Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a383030303a3a2f33342d3334203d3e20323639343333.roa
File:                     323830343a363438383a383030303a3a2f33342d3334203d3e20323639343333.roa (raw, json)
Hash identifier:          r9U9S5liLhN1LRW6tIl/J9SGhOlzs/EQ/24wsgGMIwo=
Subject key identifier:   91:2D:6C:1C:D4:E3:7F:01:F6:C4:EB:23:8C:AD:95:0D:9C:64:BD:CC
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       6D33A19EC071980E3219C04645C766CBC94AB58A
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a383030303a3a2f33342d3334203d3e20323639343333.roa
Signing time:             Thu 04 Apr 2024 23:51:22 +0000
ROA not before:           Thu 04 Apr 2024 23:46:22 +0000
ROA not after:            Thu 03 Apr 2025 23:51:22 +0000
asID:                     269433
IP address blocks:        2804:6488:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Fri 22 Nov 2024 12:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:33:a1:9e:c0:71:98:0e:32:19:c0:46:45:c7:66:cb:c9:4a:b5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Apr  4 23:46:22 2024 GMT
            Not After : Apr  3 23:51:22 2025 GMT
        Subject: CN=912D6C1CD4E37F01F6C4EB238CAD950D9C64BDCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:10:c5:ba:c8:f1:db:9f:7d:0f:94:65:b1:6d:
                    10:e5:e3:61:77:b7:54:f7:06:31:ef:46:9d:ab:77:
                    d2:29:43:cc:0e:ff:56:b7:a3:53:cb:57:51:09:77:
                    d5:a4:99:66:da:d2:6b:2f:96:a7:f5:d2:56:ba:c2:
                    00:c9:8f:c2:20:32:b3:8c:9e:6d:d1:e2:ea:d3:22:
                    fb:3b:0f:0e:2b:33:7b:14:58:b8:c3:db:8b:8e:11:
                    16:8f:13:75:33:2b:23:61:1f:41:c7:0a:bd:1f:75:
                    e1:57:e5:5a:f0:6c:a0:29:16:e7:ab:bf:62:da:22:
                    ad:b4:0b:71:3e:02:50:3f:d4:bb:32:92:64:c1:9b:
                    1e:38:ff:75:84:e5:54:21:dd:a7:0c:4d:91:e3:fe:
                    cb:82:c8:5a:36:8b:d9:4b:06:92:d4:55:69:d5:a5:
                    e0:74:41:da:da:3f:3a:b3:e3:88:e0:9d:af:85:c7:
                    22:f3:1a:4b:11:db:87:c8:60:f1:a4:e7:47:7d:3a:
                    aa:9c:a2:4a:1e:07:01:30:dd:60:2e:c5:71:ae:41:
                    73:1b:0e:ae:f1:6b:c9:9c:73:e5:90:55:c2:cf:cd:
                    da:58:31:dd:f1:41:ff:f0:2d:a7:17:2b:ab:67:5b:
                    8f:84:32:d4:b1:14:29:98:d7:cd:21:08:ba:64:84:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2D:6C:1C:D4:E3:7F:01:F6:C4:EB:23:8C:AD:95:0D:9C:64:BD:CC
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a383030303a3a2f33342d3334203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6488:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:43:1b:09:46:67:47:0a:b7:fa:c9:7f:a3:cf:48:e6:41:fe:
         f0:13:a1:d0:ec:a8:bb:66:d3:9c:03:e7:af:05:e8:fc:52:d4:
         f9:32:97:e2:b8:d8:d7:f8:4e:d1:99:b7:95:de:f9:74:c2:62:
         e4:90:c7:0f:28:52:74:1b:fc:60:76:29:e6:ef:51:7e:fa:46:
         9c:d6:e6:ac:ee:19:ce:ab:36:66:dd:8f:a1:0b:2d:be:e7:e2:
         65:d7:f7:63:5c:40:d7:b5:a9:c2:77:70:14:a5:af:aa:40:c9:
         18:9d:ca:af:16:f4:7e:2a:24:cf:a6:da:51:5a:98:85:95:b0:
         e2:db:c7:03:b0:28:3a:66:2f:7c:21:e5:68:5c:a6:0f:3d:73:
         db:4e:e2:af:1d:55:10:ea:80:d7:27:f5:84:9b:a3:7d:05:d9:
         0f:3c:ce:a5:45:20:99:66:a7:92:f5:5b:a6:ac:ee:2b:c5:08:
         88:fe:92:13:4b:37:cd:c5:dd:4f:14:86:c3:63:ca:5d:26:a6:
         2e:2c:3c:8b:46:8b:44:b0:7d:7b:91:71:6f:88:ce:42:ee:6c:
         b1:e8:3b:c9:60:2a:88:92:fc:a6:92:88:cd:16:fe:c3:3a:a5:
         c6:36:2c:7b:11:53:98:d1:ff:89:82:58:72:99:b0:fd:76:35:
         6b:87:d6:a7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbTOhnsBxmA4yGcBGRcdmy8lKtYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY0NzJFMDdCQjdFRDcxRTg0NzMxQzBCMkU4RjY4QkY3
QTZGMDJEMzAeFw0yNDA0MDQyMzQ2MjJaFw0yNTA0MDMyMzUxMjJaMDMxMTAvBgNV
BAMTKDkxMkQ2QzFDRDRFMzdGMDFGNkM0RUIyMzhDQUQ5NTBEOUM2NEJEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzEMW6yPHbn30PlGWxbRDl42F3
t1T3BjHvRp2rd9IpQ8wO/1a3o1PLV1EJd9WkmWba0msvlqf10la6wgDJj8IgMrOM
nm3R4urTIvs7Dw4rM3sUWLjD24uOERaPE3UzKyNhH0HHCr0fdeFX5VrwbKApFuer
v2LaIq20C3E+AlA/1LsykmTBmx44/3WE5VQh3acMTZHj/suCyFo2i9lLBpLUVWnV
peB0QdraPzqz44jgna+FxyLzGksR24fIYPGk50d9OqqcokoeBwEw3WAuxXGuQXMb
Dq7xa8mcc+WQVcLPzdpYMd3xQf/wLacXK6tnW4+EMtSxFCmY180hCLpkhIndAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkS1sHNTjfwH2xOsjjK2VDZxkvcwwHwYDVR0j
BBgwFoAUn0cuB7t+1x6EcxwLLo9ov3pvAtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmk2Umg0clUyeTY2MWdoYzloZVpRUVVlQXBlUHg2Mk5QZGRjN3E1eEZB
RGgvMS85RjQ3MkUwN0JCN0VENzFFODQ3MzFDMEIyRThGNjhCRjdBNkYwMkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGNDcyRTA3QkI3RUQ3MUU4
NDczMUMwQjJFOEY2OEJGN0E2RjAyRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZpNlJoNHJVMnk2NjFnaGM5aGVaUVFVZUFwZVB4NjJOUGRkYzdxNXhGQURoLzEv
MzIzODMwMzQzYTM2MzQzODM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM0MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZIiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBYQxsJRmdHCrf6yX+jz0jmQf7wE6HQ7Ki7ZtOcA+evBej8UtT5MpfiuNjX
+E7RmbeV3vl0wmLkkMcPKFJ0G/xgdinm71F++kac1uas7hnOqzZm3Y+hCy2+5+Jl
1/djXEDXtanCd3AUpa+qQMkYncqvFvR+KiTPptpRWpiFlbDi28cDsCg6Zi98IeVo
XKYPPXPbTuKvHVUQ6oDXJ/WEm6N9BdkPPM6lRSCZZqeS9VumrO4rxQiI/pITSzfN
xd1PFIbDY8pdJqYuLDyLRotEsH17kXFviM5C7myx6DvJYCqIkvymkojNFv7DOqXG
Nix7EVOY0f+JglhymbD9djVrh9an
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:16:00 2024 by rpki-client on console.sobornost.net