Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323064383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323064383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          7rFHTMxisncGdzdkxNuU5C6CkJVDCpxsqaR3kiRleQQ=
Subject key identifier:   E6:8F:0C:46:F3:1D:FB:87:73:37:3C:EA:58:4D:ED:7A:D5:A6:5A:13
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       1D3116E23A694366CF4E510C2016D6FB359BF3EC
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323064383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:28 +0000
ROA not before:           Thu 16 May 2024 11:33:28 +0000
ROA not after:            Thu 15 May 2025 11:38:28 +0000
asID:                     263338
IP address blocks:        2804:1494:20d8::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:31:16:e2:3a:69:43:66:cf:4e:51:0c:20:16:d6:fb:35:9b:f3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:28 2024 GMT
            Not After : May 15 11:38:28 2025 GMT
        Subject: CN=E68F0C46F31DFB8773373CEA584DED7AD5A65A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:dd:c2:13:c0:67:d8:f6:58:08:52:ea:19:
                    b1:7b:1f:62:64:31:85:e6:9b:44:cc:37:21:68:01:
                    8e:99:14:7c:61:8e:d2:be:a7:ee:6f:72:4e:4d:24:
                    03:e1:a8:f3:d9:5c:71:2d:e4:c5:2c:ae:36:4a:29:
                    e5:54:79:a3:95:1d:38:88:5c:fd:e9:d8:c6:e9:08:
                    7f:24:1a:0c:6f:3f:b7:0d:7a:35:ac:73:15:ca:c6:
                    fa:c1:a1:9b:7c:c2:c0:19:10:19:65:2c:40:5c:62:
                    87:89:b3:0d:4e:06:47:c1:cf:7e:c6:1b:89:a2:43:
                    98:0d:e0:28:b7:a0:59:21:36:c1:14:22:bf:9d:b7:
                    27:d3:b2:b7:c5:1e:a3:ac:89:1b:62:01:db:99:d9:
                    42:01:17:4f:4e:51:f3:df:c3:a5:f1:d9:54:8d:1e:
                    5c:03:92:0b:bf:61:b6:fc:41:e6:dc:54:0b:e2:b4:
                    03:56:d1:05:13:20:96:95:be:ad:3c:a1:1e:c0:6d:
                    ea:84:59:93:a5:be:6c:35:cf:f0:29:32:93:c7:e5:
                    f9:26:d3:bc:96:e7:28:dd:53:80:56:49:2d:3d:ab:
                    a5:d0:01:be:81:35:1c:97:20:f2:34:4a:f2:9c:e0:
                    0d:92:18:6f:b5:a9:bd:42:c6:e9:da:c5:cb:bc:af:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8F:0C:46:F3:1D:FB:87:73:37:3C:EA:58:4D:ED:7A:D5:A6:5A:13
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323064383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:20d8::/45

    Signature Algorithm: sha256WithRSAEncryption
         78:bc:43:60:89:39:e6:70:1f:2c:50:d9:a7:36:a3:7c:7f:94:
         e9:bd:36:4c:93:c6:6b:78:4b:30:d3:83:1e:54:7f:2e:c0:9a:
         83:22:fe:9f:6a:0c:9d:ae:43:0e:56:f1:69:32:dc:ae:85:36:
         c0:a2:59:0c:c7:fb:bd:e8:94:59:bf:70:90:0a:27:c3:ea:09:
         b9:62:c3:f8:cd:b0:73:8f:78:99:09:7a:ca:75:25:b1:ed:de:
         c6:a7:df:5c:d0:24:2c:8b:8f:11:cf:19:1a:ea:1d:02:e7:fb:
         23:e2:88:50:42:ab:fd:af:86:c7:fb:b5:c3:3a:c9:09:e7:7a:
         93:f5:6c:3f:30:17:bb:ba:62:66:2b:58:5b:ed:c5:fa:17:ec:
         ab:e9:68:5b:d1:b8:50:a6:06:d0:09:2b:a8:09:fa:f6:4a:02:
         61:39:78:56:6d:37:aa:b7:4f:97:bd:99:05:0e:92:a7:0a:f9:
         48:92:9f:25:8a:4e:99:0b:8f:07:71:f5:a0:88:4f:f7:00:b9:
         73:fc:29:8c:a0:56:10:91:4c:54:f8:88:73:2e:b0:fa:bc:d8:
         ae:c5:01:7c:cb:c5:f7:79:03:05:bc:65:cb:e8:b8:a8:db:05:
         5a:10:57:df:08:17:8c:5d:81:d7:56:8a:7e:4f:48:1e:19:8f:
         b8:46:d3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:09 2024 by rpki-client on console-fra.rpki-client.org