Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3238303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3238303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          AfBNrZ0SdQG06D1WHmyYX4y4PjrkeR2RTeO1cchbN48=
Subject key identifier:   52:78:77:82:27:AB:54:97:26:7D:93:04:58:C8:A9:1A:2A:1A:9F:2B
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       55269EB605681289CB0C06611794FB40304FA0BB
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3238303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:35 +0000
ROA not before:           Fri 30 Aug 2024 14:21:35 +0000
ROA not after:            Fri 29 Aug 2025 14:26:35 +0000
asID:                     272710
IP address blocks:        2804:8774:280::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 16:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:26:9e:b6:05:68:12:89:cb:0c:06:61:17:94:fb:40:30:4f:a0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:35 2024 GMT
            Not After : Aug 29 14:26:35 2025 GMT
        Subject: CN=5278778227AB5497267D930458C8A91A2A1A9F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:c2:da:24:cb:04:45:51:eb:20:8d:99:ba:
                    ac:1b:d1:62:ff:32:9c:a9:8e:2f:37:bb:fe:85:1e:
                    52:f3:91:e2:32:fb:eb:79:e7:7a:d2:1e:4b:c3:9f:
                    45:13:4f:c0:52:d4:b0:8c:d3:b5:81:89:32:bf:79:
                    64:1b:b1:0f:9d:f2:b5:b6:54:8d:32:fd:46:81:c1:
                    c9:ab:67:4d:59:e8:ac:b7:18:49:34:7f:ca:f8:32:
                    27:4a:04:f0:2c:aa:90:d8:5e:61:4f:83:14:86:d6:
                    a1:1f:87:2b:29:fd:55:05:40:5b:50:17:da:86:dc:
                    47:fc:38:dc:92:33:45:23:4e:9a:79:64:a6:1c:45:
                    e4:c6:dc:81:6c:c5:4f:57:b9:5f:00:49:d4:ae:4c:
                    03:25:ce:f5:33:6b:da:cd:2b:36:3f:e8:1a:ff:6f:
                    f5:01:2a:25:70:51:0f:e7:f7:d7:9e:28:79:4a:a0:
                    8c:9d:02:85:bb:fe:6b:33:ac:0b:48:5b:10:eb:3b:
                    64:5e:ef:83:5a:87:eb:ab:d6:49:6d:a2:ac:16:4c:
                    01:c9:6b:cb:0e:5e:76:b6:57:6d:f2:ed:0c:c6:9b:
                    8c:3f:75:a2:60:4b:35:cf:db:53:b0:b3:bb:c1:a4:
                    9e:4b:41:16:28:1a:65:93:50:f7:2d:b3:dd:f9:e5:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:78:77:82:27:AB:54:97:26:7D:93:04:58:C8:A9:1A:2A:1A:9F:2B
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3238303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:280::/45

    Signature Algorithm: sha256WithRSAEncryption
         26:a8:f7:3e:ac:46:69:a6:a5:ba:c6:fb:aa:fd:2d:aa:de:37:
         d0:32:dd:88:52:36:c2:dd:20:c4:47:56:88:02:e4:e0:33:7d:
         09:7b:c4:c9:4e:c2:1b:c9:e1:66:fa:0e:ab:16:9c:7b:35:47:
         24:35:cf:b7:2b:6e:c0:8e:d1:61:47:00:69:ae:5a:f4:c5:75:
         79:2e:8e:27:83:be:a7:cf:9b:76:55:10:93:2b:70:44:2c:98:
         bd:bb:61:45:5b:0b:40:6a:fc:92:67:28:99:ff:62:fe:fd:cf:
         e9:44:d2:61:8a:c3:65:72:ea:9f:bf:af:4d:56:bb:66:79:14:
         cf:09:a1:ad:b2:38:4d:be:b7:4b:f6:a0:60:b2:51:61:71:6d:
         2e:19:76:f8:14:38:86:49:80:d8:26:a7:cd:13:c4:dc:2e:62:
         c2:12:b2:c1:7a:46:2f:31:e7:92:85:7f:30:45:08:a7:e5:84:
         4a:8a:01:58:0c:54:31:e1:0e:b5:30:b0:9c:6b:96:35:70:72:
         d7:43:6e:34:6c:a2:fa:6a:0a:0b:46:21:26:f1:01:19:6c:55:
         9f:b4:9d:d2:16:88:e6:d4:90:4f:34:20:f6:84:ce:37:be:17:
         37:aa:9b:07:9a:e8:96:7d:60:8b:fb:1d:b3:53:58:07:49:b2:
         b6:dc:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:56:38 2024 by rpki-client on console.sobornost.net