Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323063303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323063303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          mcnnyA3KZ1oEh6secHffTVKgpbgTNNzXHh6tCgfnZuI=
Subject key identifier:   80:64:95:AE:FD:F2:9E:D9:65:F0:E9:B6:CD:71:C7:E3:25:F2:9F:F6
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       67BA9A9C39BE06CC917152A0FC1DFDACF08662D3
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323063303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:26 +0000
ROA not before:           Thu 16 May 2024 11:33:26 +0000
ROA not after:            Thu 15 May 2025 11:38:26 +0000
asID:                     263338
IP address blocks:        2804:1494:20c0::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ba:9a:9c:39:be:06:cc:91:71:52:a0:fc:1d:fd:ac:f0:86:62:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:26 2024 GMT
            Not After : May 15 11:38:26 2025 GMT
        Subject: CN=806495AEFDF29ED965F0E9B6CD71C7E325F29FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ef:f0:a1:6c:40:24:b7:73:7d:67:2c:c2:ca:
                    18:77:b8:cc:d1:20:b5:49:30:41:da:d1:d2:c3:08:
                    ca:59:74:c7:df:cd:59:96:6c:fd:be:80:45:71:5d:
                    25:85:85:ea:2a:de:4b:c5:ee:70:74:b3:fb:90:5b:
                    84:f3:07:01:18:a9:f4:8a:4d:04:5c:44:c4:bf:4c:
                    26:b1:e2:ab:95:80:74:e6:99:e2:70:fb:f1:c3:d4:
                    b7:5b:a8:8b:c4:6b:1a:0e:91:1c:12:8c:54:08:b4:
                    af:de:e8:13:98:8c:66:15:cb:75:56:33:d0:3b:d5:
                    36:b0:71:90:5e:99:3b:45:03:4a:ad:79:40:54:76:
                    2e:d8:22:f7:20:ac:c5:6e:1a:6b:ef:dc:99:d1:9a:
                    9c:eb:7f:54:72:b5:f0:8e:7b:c6:5d:c9:ad:3a:02:
                    86:2d:d7:f9:c9:80:55:2e:8e:ec:a2:00:85:4b:d7:
                    cb:06:2f:7f:a7:55:fa:3a:bd:ca:01:96:a8:03:c8:
                    4e:ac:94:3c:62:c1:21:70:05:aa:6f:43:6f:3c:63:
                    4c:03:d7:5a:92:49:82:20:6d:04:e4:6d:ce:34:2f:
                    46:ff:60:fa:c9:97:2f:a0:51:cd:86:22:90:b7:e8:
                    97:08:66:e0:46:50:de:67:0e:d9:80:b9:77:0d:81:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:95:AE:FD:F2:9E:D9:65:F0:E9:B6:CD:71:C7:E3:25:F2:9F:F6
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323063303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:20c0::/45

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:ee:c0:ee:6f:07:4c:53:70:0d:06:be:1c:5a:21:6c:31:
         d6:7e:7e:03:7f:a4:1d:c3:59:47:31:3e:4e:ad:3f:57:df:3c:
         28:85:94:c7:2d:52:62:66:35:5e:86:14:83:27:1a:48:a4:b9:
         f9:66:91:42:c0:f9:e4:f1:0d:0f:34:15:2a:47:98:b2:61:b6:
         22:5b:56:f9:77:c3:62:08:5c:c0:c4:a4:39:07:38:0d:45:5c:
         22:70:35:86:54:db:0a:04:da:30:a3:f5:7f:4a:55:5d:90:ae:
         91:90:82:f1:ea:de:93:c6:70:4b:f0:49:7c:71:87:1b:66:98:
         42:4f:db:2e:0a:c4:c2:ba:ee:ce:f2:66:67:4e:a0:c5:73:a0:
         23:59:00:d5:24:0c:51:1c:ab:03:ed:dd:d0:f2:74:63:db:4c:
         cf:ee:5b:bc:5f:42:29:83:fe:df:1f:29:93:c5:88:46:d8:dd:
         99:a7:0f:d6:28:71:85:fc:3d:1f:a5:4a:a9:da:9c:00:be:22:
         e5:1e:20:46:1e:46:68:b2:14:ce:1c:49:83:a1:13:94:18:2c:
         ed:03:f9:c8:04:50:16:d1:21:4b:83:65:53:16:73:b4:ec:88:
         3b:7e:c4:a1:f1:c3:10:9d:6c:83:a5:11:3d:63:93:b5:f4:3f:
         8a:07:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 22:34:21 2024 by rpki-client on console-ams.rpki-client.org