Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3236383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3236383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          DfwAlyiz6FMg7Vo94tE3SqJ8X8Dxmye9ujZeI+5rMNk=
Subject key identifier:   31:49:31:68:01:B3:29:FA:57:19:50:FF:E1:7C:2F:E1:B3:F1:4A:E3
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       757A3F2798D92AC746B7AED1BCD6D8489BAB6F72
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3236383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774:268::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 16:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7a:3f:27:98:d9:2a:c7:46:b7:ae:d1:bc:d6:d8:48:9b:ab:6f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=3149316801B329FA571950FFE17C2FE1B3F14AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:bd:c2:6f:a4:d1:bf:8b:ac:4a:3a:f8:38:
                    4a:a8:79:dd:fb:2a:4d:66:71:b8:f4:7e:ea:d0:ae:
                    94:fa:ba:ef:8e:e3:f7:77:a8:5c:6e:dc:cc:b8:95:
                    83:5d:a3:13:ce:df:5d:eb:13:e4:1c:e6:65:55:e3:
                    e3:de:5c:0e:60:06:78:8b:af:d3:1b:18:ac:31:d0:
                    0b:12:45:a1:de:e7:1f:66:1a:d3:46:d0:f1:15:c9:
                    76:92:00:c3:b4:22:dc:64:f3:dc:ad:1b:f5:73:94:
                    2b:99:d6:0d:90:2b:c9:c8:3a:35:5e:4b:a8:76:b0:
                    79:f5:c2:82:4d:cb:4c:3b:35:3d:bb:77:81:8a:09:
                    84:a8:e7:92:6d:0d:06:48:15:23:4c:1c:be:15:17:
                    ae:65:72:8d:b6:7a:14:90:1c:b2:f2:5c:2d:e4:9f:
                    6b:84:56:90:bf:38:79:b2:70:b1:05:b5:56:76:ea:
                    c1:24:9d:56:f2:11:a0:e5:b1:a8:f1:af:85:fe:84:
                    93:8c:e8:1e:1e:e1:fe:28:af:1c:7c:4c:bd:aa:b0:
                    81:fe:59:b2:b1:b8:d9:84:df:fc:e7:2f:44:b6:83:
                    60:be:a8:f7:a0:6a:e7:61:40:53:42:9b:50:00:b2:
                    17:88:1f:6c:0d:89:e2:5d:c9:01:8c:e8:c9:e4:4e:
                    df:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:49:31:68:01:B3:29:FA:57:19:50:FF:E1:7C:2F:E1:B3:F1:4A:E3
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3236383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:268::/45

    Signature Algorithm: sha256WithRSAEncryption
         24:13:aa:aa:8a:7b:7a:24:24:7e:0b:91:8c:0e:c6:80:22:64:
         2c:d5:24:b1:eb:56:c6:59:8c:b5:d1:67:59:1d:10:bc:9f:f2:
         d8:c4:a6:7e:c7:c5:c7:9b:89:1f:70:66:d1:c5:97:e3:da:ed:
         e2:87:8a:26:9c:01:fc:f4:a2:ee:bf:af:1d:d3:1e:49:e1:8d:
         3a:a6:20:81:09:65:f3:6a:38:e8:88:ed:60:f0:5f:31:4b:0a:
         25:ac:a7:81:c3:9b:87:d0:ed:41:a9:17:9b:46:d5:53:1f:e0:
         6c:7e:e8:77:da:3c:61:44:3c:a2:bc:34:45:b8:a8:d8:80:b0:
         26:a1:e2:e5:ff:44:da:af:33:9f:fb:81:ca:72:b4:61:ac:02:
         cd:75:7f:8f:dd:cb:a3:82:e9:f5:a2:c9:18:a6:81:10:89:cd:
         31:ac:09:fc:68:52:e0:06:52:c1:b2:cf:4d:aa:2c:61:c6:d0:
         8f:53:70:df:a8:18:26:6d:c3:8f:00:bd:36:af:10:89:38:09:
         ec:9e:5e:18:45:05:03:2c:e8:86:8d:0a:86:45:70:76:5d:af:
         46:33:86:1d:07:65:0b:fc:17:dc:7c:7b:60:dd:7b:a2:fd:9c:
         39:68:64:6c:2b:41:fb:d7:cd:4e:12:db:42:b0:f8:0c:fe:05:
         ac:75:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:56:38 2024 by rpki-client on console.sobornost.net