Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030353a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373030353a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          V97EhCaRC5YLTAZBkFqHioDzqB7I2Qu/ZTIyJ+8AnBs=
Subject key identifier:   DC:3D:E7:DC:67:56:2A:B2:6D:84:6F:56:60:97:F5:F2:E6:A9:BF:F6
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       7958CAB94E76A65954BEF6857464F0C7C9395353
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030353a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:42 +0000
ROA not before:           Sat 29 Jul 2023 16:21:42 +0000
ROA not after:            Sat 27 Jul 2024 16:26:42 +0000
asID:                     269194
IP address blocks:        2804:60d4:7005::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:58:ca:b9:4e:76:a6:59:54:be:f6:85:74:64:f0:c7:c9:39:53:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:42 2023 GMT
            Not After : Jul 27 16:26:42 2024 GMT
        Subject: CN=DC3DE7DC67562AB26D846F566097F5F2E6A9BFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:93:ab:24:71:f9:dc:18:04:c7:e6:62:92:
                    ec:e9:23:dd:fe:76:09:7d:1c:b9:c0:f5:ab:06:b0:
                    0f:95:fb:7b:4d:db:66:58:98:58:e5:e1:d5:91:7c:
                    9a:ca:6e:8c:0d:7e:18:df:de:b7:19:db:13:8c:09:
                    1f:5a:03:7b:35:0c:33:43:31:81:46:07:a0:b0:09:
                    c9:34:1c:f2:5c:ce:12:92:50:39:c8:1b:79:e3:6f:
                    6e:bc:de:74:36:55:73:b8:bf:bf:5e:f3:87:18:cc:
                    fc:e6:69:4e:1e:46:26:0c:fb:af:d5:7c:d0:32:7e:
                    d1:6a:b7:88:02:1e:cf:2a:eb:9d:88:f2:87:52:98:
                    78:33:e8:ec:59:87:49:0b:5b:c5:e9:ed:a1:52:e3:
                    e3:4a:1a:d1:87:b6:56:00:09:90:33:1b:43:9e:4b:
                    05:09:88:f1:f0:b8:05:32:eb:26:31:c2:f3:1b:02:
                    cd:0f:ab:7c:cf:50:aa:2e:5d:40:26:52:1f:27:42:
                    14:56:0b:d6:ad:3c:00:80:70:33:b4:5c:fc:ac:d4:
                    01:81:df:5b:36:87:0b:85:1f:71:ee:af:94:2b:f4:
                    b3:8a:3a:d1:82:e2:ba:02:31:cc:f8:e3:a5:f1:22:
                    76:9e:a9:ae:2b:a5:28:e7:97:aa:ed:7d:ca:ef:31:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3D:E7:DC:67:56:2A:B2:6D:84:6F:56:60:97:F5:F2:E6:A9:BF:F6
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030353a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7005::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:11:ae:f7:f7:6e:1e:e3:f6:08:d6:08:e9:74:a6:47:57:e9:
         7d:4c:70:e9:eb:8d:dc:cd:80:47:e7:92:a0:fa:c4:e9:6b:51:
         3f:48:af:ff:67:d2:31:74:cb:1b:7a:79:4d:ae:ab:10:de:f5:
         24:ce:e1:c2:09:2d:23:aa:3a:e1:21:2c:fa:73:ff:0f:24:2f:
         44:4f:5c:ea:4b:be:aa:45:d5:1e:5b:5e:15:08:52:4e:b3:46:
         3d:83:38:aa:df:08:d9:bc:05:07:1a:0b:bb:7d:14:f4:60:ab:
         d1:cd:95:15:a4:8d:23:5b:5d:b3:27:04:ce:51:6c:0a:0d:61:
         b3:ca:f2:8d:48:90:be:7b:11:60:13:b3:00:b8:9e:9e:81:92:
         41:2b:f3:cc:40:2b:86:20:a5:90:b6:61:17:75:be:88:5f:41:
         81:45:02:6e:ce:f3:0f:fb:e2:ee:4b:a7:68:f4:e7:12:b3:40:
         bd:c9:12:68:42:20:0d:96:2b:27:b7:61:80:22:cd:8a:af:6c:
         09:62:0b:18:74:8d:fd:b3:b1:d5:22:05:64:c9:80:2b:6a:73:
         2a:4a:7b:17:87:20:ed:77:a0:d0:e7:2f:5a:0d:a3:82:e1:8c:
         3c:0d:ba:9b:5d:ca:3e:90:e8:4f:1e:fe:12:d2:e2:a9:2d:c4:
         22:f7:3b:a4
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUeVjKuU52pllUvvaFdGTwx8k5U1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA3MjkxNjIxNDJaFw0yNDA3MjcxNjI2NDJaMDMxMTAvBgNV
BAMTKERDM0RFN0RDNjc1NjJBQjI2RDg0NkY1NjYwOTdGNUYyRTZBOUJGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4JOrJHH53BgEx+ZikuzpI93+
dgl9HLnA9asGsA+V+3tN22ZYmFjl4dWRfJrKbowNfhjf3rcZ2xOMCR9aA3s1DDND
MYFGB6CwCck0HPJczhKSUDnIG3njb2683nQ2VXO4v79e84cYzPzmaU4eRiYM+6/V
fNAyftFqt4gCHs8q652I8odSmHgz6OxZh0kLW8Xp7aFS4+NKGtGHtlYACZAzG0Oe
SwUJiPHwuAUy6yYxwvMbAs0Pq3zPUKouXUAmUh8nQhRWC9atPACAcDO0XPys1AGB
31s2hwuFH3Hur5Qr9LOKOtGC4roCMcz446XxInaeqa4rpSjnl6rtfcrvMbX/AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU3D3n3GdWKrJthG9WYJf18uapv/YwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzNzMwMzAzNTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEYNRwBTANBgkqhkiG9w0BAQsF
AAOCAQEARhGu9/duHuP2CNYI6XSmR1fpfUxw6euN3M2AR+eSoPrE6WtRP0iv/2fS
MXTLG3p5Ta6rEN71JM7hwgktI6o64SEs+nP/DyQvRE9c6ku+qkXVHlteFQhSTrNG
PYM4qt8I2bwFBxoLu30U9GCr0c2VFaSNI1tdsycEzlFsCg1hs8ryjUiQvnsRYBOz
ALienoGSQSvzzEArhiClkLZhF3W+iF9BgUUCbs7zD/vi7kunaPTnErNAvckSaEIg
DZYrJ7dhgCLNiq9sCWILGHSN/bOx1SIFZMmAK2pzKkp7F4cg7Xeg0OcvWg2jguGM
PA26m13KPpDoTx7+EtLiqS3EIvc7pA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net