Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a383030303a3a2f33332d3336203d3e20323730373537.roa
File:                     323830343a373066303a383030303a3a2f33332d3336203d3e20323730373537.roa (raw, json)
Hash identifier:          XFZr6niekIswKDM8kK0vfJCPMaUnXdZbrDPfOPzC8aE=
Subject key identifier:   FF:31:A3:BF:D4:65:7A:78:7A:20:10:08:85:43:41:82:F0:F2:4D:92
Certificate issuer:       /CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
Certificate serial:       4CAD2DF5C8C90305B2A6F66D5A680E5D4A05314F
Authority key identifier: E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a383030303a3a2f33332d3336203d3e20323730373537.roa
Signing time:             Fri 07 Feb 2025 20:14:04 +0000
ROA not before:           Fri 07 Feb 2025 20:09:04 +0000
ROA not after:            Fri 06 Feb 2026 20:14:04 +0000
asID:                     270757
IP address blocks:        2804:70f0:8000::/33 maxlen: 36

Validation:               Failed, certificate revoked on Fri 07 Feb 2025 20:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ad:2d:f5:c8:c9:03:05:b2:a6:f6:6d:5a:68:0e:5d:4a:05:31:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
        Validity
            Not Before: Feb  7 20:09:04 2025 GMT
            Not After : Feb  6 20:14:04 2026 GMT
        Subject: CN=FF31A3BFD4657A787A20100885434182F0F24D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:04:88:b5:de:92:76:5b:d3:b6:2d:a0:8c:
                    d2:0a:be:f4:e7:11:8a:ad:04:79:a5:01:03:85:a7:
                    5f:34:10:e2:e3:21:98:87:b7:81:5f:fb:62:a2:e9:
                    7b:36:62:74:1b:ae:5c:04:30:0f:b9:b6:50:99:4d:
                    7c:ed:5f:0b:c1:42:bb:5c:5a:29:63:5d:bf:96:3d:
                    0e:f2:26:e6:4c:94:c3:0c:24:d5:a4:79:a7:d0:b4:
                    e3:18:10:13:17:b3:e0:f2:91:59:36:39:55:fe:dc:
                    1e:a8:97:40:e0:53:d1:9f:51:c0:d9:40:10:e2:67:
                    5e:30:84:48:df:48:10:01:e7:89:51:63:c2:27:e9:
                    69:43:e4:1b:c2:7b:0f:d7:a8:8d:25:23:38:22:d8:
                    97:b4:c6:90:58:1f:28:29:3c:81:43:c7:d2:97:91:
                    93:44:c2:2d:e0:e6:b5:88:e2:62:99:23:b2:5b:0c:
                    6b:b0:fb:bb:0e:3d:10:1a:b1:ac:0a:ac:d5:50:ce:
                    7a:74:1d:d6:b1:48:16:72:01:37:6b:3d:ca:4f:fb:
                    6d:4c:15:31:23:d9:00:bd:00:ee:3c:16:7a:e1:fc:
                    f6:fc:8f:7b:96:e4:b4:7e:a5:4e:5b:33:3f:55:47:
                    97:37:cc:c9:8d:ac:d7:a0:bc:d6:88:56:2f:65:53:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:31:A3:BF:D4:65:7A:78:7A:20:10:08:85:43:41:82:F0:F2:4D:92
            X509v3 Authority Key Identifier:
                keyid:E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/323830343a373066303a383030303a3a2f33332d3336203d3e20323730373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:73:b4:d2:0d:a8:ad:67:d7:e5:04:99:61:7a:3b:ea:74:5b:
         6e:31:6e:77:e5:41:71:d7:4a:1e:0b:74:8a:6c:7f:a4:3b:80:
         b7:b2:91:05:1a:25:25:b0:13:8e:4c:08:49:91:d9:f1:f3:ec:
         e2:27:be:36:b2:cc:71:60:6a:3b:ee:86:78:38:5b:f2:cf:66:
         6a:e4:d6:6a:bf:e1:78:bf:d8:72:9c:aa:f6:68:e1:a4:ce:57:
         87:4b:23:81:08:83:9f:b9:6d:3c:18:c9:d5:e9:43:41:ec:49:
         d3:ec:b3:25:5d:a9:1c:ec:e4:5c:ea:65:8e:d4:30:d0:8f:14:
         fe:66:75:84:23:33:6f:67:8d:58:3b:28:25:2f:1d:a0:aa:0e:
         d2:00:e7:6c:40:a6:1b:a9:ff:6c:4a:01:ac:47:7a:d3:bd:e2:
         e3:b8:3c:eb:13:8c:03:c9:18:1f:1b:44:6f:3f:8a:55:9c:f1:
         3a:c9:f6:b3:41:90:5d:76:84:bf:7e:9a:43:76:00:04:c2:70:
         86:65:d4:2a:74:ea:b8:f9:9e:4a:74:4d:f2:20:e9:5a:a7:e6:
         50:28:ec:b6:37:56:ae:53:1c:05:3f:d1:62:9c:6a:89:26:0e:
         c3:87:96:00:79:aa:fe:bf:92:ac:a0:f1:52:5e:45:2e:b4:4c:
         b2:0e:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 23:42:22 2025 by rpki-client on console.sobornost.net