Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323066303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323066303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          DY4RYKtTQ0vYVeS3tXbp17Q+0JZvRlaywOGdPQ+9drw=
Subject key identifier:   C4:42:A3:91:C1:02:CF:D4:BF:A3:DD:96:3D:A2:AA:C3:D5:80:D2:85
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       268806B7302287B71B1A2B3DF052490F3C22C341
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323066303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:28 +0000
ROA not before:           Thu 16 May 2024 11:33:28 +0000
ROA not after:            Thu 15 May 2025 11:38:28 +0000
asID:                     263338
IP address blocks:        2804:1494:20f0::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:88:06:b7:30:22:87:b7:1b:1a:2b:3d:f0:52:49:0f:3c:22:c3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:28 2024 GMT
            Not After : May 15 11:38:28 2025 GMT
        Subject: CN=C442A391C102CFD4BFA3DD963DA2AAC3D580D285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:77:1e:41:7b:d2:49:25:01:4b:ba:0e:37:
                    9b:79:4b:ca:46:51:7c:13:e2:aa:8f:c6:61:15:1a:
                    d4:e4:2b:33:9f:33:64:6e:37:e1:df:6e:59:5b:64:
                    dd:e2:d2:5e:fc:ff:c4:2d:b0:74:c0:a6:6b:81:e4:
                    e7:60:e4:69:fa:7a:9b:bd:08:b8:2d:4f:68:af:81:
                    8c:84:c3:96:a2:f6:e9:2a:cc:9b:49:47:7c:28:eb:
                    34:b8:9b:c8:93:84:85:fd:fe:07:e0:f0:3c:96:bb:
                    c1:85:28:f1:b4:b0:8d:b2:32:5b:a7:f6:cc:0e:f0:
                    66:86:79:85:63:73:a9:fc:ef:79:e5:e4:b7:e8:1f:
                    aa:70:3f:33:70:57:77:66:d3:65:9e:af:dc:20:89:
                    83:cd:a4:b9:da:e5:ab:ab:e7:7f:32:dd:68:12:2d:
                    29:97:3a:b9:93:d8:ae:b7:1d:61:50:3e:5b:33:33:
                    e1:91:be:69:f1:5d:15:8d:04:7c:0b:4a:29:44:5d:
                    c2:e5:43:cb:69:39:2c:1e:c2:30:24:2f:1e:8f:2c:
                    d1:8e:ab:97:fe:92:be:ff:3f:8c:6d:ad:39:0b:31:
                    c4:79:b3:3e:9e:64:f9:85:29:15:d1:6a:17:f6:e2:
                    7d:0f:97:22:0c:c9:82:f8:b5:82:89:c2:88:da:ec:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:A3:91:C1:02:CF:D4:BF:A3:DD:96:3D:A2:AA:C3:D5:80:D2:85
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323066303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:20f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         9a:10:2c:1c:5b:5c:98:99:66:30:53:de:47:59:e9:6e:61:ca:
         20:11:d6:3c:51:c3:e7:49:67:74:1d:e5:00:b8:30:06:89:f0:
         26:ee:86:f4:4c:62:2d:1f:c4:a2:33:53:9f:30:bb:48:49:ec:
         76:19:c4:ea:32:20:4f:07:03:3b:a2:f0:45:d9:fe:75:b7:20:
         c1:74:26:9a:79:d4:c0:2a:06:9a:a7:9c:32:b5:57:91:46:c3:
         99:4e:f2:b7:ec:1c:43:a4:b0:b8:7b:0e:66:5b:e9:87:44:ab:
         1d:53:f9:60:7d:7f:e3:e2:74:d7:f3:39:19:91:3e:ee:fe:0d:
         8c:2c:f5:f5:3b:cc:07:dd:dc:5f:a2:e1:bd:0d:7d:ec:9d:cb:
         ed:fb:9f:0e:8e:42:30:62:e1:fc:24:6a:19:ee:d4:79:b1:c1:
         3a:bd:ca:29:71:72:b0:73:4f:50:23:1f:8f:a7:40:08:0b:62:
         0a:0d:dc:16:0f:d5:ce:0c:cc:d1:6c:0f:37:f3:f1:79:5f:aa:
         cc:a3:77:0c:10:1f:5d:08:df:7c:20:f9:90:f3:55:2d:bf:20:
         7e:dd:3b:db:92:b1:1a:a0:7f:3a:80:0d:13:37:c5:c7:73:1f:
         0e:a9:1f:27:47:29:3f:75:f0:3b:0f:37:e3:54:32:03:34:d6:
         c4:b3:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:09 2024 by rpki-client on console-fra.rpki-client.org