Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343061303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343061303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          +XmWYIH7GKCzarKJR6pQXuF/VkgOsdKFWSCdMtjR860=
Subject key identifier:   73:DA:6A:17:76:6E:6C:65:9E:D8:34:F9:3E:DC:0E:03:B6:A5:34:96
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       2EAE54CA50521B4AB4B1C43210EAA2D0D9946609
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343061303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:43 +0000
ROA not before:           Sat 29 Jul 2023 16:21:43 +0000
ROA not after:            Sat 27 Jul 2024 16:26:43 +0000
asID:                     269194
IP address blocks:        2804:60d4:40a0::/43 maxlen: 43

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ae:54:ca:50:52:1b:4a:b4:b1:c4:32:10:ea:a2:d0:d9:94:66:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:43 2023 GMT
            Not After : Jul 27 16:26:43 2024 GMT
        Subject: CN=73DA6A17766E6C659ED834F93EDC0E03B6A53496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:53:52:40:4b:24:4f:04:2c:d6:a8:18:06:
                    da:4f:48:a6:31:26:d7:69:e5:73:04:e7:d2:21:68:
                    3b:58:3f:53:37:c7:7b:1f:cf:dd:52:b4:f5:32:f2:
                    ff:68:18:aa:fe:79:5d:9d:93:ba:3c:3a:37:5d:98:
                    23:c8:cb:27:8e:08:ae:bb:b2:e0:f4:fe:69:af:ab:
                    3c:65:02:64:77:e9:53:25:b1:2b:5e:c7:8e:bf:c9:
                    80:eb:49:3b:91:3c:a5:67:01:cf:b7:97:80:ac:0d:
                    11:92:c1:40:b9:cf:c9:e7:25:c3:85:78:fc:4c:77:
                    6c:e2:dc:70:d3:e9:58:e4:ee:fe:13:6e:8f:b8:a0:
                    35:fe:d8:c4:e6:45:62:78:b9:ac:35:01:6a:1b:9c:
                    bc:81:4c:38:f2:65:92:6b:1d:47:aa:51:d0:41:77:
                    ea:28:ca:7f:10:5c:08:7c:b0:37:dc:3b:1d:d8:34:
                    da:d2:f8:ce:b4:f4:9e:19:2f:e0:7a:dd:d0:38:ae:
                    6e:df:5d:b0:44:36:7b:90:59:94:72:6a:fb:73:e9:
                    40:2a:5a:e8:5b:32:3b:f2:97:2c:27:6b:ba:09:ec:
                    69:f5:d8:5c:53:ac:e4:6f:4c:49:1a:a5:e5:fc:54:
                    5a:56:0f:28:34:f4:e8:29:55:8b:3d:33:c3:96:76:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:6A:17:76:6E:6C:65:9E:D8:34:F9:3E:DC:0E:03:B6:A5:34:96
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343061303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:40a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         2d:ec:ba:8c:f1:ee:cd:91:8a:b9:f9:f3:67:e9:27:6f:5f:ea:
         50:d1:aa:17:37:0f:6b:57:30:48:bf:c3:21:67:73:27:91:f3:
         60:40:db:00:a7:99:2f:4a:b6:ee:bf:17:75:fe:60:e9:fe:82:
         69:54:02:66:f8:5b:62:79:14:fa:65:28:e8:19:96:85:c5:89:
         7e:3f:48:9d:29:bf:b4:1d:0e:a2:0f:06:e7:24:d0:ef:25:3c:
         42:58:48:46:cf:7f:ce:8f:c0:63:a9:bd:e4:de:8e:4d:8b:cd:
         f5:fc:3f:f6:a2:11:18:5d:b0:a8:a6:a5:a8:47:e7:e3:f1:2a:
         8f:fc:76:90:8f:22:94:72:df:ef:91:61:37:e4:08:d0:f6:3f:
         9d:df:ae:37:cb:4f:26:d7:c4:23:9a:30:c4:9f:de:16:af:49:
         c6:1f:66:22:7f:be:2a:5c:8f:ff:aa:12:9e:c2:2b:11:16:14:
         75:e2:5e:be:91:25:c5:65:8e:80:24:e0:49:ff:7a:5e:29:e6:
         65:a1:c6:9d:17:92:c5:29:ac:8b:20:b8:f9:7c:bc:8f:d8:6b:
         8f:0c:6f:4f:1e:fd:a4:b4:b1:0b:13:7b:80:e9:42:53:29:ae:
         62:ad:60:b4:a9:17:78:19:05:ff:e0:84:bb:0a:ea:c3:21:53:
         71:e2:8a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net