Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313030303a3a2f33362d3336203d3e20323730363834.roa
File:                     323830343a366663383a313030303a3a2f33362d3336203d3e20323730363834.roa (raw, json)
Hash identifier:          lyCqc26CBWZBnhJ42o+6DTo+Us0sAzuKo1Rr//U/QmA=
Subject key identifier:   7F:A8:69:08:35:46:D5:FB:8A:C6:9D:97:BD:28:42:EA:D4:60:F9:30
Certificate issuer:       /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial:       2E7DE6FA8EB908B23C353DC82EBC6032C7FA324F
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313030303a3a2f33362d3336203d3e20323730363834.roa
Signing time:             Tue 08 Oct 2024 11:00:27 +0000
ROA not before:           Tue 08 Oct 2024 10:55:27 +0000
ROA not after:            Tue 07 Oct 2025 11:00:27 +0000
asID:                     270684
IP address blocks:        2804:6fc8:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 13:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7d:e6:fa:8e:b9:08:b2:3c:35:3d:c8:2e:bc:60:32:c7:fa:32:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
        Validity
            Not Before: Oct  8 10:55:27 2024 GMT
            Not After : Oct  7 11:00:27 2025 GMT
        Subject: CN=7FA869083546D5FB8AC69D97BD2842EAD460F930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:e1:37:c2:b0:7c:38:f1:f4:6b:9e:f4:8f:
                    57:36:be:e6:ec:e7:75:cd:85:02:cf:ca:ba:11:4d:
                    be:19:3e:66:76:4a:3e:e4:e1:f9:9f:32:c9:f3:6d:
                    18:d2:e4:5e:2b:eb:5e:d3:7f:22:b3:7f:b4:1c:d7:
                    11:e4:19:53:90:a4:60:aa:b6:49:00:5a:17:1d:a3:
                    2a:ab:c8:67:59:01:0e:c6:f3:a5:20:b4:12:52:52:
                    8d:51:0e:a1:1a:69:f0:03:a3:57:65:95:65:1f:9c:
                    d5:4b:0c:c0:03:5a:e9:be:47:dc:15:eb:ce:0b:84:
                    9f:85:bc:27:6d:cf:ad:d2:d7:fd:6a:6e:1d:2f:17:
                    ea:cf:dc:85:65:7d:62:6f:7d:80:38:8d:7a:11:ec:
                    ed:4b:7c:6e:8f:45:2a:81:aa:41:84:b7:cb:42:16:
                    22:00:c2:2f:d3:06:80:12:a9:a0:3f:1c:db:b9:6c:
                    a8:99:06:35:f1:50:8a:7e:37:98:e5:2d:54:31:75:
                    bb:da:4f:d1:64:c4:01:3d:05:4c:d8:8a:36:20:93:
                    7b:d2:2b:45:6d:7f:86:9e:da:68:8a:11:0f:63:61:
                    9f:c7:85:dc:a1:2e:b8:2a:6a:e1:04:56:ff:92:9f:
                    7f:59:fb:a4:6c:d7:2b:8e:9e:31:84:14:c9:ec:00:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:69:08:35:46:D5:FB:8A:C6:9D:97:BD:28:42:EA:D4:60:F9:30
            X509v3 Authority Key Identifier:
                keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a313030303a3a2f33362d3336203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:45:61:65:c1:83:b7:94:c2:86:dd:a8:c0:81:3b:c5:8d:97:
         4e:25:04:47:2d:18:57:83:20:16:19:63:99:eb:5c:72:e4:5e:
         83:97:a7:48:1a:15:6d:3c:66:1c:af:60:9b:3f:13:2d:f3:42:
         de:c9:55:5b:30:09:84:aa:9b:83:7c:76:fa:bf:9a:26:98:26:
         86:e7:bd:b3:59:94:a1:70:93:4d:08:9d:78:09:d5:f5:bd:39:
         0e:ff:71:02:60:db:7f:c7:de:c0:e0:ee:10:42:3a:2d:33:e4:
         07:9d:50:68:70:9c:92:b3:cb:1a:57:3a:24:c1:dc:41:01:9e:
         b5:51:45:71:70:f0:69:84:f9:33:0f:05:8b:eb:9b:8c:78:3a:
         72:5a:c8:83:82:13:fd:a9:bc:88:8a:63:24:0c:4c:36:32:cb:
         ef:c8:53:71:8f:c6:f8:71:cd:29:30:8d:db:ab:c1:b4:37:08:
         d2:6a:d5:df:70:0d:b6:74:33:e1:99:39:4a:91:74:9a:6c:16:
         3c:57:41:3a:c0:00:24:e6:34:bd:86:12:76:33:20:40:fd:f4:
         a8:eb:96:22:8f:88:f4:b4:b6:8e:fa:8b:c6:ac:51:75:9b:3d:
         e3:ff:5a:37:c3:da:ad:68:ed:0b:dd:0d:fc:06:36:d6:c7:b3:
         c5:28:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 15:29:17 2024 by rpki-client on console.sobornost.net