Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/323830343a363962633a633030303a3a2f33342d3334203d3e20323730323838.roa
File:                     323830343a363962633a633030303a3a2f33342d3334203d3e20323730323838.roa (raw, json)
Hash identifier:          tq3Z4/oqbGr8SXMYI7le30yA+9djqBXlOH/pKqNHHYY=
Subject key identifier:   22:54:B2:66:60:3F:8E:2C:C6:A1:FB:7F:03:91:25:94:A1:73:B2:F8
Certificate issuer:       /CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
Certificate serial:       44A36BD9E4DCEBC68715FAEA48C3204066666CBE
Authority key identifier: B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/323830343a363962633a633030303a3a2f33342d3334203d3e20323730323838.roa
Signing time:             Tue 20 Aug 2024 23:24:46 +0000
ROA not before:           Tue 20 Aug 2024 23:19:46 +0000
ROA not after:            Tue 19 Aug 2025 23:24:46 +0000
asID:                     270288
IP address blocks:        2804:69bc:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 19 Aug 2025 23:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a3:6b:d9:e4:dc:eb:c6:87:15:fa:ea:48:c3:20:40:66:66:6c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
        Validity
            Not Before: Aug 20 23:19:46 2024 GMT
            Not After : Aug 19 23:24:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ae:5a:1a:6b:39:7f:95:06:36:f4:c3:bc:f5:
                    d1:c8:28:ff:a8:35:f5:a1:ba:88:2d:81:b9:f1:48:
                    46:22:36:5b:96:0e:cf:f9:82:67:4b:9a:31:5f:85:
                    d4:38:e8:a2:ec:75:a7:51:1f:8d:4e:37:1d:3c:86:
                    bb:91:a5:b4:62:1f:20:b2:17:82:06:b2:c3:a6:8c:
                    24:f9:07:21:7f:26:b8:e8:1e:e1:23:09:15:30:5e:
                    10:dc:c5:6c:10:7c:c3:c7:33:59:f1:e3:75:18:6b:
                    f6:3e:50:5b:df:2f:dd:3f:bf:96:f6:dc:d7:c4:e0:
                    ee:96:e1:87:4c:b4:76:8e:09:ff:9a:57:e1:e3:db:
                    53:1a:11:33:b0:b9:c8:6e:f6:77:c5:50:98:2e:2c:
                    5a:c0:cf:26:04:75:0f:84:34:8d:73:48:15:dd:9a:
                    28:74:02:ea:88:4f:62:db:8f:d8:ad:05:c3:4e:65:
                    ca:ca:f5:99:2a:4e:0f:06:e2:b5:71:fb:bf:ea:a4:
                    05:2a:4d:86:bd:69:cb:b3:06:02:ca:5d:a3:84:0a:
                    42:9f:c0:08:fa:d4:50:56:13:de:b6:ab:2f:e0:cd:
                    a9:c8:e1:bb:25:2b:a8:0f:06:32:bb:16:c2:58:ff:
                    a9:71:1e:4c:a5:2e:ee:4b:ad:04:e5:ad:f9:a2:e4:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:54:B2:66:60:3F:8E:2C:C6:A1:FB:7F:03:91:25:94:A1:73:B2:F8
            X509v3 Authority Key Identifier:
                keyid:B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/323830343a363962633a633030303a3a2f33342d3334203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69bc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:8b:51:d1:82:13:2b:36:aa:c4:e0:b2:67:2d:4e:76:31:
         61:87:1f:f3:c0:6a:56:0b:d6:d3:94:ba:c6:df:29:68:2c:60:
         b8:50:03:97:60:31:0f:fa:a2:b3:d6:fd:d6:04:8d:0a:81:a0:
         f5:9a:2d:79:f7:20:58:32:06:13:2d:5c:3f:4f:ff:a5:9f:c0:
         eb:ab:6c:79:d3:f3:83:f8:c0:80:a7:06:e2:d1:6d:66:34:ff:
         bb:c3:8f:a8:f3:a7:ef:67:ae:a1:df:38:4a:06:ff:6b:93:d7:
         f3:ae:32:37:39:38:aa:f2:40:5e:1a:04:a8:56:61:80:a2:e5:
         0d:1e:2d:e0:29:ec:d4:cb:5b:29:a7:9d:e7:b6:96:04:31:16:
         ae:3b:12:d8:2a:66:c6:0b:87:97:2b:f2:6d:34:9e:e8:b0:9b:
         74:a2:85:c5:a5:c1:b9:f7:95:f0:9c:c7:51:e6:e2:63:45:32:
         23:61:e9:de:1f:a7:bd:51:32:71:48:52:33:cc:44:c5:5b:d2:
         84:8a:38:e4:0e:1c:ba:ac:02:fb:16:ea:36:21:38:ec:00:86:
         e8:d4:94:07:7e:ab:20:ff:cb:9c:34:a7:32:76:7d:a5:8e:ef:
         33:96:8e:2b:f1:ae:56:40:9d:6a:9f:97:2a:c3:6b:b6:15:0d:
         17:b0:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 02:43:52 2024 by rpki-client on console.sobornost.net