Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3332203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33322d3332203d3e20323730363834.roa (raw, json)
Hash identifier:          YTuDmpZFDJuzCBQMrguzqtZ/cYIhM2hVeQNpMyWbJsU=
Subject key identifier:   AE:8C:98:6E:3E:8F:97:9F:9E:32:2A:EC:D6:E6:A3:69:1F:96:E9:CD
Certificate issuer:       /CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
Certificate serial:       52BB9F5B59B91F65E862215398DF0F53F255A6DF
Authority key identifier: 89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3332203d3e20323730363834.roa
Signing time:             Tue 08 Oct 2024 11:00:25 +0000
ROA not before:           Tue 08 Oct 2024 10:55:25 +0000
ROA not after:            Tue 07 Oct 2025 11:00:25 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 13:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bb:9f:5b:59:b9:1f:65:e8:62:21:53:98:df:0f:53:f2:55:a6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896D561D466A56637CCA4E49B43F5AA99A3CF840
        Validity
            Not Before: Oct  8 10:55:25 2024 GMT
            Not After : Oct  7 11:00:25 2025 GMT
        Subject: CN=AE8C986E3E8F979F9E322AECD6E6A3691F96E9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:7c:3b:fd:0a:7e:28:ec:03:38:f7:34:cf:
                    41:e2:bb:a3:e0:dd:5f:ab:95:63:51:bc:30:c8:66:
                    66:8b:3f:61:40:17:c1:1e:e2:08:1f:a1:8e:dd:75:
                    b8:3d:fd:09:5f:8c:d7:0e:3b:4d:39:56:80:42:3c:
                    85:3a:6d:72:41:68:3a:f3:76:8c:83:e5:c5:93:92:
                    cb:77:9c:65:5c:62:12:62:65:05:75:79:f2:e2:16:
                    85:0b:93:82:cf:ca:a7:b0:f1:a0:00:40:46:78:03:
                    f5:7a:0f:01:f6:69:a4:f6:7a:43:08:d4:43:0f:d3:
                    a9:17:43:1c:bb:77:98:b4:85:9a:e3:08:cf:2c:dc:
                    33:ba:03:31:cf:72:e2:d4:6e:34:d0:f8:de:da:2f:
                    5f:d1:81:83:a5:0f:53:71:b7:0c:c3:73:b0:5e:f0:
                    63:dc:ec:27:b7:25:34:4d:a2:cb:4e:fd:9c:c4:32:
                    8d:e4:04:75:cd:2a:1f:d6:3c:71:43:b9:33:de:97:
                    27:de:f5:bc:d3:08:13:4b:74:60:e3:52:50:91:22:
                    89:9c:c3:9b:f2:07:35:80:55:44:5c:1c:37:62:22:
                    dd:c3:61:a8:62:1a:61:39:86:04:3a:81:ad:6c:76:
                    a3:4d:d7:78:d2:2b:29:48:18:0f:0c:11:1d:1b:3c:
                    f2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:98:6E:3E:8F:97:9F:9E:32:2A:EC:D6:E6:A3:69:1F:96:E9:CD
            X509v3 Authority Key Identifier:
                keyid:89:6D:56:1D:46:6A:56:63:7C:CA:4E:49:B4:3F:5A:A9:9A:3C:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/896D561D466A56637CCA4E49B43F5AA99A3CF840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896D561D466A56637CCA4E49B43F5AA99A3CF840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3332203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:7f:91:5f:81:bb:c2:d0:88:da:c7:9b:08:3c:a9:aa:8c:3f:
         9f:21:96:74:a5:30:2d:93:5a:1d:0a:01:1b:4d:74:27:f4:1e:
         27:b5:e0:1f:ce:ae:f6:49:b8:f1:8e:15:4b:a6:59:b5:45:98:
         56:78:43:31:56:9e:d5:0e:48:e6:d3:66:22:1a:76:65:34:85:
         f5:5d:95:0c:97:8a:8a:b1:d8:88:84:b7:77:c7:a6:a8:b4:db:
         ce:a2:f3:cd:5f:68:31:33:78:3b:18:ad:83:e8:78:a8:54:47:
         a4:29:96:fc:70:d3:cd:ff:c1:88:23:77:79:59:9c:9d:9d:21:
         de:a6:e2:64:d8:15:09:9c:9a:b3:cd:21:4e:b4:aa:cf:75:fa:
         d4:8d:df:b2:25:be:33:8a:85:a1:f3:df:e8:f1:fb:23:53:07:
         73:cb:75:fb:78:21:1a:7a:d4:64:32:c1:52:84:26:b8:cb:aa:
         48:55:74:a0:3d:e0:f4:0b:53:97:5e:7f:f8:c0:d3:de:53:5d:
         19:6b:08:c9:11:29:0c:ad:5e:48:95:90:b7:78:2e:7b:b4:91:
         43:45:69:28:c6:cd:bc:e3:a8:f9:31:19:7e:16:fe:05:9f:dd:
         56:ad:c6:9b:5a:78:97:4f:25:e2:40:a8:99:c1:98:39:47:e6:
         a5:3b:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 15:29:17 2024 by rpki-client on console.sobornost.net