Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031323a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373031323a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          IRfs5lzn39bNk3M9JfbpEQdqZrEZ2OSXzYL1tGwqXk8=
Subject key identifier:   E1:49:BA:23:2C:A9:2F:44:C1:F6:90:F0:A3:9E:5A:49:0B:5A:7C:9D
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       2C114D2FFEA9219A151B02A44DD7072506EC4ECD
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031323a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:41 +0000
ROA not before:           Sat 29 Jul 2023 16:21:41 +0000
ROA not after:            Sat 27 Jul 2024 16:26:41 +0000
asID:                     269194
IP address blocks:        2804:60d4:7012::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:11:4d:2f:fe:a9:21:9a:15:1b:02:a4:4d:d7:07:25:06:ec:4e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:41 2023 GMT
            Not After : Jul 27 16:26:41 2024 GMT
        Subject: CN=E149BA232CA92F44C1F690F0A39E5A490B5A7C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:73:0e:31:51:6b:68:6b:98:13:7c:53:58:
                    61:8c:6a:09:2b:ce:32:17:9e:2c:77:83:66:90:01:
                    7e:f2:42:5a:47:36:27:83:be:81:da:3e:88:74:41:
                    39:03:09:eb:5c:d8:cb:6b:25:05:d9:4b:67:ff:00:
                    51:08:a1:cc:8b:37:3b:b6:e2:1e:03:cc:f0:39:45:
                    03:04:54:75:c1:6d:59:58:d5:1d:f6:70:fd:10:0e:
                    4a:46:14:5a:7b:d5:89:f5:a0:ac:4a:16:ca:ad:b0:
                    cf:dc:b3:f3:1c:3f:97:a5:60:ac:7e:72:ed:15:c0:
                    fc:77:41:e3:f6:84:c2:01:fb:6f:bd:6d:31:93:d6:
                    f0:3c:69:e2:08:b9:ea:eb:73:20:aa:16:06:1f:2f:
                    86:83:ae:6e:0a:c5:fd:38:b0:ae:c8:b4:af:25:29:
                    c1:67:ca:66:77:af:c4:51:ec:76:c1:3b:68:fb:e3:
                    7f:81:c3:20:be:29:bd:b3:18:2c:50:69:f1:c8:92:
                    e8:f7:ec:19:bd:0b:69:74:39:c6:6e:41:77:c5:b5:
                    30:8c:9c:8a:6f:b8:99:3a:f2:57:77:d5:66:99:91:
                    64:d4:e5:b9:b6:7d:db:dd:e0:78:f4:f6:3e:43:0a:
                    6b:22:6e:77:03:c0:c6:22:29:79:f8:91:da:51:87:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:49:BA:23:2C:A9:2F:44:C1:F6:90:F0:A3:9E:5A:49:0B:5A:7C:9D
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031323a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7012::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:cf:2c:9f:8c:cd:ad:4d:b5:7c:51:5c:3e:ea:cf:2e:ad:05:
         4c:e6:79:a6:92:dc:f5:19:17:7a:dc:de:7d:35:fb:74:cb:1f:
         0d:be:d3:d0:69:3d:55:3f:0c:4f:f5:89:0a:88:5f:66:d2:d7:
         d4:32:ad:d9:87:2d:2e:cc:e9:ac:cc:26:0c:71:56:cd:c8:3f:
         1a:57:53:59:c9:48:64:f7:87:9b:6e:43:ff:c3:32:7c:04:7b:
         a0:94:c6:5d:37:34:be:c5:8d:10:46:40:62:78:1d:65:41:08:
         00:bf:a9:bd:af:fc:f0:4b:b3:84:de:2a:b7:88:97:c2:d4:d5:
         b6:02:8e:6d:f8:82:ae:02:94:ca:f2:bb:69:d1:2d:59:a0:3b:
         0c:3b:2e:56:0b:79:bb:5b:1e:da:df:61:96:43:1e:78:4e:70:
         be:8c:86:b8:13:97:94:c5:d7:4c:47:f6:8b:1a:23:b4:66:f2:
         98:c1:fd:85:a4:f9:05:31:5e:af:43:9d:6a:17:d2:00:8f:db:
         42:db:ef:c8:f4:c9:3d:8f:81:13:d3:cd:56:70:93:84:fc:a9:
         01:63:f5:c4:6f:16:66:73:42:28:9b:2a:3e:9d:b6:3b:bc:8c:
         09:cd:3f:ab:59:f7:ee:44:77:1b:d6:7f:18:91:a7:24:01:46:
         f2:55:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net