Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343065303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343065303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          Vj0R9447sB1ZOMx7PU0+xp+fEGOvYerqUFqu2riZ+zc=
Subject key identifier:   09:20:B5:5A:AE:F4:CE:8A:FB:45:A0:25:49:66:B9:48:8C:A9:FD:21
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       6414A795378B37C282C40CB9F3E0626476E3141F
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343065303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:42 +0000
ROA not before:           Sat 29 Jul 2023 16:21:42 +0000
ROA not after:            Sat 27 Jul 2024 16:26:42 +0000
asID:                     269194
IP address blocks:        2804:60d4:40e0::/43 maxlen: 43

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:14:a7:95:37:8b:37:c2:82:c4:0c:b9:f3:e0:62:64:76:e3:14:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:42 2023 GMT
            Not After : Jul 27 16:26:42 2024 GMT
        Subject: CN=0920B55AAEF4CE8AFB45A0254966B9488CA9FD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:26:3c:62:ae:07:5d:0b:61:a5:1f:fe:25:
                    bb:87:d1:ed:27:d5:d2:eb:9e:ac:18:b6:fe:b7:e4:
                    8d:dc:c6:6e:07:64:c3:af:cf:3b:83:da:74:d8:d3:
                    e6:b4:6d:4c:73:9b:87:c5:29:d7:8d:c6:61:7e:88:
                    2d:7b:7d:98:17:42:17:6d:f8:b8:d8:93:4d:37:24:
                    6c:33:d5:81:8b:9e:ff:2c:01:eb:38:51:01:db:9b:
                    99:05:3a:9d:76:4a:34:15:42:45:41:e5:c5:d4:95:
                    69:da:db:11:ae:6d:78:8a:f1:43:3c:bb:b0:43:4f:
                    2c:41:54:1d:f6:8b:99:bf:a5:69:63:97:4b:22:9b:
                    a7:d2:c1:81:fb:a4:da:34:3c:00:12:1a:a9:a0:84:
                    d3:e4:e5:44:85:40:43:63:e3:ce:f5:b7:33:a3:c4:
                    28:94:b4:18:a8:c1:a1:0b:78:49:2c:b2:89:00:ca:
                    9d:96:c2:c9:c0:f2:3f:6e:d2:79:ce:39:9a:6f:97:
                    c9:dd:ad:9c:ba:2f:7c:68:1c:f0:b6:d9:60:60:ae:
                    37:19:50:d2:ac:b0:65:64:10:98:eb:45:fa:ad:28:
                    3c:d0:d3:f1:91:87:dc:e3:10:a2:08:c9:63:5e:ea:
                    98:62:1c:1d:48:da:5e:ec:d3:39:80:bc:85:f5:7e:
                    90:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:20:B5:5A:AE:F4:CE:8A:FB:45:A0:25:49:66:B9:48:8C:A9:FD:21
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343065303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:40e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:fa:6e:79:e6:5c:f2:31:60:01:ac:65:bd:21:fb:37:84:
         0d:90:b3:71:14:3c:88:59:f5:4d:61:2c:63:d2:d9:a4:a1:f4:
         33:de:c1:57:db:28:ac:a4:23:aa:56:da:c2:bf:7f:90:5c:3f:
         7c:da:e5:98:d8:a9:7e:0e:f3:77:b3:4d:85:51:0b:9a:fe:4c:
         8f:ed:d9:9c:ef:08:1d:2b:c5:a9:07:06:f9:4e:13:6f:61:08:
         eb:ea:09:01:a8:65:32:0a:3b:7e:dd:93:3a:ec:15:af:ce:3a:
         84:56:9b:0d:1b:12:a2:03:db:df:41:81:0a:89:18:bc:fa:e3:
         0e:07:50:37:bf:e0:4e:11:9a:f7:2a:27:a1:0b:4e:b6:fb:e6:
         1c:e5:ce:19:5e:7d:f5:9c:6a:85:3f:f0:6c:67:67:91:1e:f4:
         d6:c3:fa:63:6a:c7:07:a5:48:b8:cd:30:fa:5f:85:cc:ce:6a:
         8c:a2:b9:2d:06:61:84:76:8a:d4:e3:22:86:2e:29:fd:30:fc:
         57:82:39:a3:0f:3a:3a:b3:1e:c9:ed:b1:b5:df:e7:c6:53:6d:
         76:79:26:84:05:82:32:8f:46:17:40:39:32:6c:28:71:1a:22:
         d4:00:fa:52:a3:b8:b3:5b:61:55:4d:da:bd:cb:9b:06:3a:60:
         2c:56:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net