Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a383030303a3a2f33362d3336203d3e20323730363834.roa
File:                     323830343a366663383a383030303a3a2f33362d3336203d3e20323730363834.roa (raw, json)
Hash identifier:          2qnQKogtjaNQ7neTpxV4JlURhVChfMAWr/wLMRqYQZ4=
Subject key identifier:   42:FA:9F:3D:F9:38:29:7B:AC:FF:DC:55:63:DC:88:C1:D6:F6:B8:8A
Certificate issuer:       /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial:       7704F6ADADE4A4B8B1722B0123288AF5153682A7
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a383030303a3a2f33362d3336203d3e20323730363834.roa
Signing time:             Tue 08 Oct 2024 11:00:29 +0000
ROA not before:           Tue 08 Oct 2024 10:55:29 +0000
ROA not after:            Tue 07 Oct 2025 11:00:29 +0000
asID:                     270684
IP address blocks:        2804:6fc8:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 13:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:04:f6:ad:ad:e4:a4:b8:b1:72:2b:01:23:28:8a:f5:15:36:82:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
        Validity
            Not Before: Oct  8 10:55:29 2024 GMT
            Not After : Oct  7 11:00:29 2025 GMT
        Subject: CN=42FA9F3DF938297BACFFDC5563DC88C1D6F6B88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:6f:e1:11:7e:24:8a:6f:0c:37:e5:53:34:
                    c4:05:81:e2:92:7b:5f:d4:dc:d7:67:1d:37:0c:b4:
                    61:ef:5b:67:82:89:20:14:ed:b4:41:9a:8d:b8:aa:
                    54:fd:ed:50:85:c4:fd:61:db:40:fa:4f:4e:81:e2:
                    da:32:51:6c:e2:3b:fc:fe:38:d3:fb:d4:3b:ef:ac:
                    56:36:a3:f9:50:90:9d:c1:42:51:bf:d5:ad:2d:45:
                    3f:16:d6:f4:d0:d2:71:7e:71:53:34:b6:d6:ae:71:
                    51:7f:b6:58:f3:67:54:eb:50:ec:be:22:9c:bd:9e:
                    68:fe:c8:b6:0d:eb:f5:1a:95:94:23:34:c2:a7:fa:
                    b8:a8:07:d6:92:58:a0:5d:8f:3c:ee:7a:c2:30:12:
                    c5:ef:c4:87:af:21:75:cd:82:43:6f:b1:03:5f:76:
                    cf:f0:46:15:7c:7c:a3:61:93:fe:9e:9f:81:63:fa:
                    24:b4:82:54:a1:31:dd:ac:3f:80:8b:eb:d9:f0:08:
                    c1:33:57:78:3f:b3:a0:c9:c2:85:9c:c3:f1:98:9f:
                    1a:19:7f:74:d7:9c:38:11:2f:a3:dd:87:01:58:25:
                    9d:28:05:0e:6c:0d:de:a6:f5:87:8e:64:30:77:a5:
                    31:3f:ea:fa:57:0e:e1:a0:7d:e4:e4:cc:0e:91:58:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:9F:3D:F9:38:29:7B:AC:FF:DC:55:63:DC:88:C1:D6:F6:B8:8A
            X509v3 Authority Key Identifier:
                keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a383030303a3a2f33362d3336203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:53:4f:b7:df:85:2b:94:ab:2f:20:3b:73:1d:bb:51:80:78:
         2f:37:98:e5:98:93:71:bc:7e:90:8b:85:94:6a:c2:c5:cd:9c:
         b4:b5:66:e0:ca:5e:5e:23:b3:ee:73:f6:3a:69:d0:bf:0e:ce:
         ee:45:a6:e7:8a:18:36:8d:9b:87:c2:3d:d9:52:5d:61:39:04:
         2f:15:6a:df:1d:7c:8e:93:cf:7d:c8:c7:5a:2a:04:d9:cd:21:
         04:22:20:96:0f:2e:24:e0:3c:99:ad:09:17:77:b8:ce:cb:3c:
         a5:a0:a8:2d:40:37:57:9f:fb:7f:d4:d6:1d:6b:77:3d:eb:08:
         7a:4f:4b:ad:ba:37:ab:9e:23:da:0b:55:4d:81:4a:8f:59:23:
         0f:5c:d4:2d:c8:3c:03:aa:53:fc:5b:8b:e5:1a:b1:30:93:1b:
         82:24:50:8b:1f:d8:c0:53:28:54:6b:27:49:5a:aa:50:1b:54:
         16:24:f3:00:4b:84:98:5e:9c:a5:11:4f:3f:30:7f:29:22:d4:
         0b:37:84:f9:34:b5:bd:ee:95:c5:07:8c:1d:42:33:75:3b:bf:
         7b:0a:fe:52:64:13:2c:6d:e6:d9:bf:1b:99:c4:a8:ab:f8:b7:
         17:f0:3a:4c:1b:96:bc:a9:8f:5b:2c:db:7d:16:c6:4b:af:67:
         c9:c9:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 15:29:17 2024 by rpki-client on console.sobornost.net