Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d3332203d3e20323731303037.roa
File:                     323830343a373464383a3a2f33322d3332203d3e20323731303037.roa (raw, json)
Hash identifier:          iRN9h5B6Yi7qMBWU0Fdj7cA+adz8p2NmCLEMPV1hKvc=
Subject key identifier:   D2:77:EE:AE:60:5B:F2:79:12:A0:17:F2:00:61:D3:39:38:74:D4:13
Certificate issuer:       /CN=67EA103DA5543711281365C64EA7698F5F23FAEE
Certificate serial:       32102C6B8B7A774D1894465E4E4A1718304172C6
Authority key identifier: 67:EA:10:3D:A5:54:37:11:28:13:65:C6:4E:A7:69:8F:5F:23:FA:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67EA103DA5543711281365C64EA7698F5F23FAEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d3332203d3e20323731303037.roa
Signing time:             Fri 07 Feb 2025 18:46:24 +0000
ROA not before:           Fri 07 Feb 2025 18:41:24 +0000
ROA not after:            Fri 06 Feb 2026 18:46:24 +0000
asID:                     271007
IP address blocks:        2804:74d8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 08 Feb 2025 12:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:10:2c:6b:8b:7a:77:4d:18:94:46:5e:4e:4a:17:18:30:41:72:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EA103DA5543711281365C64EA7698F5F23FAEE
        Validity
            Not Before: Feb  7 18:41:24 2025 GMT
            Not After : Feb  6 18:46:24 2026 GMT
        Subject: CN=D277EEAE605BF27912A017F20061D3393874D413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:eb:f5:53:f6:72:d3:61:0b:1b:18:81:12:
                    08:0a:d7:08:af:44:1e:8d:a3:a9:6c:d8:17:d5:92:
                    97:2e:ff:87:84:54:43:d8:2f:e8:96:9a:8f:da:ab:
                    90:51:ce:2f:1c:f4:ef:6f:97:5d:8a:4b:26:4f:e4:
                    f8:d0:12:c6:6a:c0:2c:f3:67:26:e2:2e:9a:8b:0d:
                    b8:e8:8e:7d:1f:b9:51:db:53:ff:19:ba:55:27:72:
                    2c:93:85:f1:f8:66:f4:51:46:c3:3b:56:87:ae:33:
                    8f:05:77:33:3f:e7:49:7b:8b:38:da:1c:84:d3:01:
                    c2:c6:52:fd:eb:2d:3c:64:ac:55:f6:e5:03:5f:07:
                    ac:4e:81:21:db:f8:cf:24:09:f3:bc:47:76:c5:1f:
                    a4:f2:7f:ed:4c:ad:97:4d:c9:7b:f9:d3:ef:18:aa:
                    16:aa:2f:b7:f2:ef:67:72:ef:0d:cb:3d:ec:65:a9:
                    ac:66:e8:04:e3:37:6e:21:fc:90:1f:81:75:cd:b6:
                    ea:2a:2d:f7:95:9a:24:b1:b0:6e:f1:54:12:d6:f9:
                    2a:8e:f4:d8:c4:2d:52:4d:86:60:7e:79:a4:27:ee:
                    ed:af:9c:c4:15:b3:f3:82:86:fa:84:4b:bb:d0:3d:
                    91:93:6a:37:f0:9f:0e:58:57:6c:8e:73:f3:a9:7a:
                    93:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:EE:AE:60:5B:F2:79:12:A0:17:F2:00:61:D3:39:38:74:D4:13
            X509v3 Authority Key Identifier:
                keyid:67:EA:10:3D:A5:54:37:11:28:13:65:C6:4E:A7:69:8F:5F:23:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/67EA103DA5543711281365C64EA7698F5F23FAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67EA103DA5543711281365C64EA7698F5F23FAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d3332203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:db:e3:3c:15:2d:a8:bc:17:7c:28:48:ae:42:db:87:b9:c4:
         9e:99:b5:6e:11:3d:25:93:46:38:cf:7f:99:3c:d7:e5:73:4b:
         de:33:1e:3e:72:96:02:5d:ff:46:43:7e:65:9a:d4:e5:dc:3a:
         f8:47:52:48:98:c6:e1:da:05:6f:18:9d:0f:9c:45:ae:4f:eb:
         47:16:73:af:c7:82:27:5b:60:46:ac:81:ba:84:05:ec:e6:87:
         7b:a2:d3:91:e2:89:ad:24:d7:04:ea:7f:5e:c8:de:29:f8:c7:
         1d:dd:ce:b1:90:f6:71:af:eb:c1:46:1a:58:0c:bb:bd:12:86:
         56:0e:0d:56:70:8b:a7:e1:c9:ae:86:83:93:ed:55:99:dd:a3:
         38:35:a8:52:27:e3:ee:2d:ed:7b:24:b1:ff:f3:19:1b:05:10:
         e5:56:f8:50:67:1a:a1:15:dc:a4:fd:5b:7a:4c:9a:54:8c:de:
         6d:7e:33:60:a9:82:69:61:35:44:67:06:74:0e:1e:dc:0c:a2:
         66:dc:c3:67:2a:97:89:34:6a:43:d6:28:a0:0b:7f:f7:e8:77:
         4b:46:61:5a:4e:43:9f:8e:7b:2b:24:f4:4d:c9:6c:ab:6a:dd:
         ea:7e:7a:f1:e2:bd:71:cd:14:7f:0d:ef:64:06:f6:48:6f:0e:
         ee:75:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 03:42:25 2025 by rpki-client on console.sobornost.net