Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343032303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343032303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          OTe/PaVmRuTQHEP4iEL9MKQQP1boAkxClDuhUlsxqCU=
Subject key identifier:   36:58:B3:FB:93:28:98:39:D3:4C:FA:78:AC:1A:E4:89:D5:C0:A0:09
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       23F929B3477A12B0598FFC555167B568DAD6D323
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343032303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:41 +0000
ROA not before:           Sat 29 Jul 2023 16:21:41 +0000
ROA not after:            Sat 27 Jul 2024 16:26:41 +0000
asID:                     269194
IP address blocks:        2804:60d4:4020::/43 maxlen: 43

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f9:29:b3:47:7a:12:b0:59:8f:fc:55:51:67:b5:68:da:d6:d3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:41 2023 GMT
            Not After : Jul 27 16:26:41 2024 GMT
        Subject: CN=3658B3FB93289839D34CFA78AC1AE489D5C0A009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:e4:b3:96:9d:31:a1:fe:d7:94:b7:fe:1d:
                    c6:52:08:4f:fa:53:45:aa:24:2f:5c:cf:a6:c7:86:
                    e5:9c:7f:6a:c9:7e:b3:50:ca:59:b5:b9:99:94:df:
                    1e:c0:f8:86:15:3f:28:83:97:7f:3b:3f:82:56:f4:
                    f6:9a:fd:36:b1:e0:d9:28:3a:03:80:08:fd:04:a7:
                    a0:d2:19:08:70:25:9a:bb:bd:6f:0c:35:b3:bf:84:
                    01:a3:39:54:25:7a:0a:9d:ee:54:43:24:5e:e0:96:
                    25:55:4f:97:24:dd:b7:2e:dd:14:07:0c:93:a5:3e:
                    04:6a:9d:19:88:12:7b:cc:14:fb:34:a0:a3:7b:17:
                    06:c7:ca:ea:9a:42:cb:9f:8b:62:cb:d6:86:aa:de:
                    5e:c6:c8:88:04:cf:f4:6a:c1:5d:c3:c7:11:6b:3a:
                    1f:60:a5:93:fd:d2:8f:be:94:29:ed:e7:57:1c:7a:
                    18:25:d2:17:48:79:93:75:b2:9b:e3:6c:a4:2e:49:
                    86:aa:4a:75:77:c9:4c:34:6c:f0:53:41:da:94:7d:
                    45:49:d6:97:73:f5:ca:1a:c4:31:7e:dc:01:c5:13:
                    d5:b7:68:16:69:6a:73:43:50:74:5f:db:22:d0:fa:
                    b1:55:00:4c:47:d6:88:fa:4b:86:85:4f:8b:e8:6b:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:B3:FB:93:28:98:39:D3:4C:FA:78:AC:1A:E4:89:D5:C0:A0:09
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343032303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:4020::/43

    Signature Algorithm: sha256WithRSAEncryption
         83:c8:d1:cc:6e:cf:51:46:15:75:63:f0:d0:e6:a0:f9:89:45:
         de:af:61:4d:62:8a:be:5b:14:f4:e0:9e:0d:1e:4f:14:4a:94:
         c3:26:7f:fa:47:b6:73:e5:07:73:9b:ad:97:4c:1d:a5:38:a8:
         ea:ea:52:8f:d2:16:3c:f9:4a:5a:ca:1f:f7:00:13:97:e9:78:
         4b:0f:8f:10:ec:9a:87:74:18:e5:6a:c6:da:85:52:7b:ec:cf:
         83:7e:dc:b7:d6:7b:e8:9c:af:d6:d7:cf:eb:aa:24:5e:de:d3:
         d3:23:dc:d3:1c:0c:4f:07:f5:b6:b3:3a:67:72:38:cc:76:65:
         8c:6b:14:0f:35:2d:d2:9f:ce:c1:70:6c:ea:74:73:c9:85:9c:
         79:25:2a:b0:e2:76:03:03:07:fb:91:42:34:5c:57:88:8d:d5:
         d6:7b:a4:49:ac:a2:7d:f6:a0:f9:e9:d5:03:bd:72:74:46:7e:
         a1:b6:4c:6b:4e:99:b8:4f:79:85:53:41:ed:c3:b8:10:d8:96:
         4e:70:36:1c:32:9f:94:5e:2a:49:c1:0f:a6:47:32:4f:13:1a:
         81:2a:ef:7b:fa:c4:50:58:58:6c:d6:1d:07:5d:c6:18:d6:aa:
         87:be:32:e6:9c:85:de:8f:ee:7b:53:1b:9c:a7:6a:06:a7:5a:
         02:c0:03:a8
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUI/kps0d6ErBZj/xVUWe1aNrW0yMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA3MjkxNjIxNDFaFw0yNDA3MjcxNjI2NDFaMDMxMTAvBgNV
BAMTKDM2NThCM0ZCOTMyODk4MzlEMzRDRkE3OEFDMUFFNDg5RDVDMEEwMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKceSzlp0xof7XlLf+HcZSCE/6
U0WqJC9cz6bHhuWcf2rJfrNQylm1uZmU3x7A+IYVPyiDl387P4JW9Paa/Tax4Nko
OgOACP0Ep6DSGQhwJZq7vW8MNbO/hAGjOVQlegqd7lRDJF7gliVVT5ck3bcu3RQH
DJOlPgRqnRmIEnvMFPs0oKN7FwbHyuqaQsufi2LL1oaq3l7GyIgEz/RqwV3DxxFr
Oh9gpZP90o++lCnt51ccehgl0hdIeZN1spvjbKQuSYaqSnV3yUw0bPBTQdqUfUVJ
1pdz9coaxDF+3AHFE9W3aBZpanNDUHRf2yLQ+rFVAExH1oj6S4aFT4voa7iXAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUNliz+5MomDnTTPp4rBrkidXAoAkwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzNDMwMzIzMDNhM2EyZjM0MzMyZDM0MzMyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgEYNRAIDANBgkqhkiG9w0BAQsF
AAOCAQEAg8jRzG7PUUYVdWPw0Oag+YlF3q9hTWKKvlsU9OCeDR5PFEqUwyZ/+ke2
c+UHc5utl0wdpTio6upSj9IWPPlKWsof9wATl+l4Sw+PEOyah3QY5WrG2oVSe+zP
g37ct9Z76Jyv1tfP66okXt7T0yPc0xwMTwf1trM6Z3I4zHZljGsUDzUt0p/OwXBs
6nRzyYWceSUqsOJ2AwMH+5FCNFxXiI3V1nukSayiffag+enVA71ydEZ+obZMa06Z
uE95hVNB7cO4ENiWTnA2HDKflF4qScEPpkcyTxMagSrve/rEUFhYbNYdB13GGNaq
h74y5pyF3o/ue1MbnKdqBqdaAsADqA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net