Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a383030303a3a2f33332d3333203d3e20323733333334.roa
File:                     323830343a386431383a383030303a3a2f33332d3333203d3e20323733333334.roa (raw, json)
Hash identifier:          qp9LpOFns32juc8i95CuOta/5BQgSKSdInayF6Dp4QU=
Subject key identifier:   6C:09:9E:CA:25:5D:58:C2:EC:A3:F8:5A:51:A3:73:01:9C:E4:B1:1F
Certificate issuer:       /CN=64EE650E05CE4E93FFE2F41550939D5F0A226CA6
Certificate serial:       7B491773B2CB1BE7F56303E760106290514FC3BB
Authority key identifier: 64:EE:65:0E:05:CE:4E:93:FF:E2:F4:15:50:93:9D:5F:0A:22:6C:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a383030303a3a2f33332d3333203d3e20323733333334.roa
Signing time:             Tue 01 Apr 2025 18:25:19 +0000
ROA not before:           Tue 01 Apr 2025 18:20:19 +0000
ROA not after:            Tue 31 Mar 2026 18:25:19 +0000
asID:                     273334
IP address blocks:        2804:8d18:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Thu 03 Apr 2025 17:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:49:17:73:b2:cb:1b:e7:f5:63:03:e7:60:10:62:90:51:4f:c3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EE650E05CE4E93FFE2F41550939D5F0A226CA6
        Validity
            Not Before: Apr  1 18:20:19 2025 GMT
            Not After : Mar 31 18:25:19 2026 GMT
        Subject: CN=6C099ECA255D58C2ECA3F85A51A373019CE4B11F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:af:3f:39:fd:da:ee:5f:59:3f:e4:41:33:
                    4e:71:8f:9d:2b:e0:81:bd:b9:48:03:15:9e:3e:ba:
                    24:62:29:17:2e:56:88:5d:85:91:98:da:15:b5:c5:
                    68:67:94:65:81:b0:e4:d0:46:ff:bd:30:15:3d:57:
                    f3:fb:94:49:53:02:26:6c:94:bd:f6:a1:b7:55:db:
                    88:19:6e:14:11:3e:09:96:62:75:b6:19:d9:3c:ad:
                    c8:d5:ec:a2:46:84:fd:7b:34:62:02:55:c1:65:80:
                    4e:78:fb:5f:2c:1a:2d:f1:78:39:9c:69:90:59:e7:
                    8f:5c:e2:9a:50:cf:19:d5:52:09:65:2b:7a:e7:5b:
                    81:e1:13:45:41:59:fa:60:f4:19:32:c7:cc:5a:b8:
                    80:0f:c4:1b:bc:8d:2d:f5:b5:7b:67:46:57:31:5a:
                    07:a6:36:88:c2:f1:12:33:b0:57:bb:06:05:b3:53:
                    fd:ba:e0:cb:d9:23:56:63:c5:7f:6f:93:64:34:75:
                    27:a2:e1:1c:dd:92:76:36:b7:70:87:be:01:e2:17:
                    9a:20:d4:16:6b:f6:70:34:56:7f:56:88:95:bf:07:
                    78:5c:0a:6d:9f:72:f8:d4:46:46:df:c6:c7:03:ad:
                    16:3e:4f:e1:de:f2:82:4c:59:40:61:53:ad:97:db:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:09:9E:CA:25:5D:58:C2:EC:A3:F8:5A:51:A3:73:01:9C:E4:B1:1F
            X509v3 Authority Key Identifier:
                keyid:64:EE:65:0E:05:CE:4E:93:FF:E2:F4:15:50:93:9D:5F:0A:22:6C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a383030303a3a2f33332d3333203d3e20323733333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:63:25:34:68:85:0d:5f:df:10:88:da:b3:ca:ba:e4:fe:09:
         04:1e:48:7c:64:9c:d2:5c:4a:77:0e:26:5d:a5:53:16:3a:dc:
         65:08:b1:d5:f3:ef:ff:48:5d:b4:06:a3:25:a2:ae:96:1e:ef:
         62:60:2a:cc:fb:fb:7c:9c:3b:f6:56:11:bf:a0:1f:cb:db:8c:
         ef:c2:f0:09:ab:fe:27:33:2e:e0:04:0e:e0:4c:2d:ad:13:c8:
         20:36:63:67:58:9f:f4:d7:78:e6:2a:85:25:c4:22:1e:ae:6f:
         9a:6d:d5:29:80:36:e2:cb:1c:d2:4c:1f:7e:04:e9:63:44:fd:
         70:c8:db:2d:e0:d0:2b:3d:6a:e8:77:af:5b:e1:43:c6:e6:36:
         f3:1e:74:f1:5d:79:f1:44:6b:37:d9:e6:9e:f0:cf:00:35:11:
         31:40:c0:57:1a:6c:36:32:65:7a:30:c5:2f:4c:6b:fe:90:a0:
         e3:e9:6b:37:8a:28:31:00:67:eb:4b:10:b1:8b:7b:31:3d:ed:
         7a:ed:06:9a:83:f6:27:e0:75:11:29:79:42:97:a4:f0:73:73:
         ff:6b:d0:6c:65:a7:15:15:25:5a:29:ff:84:3a:e7:87:d2:3a:
         3f:6d:82:9c:93:52:5f:28:bf:ce:56:f7:fe:20:55:e2:cc:a7:
         93:60:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 20:22:27 2025 by rpki-client on console.sobornost.net