6:82:C4:3F:A4:FD:DB:4B:4B:03
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       686FFAF8097A5D9110D19AF6CC1B8ED541A6F37A
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323061303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:27 +0000
ROA not before:           Thu 16 May 2024 11:33:27 +0000
ROA not after:            Thu 15 May 2025 11:38:27 +0000
asID:                     263338
IP address blocks:        2804:1494:20a0::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6f:fa:f8:09:7a:5d:91:10:d1:9a:f6:cc:1b:8e:d5:41:a6:f3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:27 2024 GMT
            Not After : May 15 11:38:27 2025 GMT
        Subject: CN=579297F2F9F40A2DA873B682C43FA4FDDB4B4B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9d:c2:d4:22:a2:0e:24:a8:bd:1a:46:c6:a7:
                    ac:d2:01:dd:a6:d5:7f:a5:41:e7:e7:09:74:20:90:
                    ba:1d:3f:72:f8:45:82:bf:eb:e7:28:c3:98:b0:b3:
                    bc:b3:c3:40:d6:eb:fe:85:de:4e:c4:c1:e2:d4:7a:
                    74:6f:0d:f7:8c:78:11:b5:04:0b:c6:3f:89:dd:b2:
                    b6:6d:a5:67:34:7b:47:7c:c7:f1:15:d9:81:fb:43:
                    aa:fe:0c:5f:ee:8d:43:8b:6c:d0:a4:32:65:16:7b:
                    4c:63:6d:4a:a5:0e:73:69:01:e5:4c:68:03:95:63:
                    37:19:9e:1a:da:7b:f1:33:e4:6a:bd:45:98:63:31:
                    15:ec:54:a9:63:e2:8c:17:c4:43:26:5e:08:24:eb:
                    8a:1a:3c:12:a9:15:ec:2f:5e:47:31:65:bc:64:c8:
                    e9:24:ad:7e:a8:61:a0:78:ce:fd:04:07:8a:07:5c:
                    c2:83:46:b0:d7:7e:c0:73:55:5c:e7:c3:8a:88:83:
                    9d:71:6d:16:a4:a5:25:c3:e4:00:3a:50:0e:a4:11:
                    7c:9e:73:29:ed:34:f2:e0:7e:cc:ba:dd:f9:e6:88:
                    f5:b8:7a:c0:77:80:ad:32:5c:56:d3:03:11:4a:8d:
                    1a:a1:4e:86:4d:ea:f5:59:ba:c9:3a:14:43:a0:48:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:92:97:F2:F9:F4:0A:2D:A8:73:B6:82:C4:3F:A4:FD:DB:4B:4B:03
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323061303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:20a0::/45

    Signature Algorithm: sha256WithRSAEncryption
         43:dc:49:b4:53:5f:3a:aa:9b:20:44:42:19:e1:23:f4:b8:25:
         92:8f:89:13:24:71:6c:ea:f2:fc:63:d8:05:92:40:00:c3:46:
         0a:2f:e5:d1:1b:a3:5f:65:87:cd:20:fe:5b:db:93:e0:82:ef:
         a3:42:70:c4:0a:c7:97:bb:c0:78:b9:8a:37:f3:1c:ab:d4:5a:
         76:2e:da:ae:0a:4b:00:25:af:3e:1b:77:8f:f4:0b:a0:c5:bf:
         97:4a:e3:57:9b:fa:c8:96:ca:a4:86:5f:e9:45:fe:14:46:5a:
         ad:f0:86:3c:04:38:9e:de:e7:57:68:d2:34:4e:2f:d1:e8:fe:
         45:eb:4c:a1:63:7e:e2:75:8a:b0:a4:ed:0e:54:4d:a2:a4:76:
         3d:ae:0e:d2:83:85:f3:76:d2:1a:56:3d:77:f1:68:3d:a2:19:
         4c:1a:d0:be:d9:1b:bb:2c:a8:26:0e:4d:f2:cc:15:41:5e:84:
         22:c1:dc:40:a8:1c:92:14:96:af:dc:f7:68:76:b3:e1:37:53:
         24:0e:3f:fa:f8:bc:38:db:81:6d:09:a2:fc:d1:d7:0b:24:81:
         2f:86:19:af:a4:30:a1:02:dd:7c:a2:46:d9:4f:d9:7b:66:d5:
         be:03:df:97:f7:25:30:b5:ba:4e:85:a3:f7:8a:27:47:fd:db:
         97:8f:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:09 2024 by rpki-client on console-fra.rpki-client.org