Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33362d3336203d3e20323633393830.roa
File:                     323830343a323863383a3a2f33362d3336203d3e20323633393830.roa (raw, json)
Hash identifier:          5t1xsYSMJVVlJ2XHe9CjxbBHg0p+GNhWal34cllaWJg=
Subject key identifier:   A4:BA:89:56:AA:E8:8E:BD:40:06:0E:F4:43:84:6B:4D:D6:73:42:7A
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       2BC4D6319BB5D49DCEEDB7F0C9BC033E9B917C79
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33362d3336203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:56:54 +0000
ROA not before:           Tue 23 Apr 2024 12:51:54 +0000
ROA not after:            Tue 22 Apr 2025 12:56:54 +0000
asID:                     263980
IP address blocks:        2804:28c8::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c4:d6:31:9b:b5:d4:9d:ce:ed:b7:f0:c9:bc:03:3e:9b:91:7c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:51:54 2024 GMT
            Not After : Apr 22 12:56:54 2025 GMT
        Subject: CN=A4BA8956AAE88EBD40060EF443846B4DD673427A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:cf:41:67:bf:05:0e:52:dc:6a:25:fe:73:
                    e7:73:d7:52:d5:d2:2c:67:fe:c6:0e:d5:ec:7c:5c:
                    23:a6:2e:f0:f2:ef:e0:bd:83:dd:7a:02:bf:67:f7:
                    c9:bf:c0:f9:91:bb:d8:87:7e:90:b8:6f:cc:cb:e5:
                    87:cd:c0:82:2d:99:8a:31:18:8d:54:a1:2d:0f:91:
                    34:23:93:80:3d:51:0c:d4:3f:83:f5:ff:de:05:d0:
                    be:29:ec:a1:a1:eb:48:8c:6d:99:5a:46:b0:8b:fe:
                    20:0e:fc:9c:ed:8c:dd:f1:e2:2a:7f:3a:c5:52:ea:
                    e8:9f:87:c3:e0:9c:17:a2:89:1d:fb:c0:94:51:d8:
                    a3:b3:ea:d0:a2:5e:cf:db:b7:c1:af:fd:0c:19:ae:
                    4a:88:02:c5:2c:7e:40:75:71:06:a6:64:d2:38:65:
                    f0:59:c3:6e:b5:e8:95:c2:f1:3a:29:22:1c:11:a0:
                    8e:9d:a1:6f:c9:02:6c:69:66:84:cb:91:bb:f4:73:
                    8c:86:78:0a:74:e6:a9:7a:65:3b:46:16:82:b8:a9:
                    b3:12:e5:aa:4e:4e:1a:72:d6:98:14:a4:a8:c7:49:
                    a6:b9:fc:dd:5f:58:15:36:4d:1a:6a:eb:c5:2b:df:
                    ca:67:c7:80:5f:ee:b7:a6:d8:39:b0:6a:d0:d9:77:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BA:89:56:AA:E8:8E:BD:40:06:0E:F4:43:84:6B:4D:D6:73:42:7A
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33362d3336203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:75:86:64:b6:49:ce:74:2d:cd:4b:d1:e7:29:b5:9a:f6:eb:
         19:19:50:22:85:e9:71:00:dc:28:e4:3b:ad:b8:28:5a:14:4f:
         0d:bf:8f:7a:3c:e4:57:62:8c:4e:67:d6:8e:7a:63:96:41:f7:
         64:7c:5f:b2:cf:b6:69:96:d1:12:e9:71:d8:77:10:4c:81:bf:
         72:16:12:fd:8e:2e:44:58:18:ea:ec:ff:5d:03:05:21:f3:32:
         a4:b5:a1:5a:43:9c:a2:d6:88:4d:6c:44:c8:22:2f:cc:57:ba:
         32:1d:76:bb:21:41:65:a5:91:b0:aa:3c:2c:f0:76:05:73:5b:
         9f:46:e5:2d:b5:bb:57:18:26:a8:7d:3d:eb:f0:3b:18:2b:39:
         48:c5:62:17:3e:51:48:7f:5a:8e:75:94:ad:0f:2d:3f:2e:10:
         b8:bd:02:dc:b3:70:f7:91:91:f5:b6:5d:f6:6b:d8:99:3a:73:
         48:35:47:1f:3d:9c:b8:d2:23:4f:83:e3:fa:0c:0d:73:00:11:
         e2:29:64:08:14:39:ca:35:1a:1e:89:79:91:56:5d:8c:81:bf:
         12:90:32:4c:8b:ca:3e:5d:c2:72:55:78:33:5d:5e:db:c2:dd:
         7e:b9:ed:10:94:39:7a:ba:17:cf:bc:e8:3b:5a:7e:40:e8:3a:
         81:05:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:18 2024 by rpki-client on console.sobornost.net