Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa
File:                     323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa (raw, json)
Hash identifier:          76iMps0gWh/Df0t57b/9V1ABlpQ5nKRTuXv6YtCySsc=
Subject key identifier:   7A:CE:71:69:60:2C:25:24:2C:B2:60:89:93:DD:BA:75:EB:8B:55:A0
Certificate issuer:       /CN=C7CDE00B8FAF822929EE8184DED9A4F02250D9CB
Certificate serial:       2526B8D28F2379A3A0AA8790C56C50BD01A3A589
Authority key identifier: C7:CD:E0:0B:8F:AF:82:29:29:EE:81:84:DE:D9:A4:F0:22:50:D9:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa
Signing time:             Fri 05 Apr 2024 04:35:40 +0000
ROA not before:           Fri 05 Apr 2024 04:30:40 +0000
ROA not after:            Fri 04 Apr 2025 04:35:40 +0000
asID:                     264595
IP address blocks:        2804:2228:7f00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 23:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:26:b8:d2:8f:23:79:a3:a0:aa:87:90:c5:6c:50:bd:01:a3:a5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CDE00B8FAF822929EE8184DED9A4F02250D9CB
        Validity
            Not Before: Apr  5 04:30:40 2024 GMT
            Not After : Apr  4 04:35:40 2025 GMT
        Subject: CN=7ACE7169602C25242CB2608993DDBA75EB8B55A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:f8:66:90:cd:89:ab:14:c1:2a:cf:5c:e7:
                    8a:77:4b:54:c3:a5:a7:e9:4e:c2:21:96:6c:e5:61:
                    32:28:30:9c:14:d2:d5:1a:fc:68:b1:1a:b8:71:ef:
                    07:db:32:70:fd:4b:6c:95:ad:d3:0b:10:e5:1d:62:
                    d3:e9:7d:51:05:8d:9b:a6:d1:ac:b2:9d:71:fa:92:
                    b8:3f:93:bd:e9:f1:27:a2:f6:f4:f1:35:e9:4d:5a:
                    d9:bb:96:29:dc:3e:47:cf:5b:60:78:dd:ed:21:8c:
                    e9:78:9b:0d:a3:cf:92:96:dd:3d:fa:72:5b:6a:88:
                    a7:85:50:94:75:9c:36:ac:c7:c7:37:05:c1:87:ac:
                    b5:b4:d3:ce:6c:bd:17:0f:2c:e2:d6:9e:ab:b0:4b:
                    7c:4e:46:9e:64:be:88:7a:3c:a8:0e:93:35:11:dd:
                    bf:e2:8d:0a:1f:38:20:f4:7e:66:37:4f:12:63:30:
                    76:2b:58:40:60:c4:f1:34:f3:34:12:b4:3f:31:10:
                    e7:96:99:36:14:11:5b:c0:ec:d3:09:4a:6b:b2:cc:
                    b8:17:25:87:0d:82:6b:d6:ed:a3:cc:0a:99:b9:5a:
                    5a:13:bd:0f:96:26:88:42:d4:0d:e7:d5:d4:ab:82:
                    06:48:db:66:7b:67:db:ff:0a:de:21:c0:58:0d:d3:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CE:71:69:60:2C:25:24:2C:B2:60:89:93:DD:BA:75:EB:8B:55:A0
            X509v3 Authority Key Identifier:
                keyid:C7:CD:E0:0B:8F:AF:82:29:29:EE:81:84:DE:D9:A4:F0:22:50:D9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:66:ca:0c:77:c9:63:0e:69:7c:49:ec:01:f5:f8:e3:2c:
         37:b1:f9:94:78:de:1c:5b:da:f6:65:8b:57:4b:c0:ed:88:a4:
         1e:d6:9e:b9:7e:fb:05:10:d2:11:56:33:2c:94:0d:1d:d1:d5:
         83:56:aa:0c:a0:3f:50:ad:2e:13:a5:3e:86:5c:4d:54:a3:1a:
         c8:d2:79:5b:da:ae:94:7b:55:d6:a8:04:b5:c7:41:bc:c8:e1:
         5b:0f:99:c1:e4:b3:fe:17:4d:bc:1d:0e:d4:04:23:d9:7d:cb:
         ff:41:5e:e5:b1:38:a8:da:e6:e7:b9:da:91:19:78:26:87:4d:
         8f:33:9f:3e:2c:e1:89:65:fa:6d:88:fa:df:ff:84:20:2a:1c:
         0d:21:67:f3:39:82:e2:fd:cc:c5:8c:07:a0:ce:fd:ee:e4:49:
         60:26:fc:8a:2b:26:44:6f:45:12:b0:f8:1c:9e:83:0f:2e:26:
         02:fd:4d:d0:fb:31:d3:ff:b4:3d:a1:25:9f:f2:57:17:07:b7:
         03:d5:64:5e:57:27:60:0e:b8:4c:39:0f:40:15:09:bb:6d:dd:
         1d:30:7e:89:48:fb:27:08:9d:32:1e:8b:90:ea:56:f2:4d:d1:
         5a:3a:35:4e:42:b3:51:7b:34:11:50:5d:2a:5f:f6:4c:91:0c:
         98:93:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 23:59:26 2024 by rpki-client on console-fra.rpki-client.org