Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a383030303a3a2f33332d3333203d3e20323638353731.roa
File:                     323830343a353333633a383030303a3a2f33332d3333203d3e20323638353731.roa (raw, json)
Hash identifier:          21DQNPBLXwhnAQsel21t0tLuqKO72c2cKPaJH/Iqxns=
Subject key identifier:   46:01:9A:05:A3:C8:B0:4A:9A:C4:FD:7C:94:11:55:E2:94:C9:BA:99
Certificate issuer:       /CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
Certificate serial:       64CBC06D17C4FE3E9B7029F5EECDCD4E56CCC18D
Authority key identifier: ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a383030303a3a2f33332d3333203d3e20323638353731.roa
Signing time:             Mon 05 Aug 2024 11:45:23 +0000
ROA not before:           Mon 05 Aug 2024 11:40:23 +0000
ROA not after:            Mon 04 Aug 2025 11:45:23 +0000
asID:                     268571
IP address blocks:        2804:533c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 13:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cb:c0:6d:17:c4:fe:3e:9b:70:29:f5:ee:cd:cd:4e:56:cc:c1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
        Validity
            Not Before: Aug  5 11:40:23 2024 GMT
            Not After : Aug  4 11:45:23 2025 GMT
        Subject: CN=46019A05A3C8B04A9AC4FD7C941155E294C9BA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:40:55:09:14:72:2d:4e:21:1a:cb:e0:ef:
                    d1:fb:5a:d6:17:eb:51:c8:7a:7a:b4:49:13:23:9a:
                    8f:da:df:3b:3c:2e:75:ab:ad:4b:67:30:0b:9c:06:
                    63:88:ad:4d:bf:54:26:73:41:74:b8:31:f1:ca:1f:
                    20:00:2e:2c:f7:ac:c7:6e:c2:c9:a9:44:3b:91:b3:
                    f7:79:4e:d8:6a:ea:08:b1:3c:5b:8c:7f:1a:aa:7f:
                    75:dd:e3:71:87:aa:34:4b:01:6c:63:35:bd:86:01:
                    b6:a4:b3:4b:be:b0:07:2d:92:73:4c:f0:20:b7:5c:
                    98:3d:ec:95:2e:15:10:73:7e:69:d3:45:ea:e3:e9:
                    16:be:02:fe:d3:3e:a2:28:a3:a6:9f:b4:a0:bd:e0:
                    b0:6b:ff:12:6f:03:c2:de:df:92:a8:0c:76:6d:f2:
                    b0:93:3d:93:99:3d:9d:3d:9e:e5:7e:45:43:08:6e:
                    ae:03:18:ca:c1:f2:69:84:2a:e4:a6:9f:2a:32:ad:
                    c1:01:0f:87:a1:04:85:46:81:92:8d:c6:d4:bf:fb:
                    13:59:8e:94:62:be:5f:1f:e0:30:f4:4b:bf:4b:8d:
                    3c:c9:8c:0e:0b:db:ad:9d:0c:90:44:f6:82:26:96:
                    81:6a:40:a2:99:dd:ca:da:af:39:c6:81:cf:3e:4c:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:01:9A:05:A3:C8:B0:4A:9A:C4:FD:7C:94:11:55:E2:94:C9:BA:99
            X509v3 Authority Key Identifier:
                keyid:ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a383030303a3a2f33332d3333203d3e20323638353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:533c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:64:db:60:9c:98:02:fe:d5:d6:40:8f:6a:0e:33:a8:15:bf:
         58:ce:17:b5:f2:f4:d6:41:30:ce:81:13:50:f0:1f:40:cd:ca:
         26:cc:0a:87:d6:a0:6a:50:3c:58:7e:a9:06:af:3a:50:e2:56:
         3e:6b:20:6c:ed:fc:57:aa:47:34:db:b4:4f:74:bf:38:b4:2d:
         db:42:86:91:e5:cc:f0:ed:42:86:f4:ec:37:42:1d:d3:bf:a3:
         57:33:72:cb:c8:b9:25:64:1e:06:83:f9:9d:fb:48:a6:67:07:
         ba:36:fc:71:17:f1:4a:ef:49:a9:7c:e9:fc:5b:7d:20:8e:8f:
         6e:53:ef:28:9b:b5:aa:e0:a1:90:0d:68:84:f9:25:83:0f:61:
         fb:16:0c:65:f4:80:f3:18:92:9e:3b:a7:cc:7f:5c:8b:31:3f:
         a9:f1:84:ee:54:6c:98:4c:62:a8:c0:3a:75:6f:f2:39:61:0e:
         e0:33:dd:1e:f8:1d:34:96:b2:4b:ae:97:db:e6:a3:05:4d:3f:
         a3:f9:13:0a:25:a2:2f:e9:81:72:d8:63:ee:65:35:8d:e5:23:
         7d:db:c5:c2:a0:09:64:62:3b:2b:35:9c:92:50:8e:5d:a1:a8:
         cd:da:b1:7c:89:60:fa:47:3b:e9:a9:14:33:f9:0a:49:b3:fc:
         bb:0a:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 14:49:06 2024 by rpki-client on console.sobornost.net