Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343063303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343063303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          9oqn7nsmDIB17SmZwZb0Oshc8VbiGjNelCaRqA27P2U=
Subject key identifier:   9A:78:BF:04:08:C6:13:4E:DF:E0:31:6F:07:69:5C:82:7F:A1:A2:5E
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       6C60F693992DB7AF3B85E32455183C42201BE43B
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343063303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:39 +0000
ROA not before:           Sat 29 Jul 2023 16:21:39 +0000
ROA not after:            Sat 27 Jul 2024 16:26:39 +0000
asID:                     269194
IP address blocks:        2804:60d4:40c0::/43 maxlen: 43

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:60:f6:93:99:2d:b7:af:3b:85:e3:24:55:18:3c:42:20:1b:e4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:39 2023 GMT
            Not After : Jul 27 16:26:39 2024 GMT
        Subject: CN=9A78BF0408C6134EDFE0316F07695C827FA1A25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:30:49:d9:af:48:70:70:93:04:3b:bf:b2:
                    86:f7:0a:b2:22:8a:6e:a5:03:a3:4c:38:86:9c:6d:
                    df:bd:e2:ca:2e:a6:99:f9:11:c6:49:db:77:21:08:
                    ea:51:2d:8c:f6:1e:61:6a:2f:4d:f6:3d:d1:5a:f7:
                    76:ac:36:dd:11:35:e9:4d:f7:6b:bf:30:c5:e7:9f:
                    a7:05:63:23:95:43:92:83:dc:b2:e4:ee:70:b3:1f:
                    5b:c2:f4:32:44:53:d7:a2:3e:81:32:19:b0:08:d6:
                    05:fe:59:fc:5e:f4:87:16:d2:60:bb:bc:45:ba:4b:
                    c1:01:0a:59:19:8c:25:7b:d4:19:fc:17:29:83:e7:
                    7b:b7:c0:1c:bc:c2:cc:4a:12:c8:84:bf:a3:89:58:
                    c2:43:32:76:ad:99:8f:e8:98:12:30:ac:9f:4c:fa:
                    e2:44:4a:2f:f9:4d:96:9d:38:c3:f0:97:d1:e7:2a:
                    98:db:3c:7c:6c:3c:7b:ed:c9:a0:20:1c:ce:ba:63:
                    10:db:32:47:de:2a:6b:12:10:1e:7d:2f:3d:ea:40:
                    f2:c2:94:14:95:9b:d0:93:94:3c:86:4d:50:0e:11:
                    10:5f:ff:e3:ed:4d:3b:6e:c8:eb:30:d4:06:f6:1f:
                    c4:0e:64:90:a0:d9:c2:a9:b6:43:fd:f7:fc:da:34:
                    d0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:78:BF:04:08:C6:13:4E:DF:E0:31:6F:07:69:5C:82:7F:A1:A2:5E
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343063303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:40c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         13:3d:5d:20:34:d1:c3:b6:7d:d7:60:58:a3:1b:ad:07:62:a7:
         e2:3d:93:36:08:ee:cb:10:8a:81:41:5f:87:d1:cb:19:f6:70:
         d7:cc:8f:37:4d:3c:75:50:ef:c0:1d:ab:27:18:bc:1c:d2:26:
         8b:8e:15:f9:ca:67:c0:3b:e1:e3:72:ba:ad:e3:eb:a8:aa:e8:
         6c:36:78:20:9b:4c:0e:41:47:37:00:3f:96:ee:47:73:0a:81:
         2b:75:1d:a8:94:2e:20:38:63:6d:c8:b9:7b:b4:94:61:86:4a:
         2b:cb:fa:94:a0:9b:22:09:34:ee:f4:4a:f8:c1:18:dd:ab:23:
         bb:c8:fd:77:3e:b7:13:e6:0b:93:a7:15:7c:08:c6:4b:8f:37:
         90:b6:d2:b5:cf:62:bf:e4:4a:f0:6f:f5:60:43:8f:9d:7f:5c:
         ed:e0:05:09:00:84:62:64:17:24:1d:ec:d8:73:67:99:b0:1d:
         6d:32:f3:d4:cf:20:15:04:fe:52:e2:4a:c2:48:a5:91:ed:07:
         c5:90:6e:55:a2:84:1b:3e:90:c1:5f:1f:a5:32:32:59:49:de:
         b1:fa:ad:f2:ac:10:b5:0f:f4:09:e7:f9:82:9f:a6:13:0f:fb:
         db:dc:f6:f6:44:52:a4:d8:8f:b8:de:d7:3b:a9:b5:bb:86:c3:
         ed:fb:b6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net