Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/323830343a363962633a383030303a3a2f33332d3333203d3e20323730323838.roa
File:                     323830343a363962633a383030303a3a2f33332d3333203d3e20323730323838.roa (raw, json)
Hash identifier:          jkSMaGZLbYNnusH6uBF65g+QNSRVIEPZ8KZ3POGsE0Y=
Subject key identifier:   DB:E0:4D:C9:17:5D:D8:0E:1E:7E:CD:CF:3E:36:2E:72:88:13:9E:69
Certificate issuer:       /CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
Certificate serial:       4A75A3869E24579ADEBD4017959E3C2D4608A0BE
Authority key identifier: B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/323830343a363962633a383030303a3a2f33332d3333203d3e20323730323838.roa
Signing time:             Tue 20 Aug 2024 23:24:46 +0000
ROA not before:           Tue 20 Aug 2024 23:19:46 +0000
ROA not after:            Tue 19 Aug 2025 23:24:46 +0000
asID:                     270288
IP address blocks:        2804:69bc:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Tue 19 Aug 2025 23:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:75:a3:86:9e:24:57:9a:de:bd:40:17:95:9e:3c:2d:46:08:a0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
        Validity
            Not Before: Aug 20 23:19:46 2024 GMT
            Not After : Aug 19 23:24:46 2025 GMT
        Subject: CN=3082010A0282010100C28EB9FE583504F35219667793F622557920E6D95CD2B1282C18919440EABF57A499D40B1680C1A79D96705D64E628996BB6A47B09545BA1F2E2D663927551F966C18C85074209ADF96032B23CFECA2F451FF744B046C99E543062318E2206C2DEF3B69E881E5CE9A49B4DB56C798986F8EDAD9A4282E2DBCCA1BDD0D61CBAB32C8FA45D55A99CDC5F3F451E9BD307A99FFC9C02C5CAC1571771208D13764A33576311EFE3BFDD38EB4EB1BABD7565D826C93A1591D33F7A6FD21ED0AFD70172BC91ED8EC84587529B1483759F8ABE72AAD05666391A8B4E6BEAE22AAEAC53F9FD162DD51DE1C99FD68F50FE2BC73F51A6AD0873C96134B2D3F6E9EA69F8CCA90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:b9:fe:58:35:04:f3:52:19:66:77:93:f6:
                    22:55:79:20:e6:d9:5c:d2:b1:28:2c:18:91:94:40:
                    ea:bf:57:a4:99:d4:0b:16:80:c1:a7:9d:96:70:5d:
                    64:e6:28:99:6b:b6:a4:7b:09:54:5b:a1:f2:e2:d6:
                    63:92:75:51:f9:66:c1:8c:85:07:42:09:ad:f9:60:
                    32:b2:3c:fe:ca:2f:45:1f:f7:44:b0:46:c9:9e:54:
                    30:62:31:8e:22:06:c2:de:f3:b6:9e:88:1e:5c:e9:
                    a4:9b:4d:b5:6c:79:89:86:f8:ed:ad:9a:42:82:e2:
                    db:cc:a1:bd:d0:d6:1c:ba:b3:2c:8f:a4:5d:55:a9:
                    9c:dc:5f:3f:45:1e:9b:d3:07:a9:9f:fc:9c:02:c5:
                    ca:c1:57:17:71:20:8d:13:76:4a:33:57:63:11:ef:
                    e3:bf:dd:38:eb:4e:b1:ba:bd:75:65:d8:26:c9:3a:
                    15:91:d3:3f:7a:6f:d2:1e:d0:af:d7:01:72:bc:91:
                    ed:8e:c8:45:87:52:9b:14:83:75:9f:8a:be:72:aa:
                    d0:56:66:39:1a:8b:4e:6b:ea:e2:2a:ae:ac:53:f9:
                    fd:16:2d:d5:1d:e1:c9:9f:d6:8f:50:fe:2b:c7:3f:
                    51:a6:ad:08:73:c9:61:34:b2:d3:f6:e9:ea:69:f8:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E0:4D:C9:17:5D:D8:0E:1E:7E:CD:CF:3E:36:2E:72:88:13:9E:69
            X509v3 Authority Key Identifier:
                keyid:B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/323830343a363962633a383030303a3a2f33332d3333203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:10:1e:c9:2e:88:7f:20:55:e3:a8:04:8e:9a:34:8b:5a:38:
         d3:b9:4e:94:5e:c3:ee:d3:e7:51:fc:e1:a3:7b:6a:ea:86:d8:
         5b:a9:26:85:3d:1d:34:cb:24:dd:f8:b8:8f:78:74:0d:05:94:
         46:5a:41:bc:00:fb:79:2b:8c:55:96:91:be:03:42:33:25:2a:
         d8:ac:b2:ae:ee:c4:66:23:fb:28:3e:86:41:fb:3a:b0:60:1f:
         0f:85:44:6e:0c:57:13:5e:40:71:80:94:e5:5c:5d:db:a3:4b:
         50:72:59:49:9c:e8:23:2f:c7:f7:23:72:d2:14:78:00:6b:42:
         14:13:54:3b:20:fa:c7:69:c4:ae:ec:c7:8c:26:53:88:7c:47:
         02:b1:3f:bd:2a:f2:fb:f5:a1:30:5d:6b:96:1c:c3:87:54:f0:
         72:e1:db:35:5e:20:16:b8:f4:74:f1:a3:fe:1d:f6:db:dc:5c:
         17:e9:a3:7e:47:0c:7d:8a:6c:44:5d:1c:20:1d:25:91:0d:10:
         38:df:56:42:a6:f5:c9:15:a9:f7:4f:21:bf:63:cf:36:1d:bf:
         b9:fe:ce:f7:4c:f1:01:a0:bf:6d:43:96:09:cc:38:5c:20:6e:
         76:0d:fa:46:45:5b:e3:f1:a2:af:e0:d9:ea:f7:28:3f:94:0f:
         7d:12:da:80
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUSnWjhp4kV5revUAXlZ48LUYIoL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0NkM4MzVFM0Q1OTVDQUIxMDhBMkQyRUQ2M0U2MzlC
REMxMzBCNDAeFw0yNDA4MjAyMzE5NDZaFw0yNTA4MTkyMzI0NDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI4RUI5RkU1ODM1MDRGMzUy
MTk2Njc3OTNGNjIyNTU3OTIwRTZEOTVDRDJCMTI4MkMxODkxOTQ0MEVBQkY1N0E0
OTlENDBCMTY4MEMxQTc5RDk2NzA1RDY0RTYyODk5NkJCNkE0N0IwOTU0NUJBMUYy
RTJENjYzOTI3NTUxRjk2NkMxOEM4NTA3NDIwOUFERjk2MDMyQjIzQ0ZFQ0EyRjQ1
MUZGNzQ0QjA0NkM5OUU1NDMwNjIzMThFMjIwNkMyREVGM0I2OUU4ODFFNUNFOUE0
OUI0REI1NkM3OTg5ODZGOEVEQUQ5QTQyODJFMkRCQ0NBMUJERDBENjFDQkFCMzJD
OEZBNDVENTVBOTlDREM1RjNGNDUxRTlCRDMwN0E5OUZGQzlDMDJDNUNBQzE1NzE3
NzEyMDhEMTM3NjRBMzM1NzYzMTFFRkUzQkZERDM4RUI0RUIxQkFCRDc1NjVEODI2
QzkzQTE1OTFEMzNGN0E2RkQyMUVEMEFGRDcwMTcyQkM5MUVEOEVDODQ1ODc1MjlC
MTQ4Mzc1OUY4QUJFNzJBQUQwNTY2NjM5MUE4QjRFNkJFQUUyMkFBRUFDNTNGOUZE
MTYyREQ1MURFMUM5OUZENjhGNTBGRTJCQzczRjUxQTZBRDA4NzNDOTYxMzRCMkQz
RjZFOUVBNjlGOENDQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwo65/lg1BPNSGWZ3k/YiVXkg5tlc0rEoLBiRlEDqv1ekmdQLFoDB
p52WcF1k5iiZa7akewlUW6Hy4tZjknVR+WbBjIUHQgmt+WAysjz+yi9FH/dEsEbJ
nlQwYjGOIgbC3vO2nogeXOmkm021bHmJhvjtrZpCguLbzKG90NYcurMsj6RdVamc
3F8/RR6b0wepn/ycAsXKwVcXcSCNE3ZKM1djEe/jv904606xur11ZdgmyToVkdM/
em/SHtCv1wFyvJHtjshFh1KbFIN1n4q+cqrQVmY5GotOa+riKq6sU/n9Fi3VHeHJ
n9aPUP4rxz9Rpq0Ic8lhNLLT9unqafjMqQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FNvgTckXXdgOHn7Nzz42LnKIE55pMB8GA1UdIwQYMBaAFLZGyDXj1ZXKsQii0u1j
5jm9wTC0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d5Qm5tcWN6U3NSUWlS
VHo4N0FmVVNGQ1B4QXBKaHM1TTlFcmNTQ3NNdUoxLzEvQjY0NkM4MzVFM0Q1OTVD
QUIxMDhBMkQyRUQ2M0U2MzlCREMxMzBCNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNjQ2QzgzNUUzRDU5NUNBQjEwOEEyRDJFRDYzRTYzOUJEQzEz
MEI0LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HeUJubXFjelNzUlFpUlR6ODdB
ZlVTRkNQeEFwSmhzNU05RXJjU0NzTXVKMS8xLzMyMzgzMDM0M2EzNjM5NjI2MzNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzAzMjM4Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBGm8gDANBgkqhkiG9w0BAQsFAAOCAQEAcBAeyS6IfyBV46gEjpo0
i1o407lOlF7D7tPnUfzho3tq6obYW6kmhT0dNMsk3fi4j3h0DQWURlpBvAD7eSuM
VZaRvgNCMyUq2Kyyru7EZiP7KD6GQfs6sGAfD4VEbgxXE15AcYCU5Vxd26NLUHJZ
SZzoIy/H9yNy0hR4AGtCFBNUOyD6x2nEruzHjCZTiHxHArE/vSry+/WhMF1rlhzD
h1TwcuHbNV4gFrj0dPGj/h3229xcF+mjfkcMfYpsRF0cIB0lkQ0QON9WQqb1yRWp
908hv2PPNh2/uf7O90zxAaC/bUOWCcw4XCBudg36RkVb4/Gir+DZ6vcoP5QPfRLa
gA==
-----END CERTIFICATE-----
Generated at Wed Aug 21 02:43:52 2024 by rpki-client on console.sobornost.net