Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e203532383635.roa
File:                     323830343a386337633a383430303a3a2f33382d3338203d3e203532383635.roa (raw, json)
Hash identifier:          NLGt7XMUR3ERK++Wh6wYhdwOSxU1wSnmUlZyvoHuBZI=
Subject key identifier:   F7:CD:80:F8:10:F2:A4:05:5C:91:60:83:54:C3:5A:36:C2:F6:0E:6E
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       467AC88FD08759DC05861C53BF55D7AB3D67C47F
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e203532383635.roa
Signing time:             Thu 18 Apr 2024 18:01:19 +0000
ROA not before:           Thu 18 Apr 2024 17:56:19 +0000
ROA not after:            Thu 17 Apr 2025 18:01:19 +0000
asID:                     52865
IP address blocks:        2804:8c7c:8400::/38 maxlen: 38

Validation:               Failed, certificate revoked on Wed 08 May 2024 15:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7a:c8:8f:d0:87:59:dc:05:86:1c:53:bf:55:d7:ab:3d:67:c4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:56:19 2024 GMT
            Not After : Apr 17 18:01:19 2025 GMT
        Subject: CN=F7CD80F810F2A4055C91608354C35A36C2F60E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:9e:78:a8:f9:80:e4:06:9f:1e:d3:34:36:
                    a8:74:9e:77:b3:c0:e7:a4:b2:b1:3e:58:74:bc:38:
                    0d:1f:bb:40:61:ae:53:8a:f5:f0:e0:14:f2:6d:19:
                    0e:53:fc:45:7a:0e:19:e9:8e:c2:6b:d4:0d:bf:de:
                    24:8b:61:63:e6:8f:b1:11:2e:1d:84:a7:f6:40:cc:
                    07:ea:ca:85:28:29:f6:33:56:a8:ed:35:9d:47:be:
                    98:18:d6:51:4b:37:c1:c6:8d:69:01:ec:7c:26:ea:
                    af:97:21:42:00:87:90:b2:f4:ae:61:2a:e0:53:72:
                    08:36:2b:6e:06:04:c8:67:8b:84:7e:d2:2a:78:c6:
                    04:84:aa:66:56:e1:ac:3f:48:7a:5d:35:9c:dd:c3:
                    ba:83:7d:6c:eb:a4:d4:6d:c5:69:d1:fc:53:df:50:
                    79:2d:8c:9d:ed:9b:a4:f5:46:d3:1d:2e:e7:93:80:
                    52:f4:2f:fb:7a:83:b1:27:eb:32:45:b0:c1:9a:e5:
                    f5:60:5e:35:e4:2f:af:6d:4a:2f:e6:9a:ec:b1:93:
                    b7:81:42:1f:0d:2f:8f:40:d0:46:bb:61:f1:1a:fa:
                    58:fa:f8:7a:c2:da:b9:5f:af:83:a3:8a:82:61:e3:
                    ad:45:57:1e:a0:3d:7e:44:62:5f:89:4c:f2:b0:93:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:80:F8:10:F2:A4:05:5C:91:60:83:54:C3:5A:36:C2:F6:0E:6E
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a383430303a3a2f33382d3338203d3e203532383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:81:42:b0:d7:8c:14:ec:69:7f:35:d2:fa:a9:b0:33:59:
         0a:88:e1:b1:dc:9f:03:cf:a3:65:48:7c:df:c8:d9:f4:0c:9a:
         25:b4:ba:f7:bc:36:80:46:4f:44:fd:99:1c:d3:db:c8:0d:2d:
         45:1c:1f:7e:2a:40:08:a2:f4:1c:4e:9b:80:32:2f:a7:94:25:
         7e:79:90:70:f2:59:ca:47:6c:8b:b0:65:70:1b:b3:15:e8:30:
         c0:8c:25:f5:80:93:40:44:ba:77:87:17:26:aa:76:92:94:33:
         32:71:53:b9:33:2a:a3:be:c4:3e:66:48:13:e5:05:36:17:4c:
         db:35:97:85:d3:04:d8:7e:c2:2e:15:cb:5b:a5:eb:7b:a3:69:
         f0:9a:a4:74:68:0b:2e:79:ef:18:66:00:60:7e:08:6e:df:30:
         65:53:86:6e:56:2f:c1:00:a8:b8:33:f0:8f:cf:d6:88:2c:d7:
         93:51:54:24:5a:a8:cc:4c:07:95:f3:3b:7a:35:ea:8a:cd:9a:
         7f:bf:e7:b4:a1:13:57:ae:ab:a6:36:b0:24:4a:a2:fe:11:5d:
         0b:40:54:f2:ab:5a:c8:34:f5:24:4d:f7:bd:50:01:e2:fe:36:
         63:9d:4e:50:bf:76:29:55:4d:14:8d:36:d2:e1:20:70:c8:62:
         6d:1c:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org