Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3233383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3233383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          zNzLz5ahIe9Xa47CBMvhj67ada67bDjvx24RSXmyTOI=
Subject key identifier:   76:8D:C3:44:F2:31:4D:61:F3:60:BB:8C:79:C4:98:31:87:AD:5A:EE
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       13DF502859DFC6B52F9619E2DD55A3369FF49C5D
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3233383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774:238::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:df:50:28:59:df:c6:b5:2f:96:19:e2:dd:55:a3:36:9f:f4:9c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=768DC344F2314D61F360BB8C79C4983187AD5AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:9a:98:fc:47:dd:89:0d:b1:bb:28:e4:6c:
                    3d:88:63:9a:c8:f2:9a:26:47:ef:3a:85:ee:1d:c0:
                    fc:32:11:1f:9b:1e:28:b9:c9:e4:0d:e1:1d:5a:0d:
                    00:01:e6:37:60:25:65:09:68:93:5d:06:60:d0:71:
                    af:bd:90:0e:29:d6:ed:4b:f3:4f:1f:08:4f:86:6a:
                    71:b3:07:4f:e1:4c:3d:fd:1f:9e:f7:d8:9c:bb:db:
                    47:80:94:7f:d6:7a:5b:b3:b9:d6:f5:1d:bc:11:43:
                    90:d9:6f:93:ca:8d:81:b2:72:b8:a1:92:f9:aa:bb:
                    c5:90:f2:14:b9:e4:b3:cc:c6:11:24:ef:25:bd:63:
                    a9:3a:01:67:d5:64:ce:51:e6:45:a7:e6:f2:98:9f:
                    d3:66:3f:7e:3f:0c:e2:54:08:c2:6c:b4:06:8d:a3:
                    9f:b0:01:13:16:69:63:1b:a9:c7:20:fb:ef:14:ca:
                    59:d6:b2:38:8d:cb:b0:31:14:4c:66:a2:32:26:ca:
                    4c:74:21:82:63:1b:36:eb:e5:d1:1a:13:65:13:67:
                    0c:a0:33:08:9b:95:f3:ad:b3:55:00:22:68:6e:68:
                    9f:c2:bd:f8:91:c4:dc:48:ae:a7:5e:08:a1:a2:c2:
                    6e:87:ff:d2:59:8a:46:6f:8d:2a:b3:19:bf:d5:fc:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8D:C3:44:F2:31:4D:61:F3:60:BB:8C:79:C4:98:31:87:AD:5A:EE
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3233383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:238::/45

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:e0:3d:56:f4:e3:c9:4d:d0:b1:83:f8:c1:ed:a2:cc:58:
         02:ab:e0:df:d1:e9:5f:ce:89:e8:fc:26:d0:ca:f7:00:94:95:
         c5:ff:45:d5:08:24:3a:e5:33:3e:1b:e7:33:74:87:f3:ee:03:
         48:f1:7b:dd:5f:ee:59:b7:62:f2:e4:83:44:a4:ac:a0:85:51:
         4c:61:1a:ea:07:34:7c:6c:fe:0d:f7:45:92:36:5d:de:7a:52:
         c2:dc:4b:a0:cc:1d:97:00:b7:58:66:7a:0b:76:ec:0e:bc:24:
         b9:65:30:94:75:90:a1:0e:d8:6e:9a:61:39:fc:ae:2f:1e:d6:
         24:40:74:93:66:ee:01:9d:eb:23:45:b5:00:0a:8c:d6:81:4b:
         23:30:91:ae:3f:99:a2:b7:55:05:05:cc:0c:8c:84:e4:cc:72:
         83:6e:3f:a0:1e:c6:ef:fc:9d:e8:19:f2:cb:2e:84:e4:17:c5:
         70:94:dc:fd:1c:2c:0a:3f:13:6b:36:88:44:bd:89:43:60:02:
         c6:56:ac:1e:ec:9a:cc:61:ac:30:3d:4e:26:ae:b4:28:67:be:
         36:4b:6e:34:90:78:98:bf:3b:14:0e:69:2b:f7:4b:47:45:1d:
         16:89:60:7c:6a:94:f8:04:65:89:06:8c:8e:17:2b:6f:ac:df:
         2b:bf:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:56:38 2024 by rpki-client on console.sobornost.net