Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6466383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6466383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          97DntnKvzpBn7awFLi/52AkhV14N+mXMvWEXxOmZtWA=
Subject key identifier:   84:48:C9:C4:0B:F8:1D:A5:75:C1:41:9D:8D:AD:60:0B:69:71:11:15
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       352A7ABD0021227EADAA75383F85AE014992A297
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6466383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:27 +0000
ROA not before:           Thu 16 May 2024 11:33:27 +0000
ROA not after:            Thu 15 May 2025 11:38:27 +0000
asID:                     263338
IP address blocks:        2804:1494:df8::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2a:7a:bd:00:21:22:7e:ad:aa:75:38:3f:85:ae:01:49:92:a2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:27 2024 GMT
            Not After : May 15 11:38:27 2025 GMT
        Subject: CN=8448C9C40BF81DA575C1419D8DAD600B69711115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7e:04:f0:3d:13:d2:9b:8c:9a:77:dc:0b:d2:
                    0c:b5:79:a6:a5:bf:8d:6b:e9:04:48:df:9d:b4:2a:
                    09:c2:9e:cd:0d:28:a0:c3:db:64:32:97:9f:8a:b7:
                    d6:12:ec:41:1b:4d:b2:98:22:26:a9:71:26:12:8b:
                    26:68:81:6f:ee:f3:fa:df:fb:10:42:bc:75:11:ae:
                    78:ee:de:8a:83:cb:1a:0f:7f:c6:27:97:9e:eb:52:
                    f4:99:2e:e2:bb:a9:09:f6:0e:c5:4d:47:5a:3a:ee:
                    e1:2b:2a:e0:c5:f9:f9:6d:62:87:e1:c4:a2:9e:42:
                    8a:64:1a:3c:a9:41:ae:0c:11:66:a7:be:86:39:9c:
                    50:b7:94:dd:0e:b7:32:35:16:0c:91:c1:d6:e3:78:
                    7e:d0:dd:22:f9:c1:52:52:eb:c8:be:ee:a0:2f:bc:
                    34:49:0f:37:5d:bd:76:dd:a8:55:57:a3:8e:ec:96:
                    12:45:53:50:5b:56:18:c9:b9:d9:03:c8:10:fa:c8:
                    33:27:b9:36:34:dd:ad:13:c6:a3:ad:fa:c1:48:a5:
                    8a:31:91:38:6f:f8:59:cd:cc:f4:ba:3a:96:f9:e0:
                    56:3e:26:48:1b:99:85:d3:f2:03:8d:1b:da:66:72:
                    b3:40:93:45:9e:c0:94:d8:97:e1:aa:27:23:2a:8c:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:48:C9:C4:0B:F8:1D:A5:75:C1:41:9D:8D:AD:60:0B:69:71:11:15
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6466383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:df8::/45

    Signature Algorithm: sha256WithRSAEncryption
         76:86:a1:c1:8b:ce:f9:bc:aa:0d:2d:43:c0:54:3b:29:34:d6:
         d8:91:12:fa:d5:20:d4:7c:09:4e:f4:d3:0a:b0:d4:73:1b:f3:
         12:35:31:d7:91:96:0a:a6:8b:5a:51:25:f7:d0:34:06:e8:ee:
         c9:0b:28:95:c5:0c:b5:e4:d4:95:c9:12:97:e3:63:11:d0:00:
         c8:41:70:e8:63:07:ef:2b:74:a8:0f:d4:ed:13:6e:77:dd:65:
         9c:89:05:62:92:26:b4:52:51:ae:32:6e:2e:5c:95:9e:a6:b3:
         60:25:a4:10:eb:6e:b7:ed:a3:26:3d:64:76:7a:c5:be:f0:be:
         ca:23:53:02:10:e1:88:8a:5e:b9:e8:a3:4c:58:2d:0b:e9:5a:
         58:83:2f:44:85:7f:cb:99:1f:37:d2:65:23:38:cf:32:82:26:
         84:89:d6:b7:0b:3a:7c:e1:bc:6f:56:7e:1f:5f:22:24:d1:94:
         40:9f:23:48:9a:21:30:d7:30:c6:21:f8:76:37:f6:cb:90:52:
         ac:4f:5b:5f:2c:60:c9:8d:b4:72:f2:82:31:86:e5:9a:a8:42:
         e7:37:6f:c8:fe:ab:94:ad:18:49:95:5b:40:80:2f:8c:df:fc:
         f1:01:2e:ee:4a:50:2f:a8:e0:9c:6d:2b:0f:2f:a7:c9:fa:81:
         37:e6:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:09 2024 by rpki-client on console-fra.rpki-client.org