Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6465383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6465383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          KYY00n402m/2X9KeLPDWCiRciKQVLF4X2UckaApLc18=
Subject key identifier:   72:EA:80:15:03:EC:F5:9E:9E:33:0F:A9:5E:8D:BA:86:19:C1:7C:A5
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       434FDB731FCB3F4AFC2202682F27FF9983D62764
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6465383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:21 +0000
ROA not before:           Thu 16 May 2024 11:33:21 +0000
ROA not after:            Thu 15 May 2025 11:38:21 +0000
asID:                     263338
IP address blocks:        2804:1494:de8::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:db:73:1f:cb:3f:4a:fc:22:02:68:2f:27:ff:99:83:d6:27:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:21 2024 GMT
            Not After : May 15 11:38:21 2025 GMT
        Subject: CN=72EA801503ECF59E9E330FA95E8DBA8619C17CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:bc:d8:49:7d:b9:4e:c1:39:ae:38:47:d0:
                    d7:5f:e6:b1:ab:0d:8e:54:3a:22:38:2f:27:9a:1b:
                    8d:3d:67:a5:3d:d9:5a:27:74:3a:64:aa:cb:80:2a:
                    30:29:28:2d:a6:3f:f0:a4:b0:e6:b2:34:25:1d:33:
                    dd:2b:e3:36:a8:d9:38:64:f5:4c:0d:c3:30:f4:7b:
                    53:07:33:55:cc:2c:73:2b:38:71:9b:eb:fd:1b:35:
                    82:f9:0d:e4:fa:91:73:a6:4d:da:2f:0e:98:4a:ae:
                    87:0e:6f:af:9e:31:83:91:18:ab:f4:4a:46:54:2e:
                    94:43:cf:54:7a:2f:b0:04:85:09:73:a5:d7:31:37:
                    a7:21:d8:09:15:dc:a8:b6:e9:e7:26:b8:f6:d7:d6:
                    d0:1b:74:4a:a9:b4:13:d0:d8:e1:69:9b:05:dd:aa:
                    e6:db:32:73:9d:57:cf:6a:15:f9:c0:f9:fd:92:3b:
                    96:2d:1a:ae:12:9a:e4:79:44:26:08:23:10:c1:68:
                    fd:32:ee:35:21:7d:8e:ed:05:14:f3:7f:4c:a4:fd:
                    23:24:0d:62:d2:06:8c:d1:ee:c6:f3:a6:2b:2d:5d:
                    08:9b:d9:3a:cd:40:71:69:a3:bd:17:00:f6:95:6f:
                    dd:77:f6:19:12:27:55:eb:d7:73:c6:cc:b8:55:6a:
                    5a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EA:80:15:03:EC:F5:9E:9E:33:0F:A9:5E:8D:BA:86:19:C1:7C:A5
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6465383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:de8::/45

    Signature Algorithm: sha256WithRSAEncryption
         54:5f:65:0a:05:74:72:34:b2:39:bb:58:b0:51:10:c8:05:ef:
         8e:6d:af:f1:3a:90:cc:dd:d3:1b:80:dc:55:6f:6d:4c:06:eb:
         97:0d:46:72:63:a6:32:94:8d:36:ff:82:48:4b:22:8f:60:8e:
         18:ea:a7:e2:e4:76:af:4f:cb:ef:91:fa:f8:58:94:eb:e6:4f:
         1a:fe:b1:1e:e1:2f:54:85:2d:1c:2a:8d:23:e7:55:17:11:0a:
         50:14:01:01:8f:3a:0f:2e:69:c7:48:f2:76:a0:21:e9:77:6e:
         7c:de:c9:d5:f6:5b:04:02:ae:c3:08:2a:5b:0e:43:fb:28:ab:
         e1:2e:55:20:81:83:7a:3f:2f:88:42:f9:ae:d1:b3:82:f1:a7:
         7f:65:7a:64:70:1e:22:24:f9:17:e3:14:44:9c:1d:94:e0:3a:
         4b:72:a7:39:a3:6b:02:9b:b7:c6:0a:5a:84:36:8d:08:d5:01:
         f9:17:90:8d:8c:76:27:a8:6a:74:bf:ef:26:97:70:aa:73:5b:
         43:07:53:c7:b2:9e:d8:34:53:ed:04:dc:26:a2:90:97:73:99:
         bc:06:03:3e:ce:e0:65:3c:51:16:1e:a8:90:20:29:10:af:8e:
         9b:49:07:f5:54:c3:b2:7a:b2:5f:89:c9:e1:3e:2e:98:8a:c6:
         b7:b5:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 22:34:21 2024 by rpki-client on console-ams.rpki-client.org