Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032323a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032323a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          VH2wyONvpg6aY/FNlhQdtewQgpKb+XXPZ5cs9X2Cg2o=
Subject key identifier:   FC:EC:0F:85:FC:C0:6B:CC:8F:39:57:45:73:6A:C8:89:FD:33:AA:DE
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       5031B29ED7FD05083280399699EAD29F1F91A1F1
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032323a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:38 +0000
ROA not before:           Sat 29 Jul 2023 16:21:38 +0000
ROA not after:            Sat 27 Jul 2024 16:26:38 +0000
asID:                     269194
IP address blocks:        2804:60d4:7022::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:31:b2:9e:d7:fd:05:08:32:80:39:96:99:ea:d2:9f:1f:91:a1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:38 2023 GMT
            Not After : Jul 27 16:26:38 2024 GMT
        Subject: CN=FCEC0F85FCC06BCC8F395745736AC889FD33AADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:ed:41:d7:54:96:77:b0:5a:44:09:72:86:
                    04:26:c3:2d:b9:8e:c3:7b:5b:cf:d1:a1:8f:6b:97:
                    1b:18:0c:99:4f:5c:e4:1c:fa:a9:b5:e6:f2:ae:2f:
                    39:02:45:9b:7c:8a:02:b6:2e:7f:ae:ce:47:a3:c7:
                    ae:f3:5f:bd:31:2f:f9:43:63:a0:be:28:93:f2:b6:
                    de:5a:c0:c4:58:cc:18:aa:41:3a:83:56:00:40:b7:
                    d6:2f:d5:3f:40:59:36:2f:3a:1d:14:7b:4e:41:e8:
                    66:44:2e:3c:34:15:b5:85:7c:bf:4f:c8:9d:e7:49:
                    fd:59:23:8a:dc:57:21:a1:7c:7e:9d:99:9b:22:f4:
                    21:5e:00:c7:f0:34:a4:14:de:58:44:d7:59:84:c8:
                    3e:65:d4:df:7c:77:58:27:7f:5d:34:db:5d:60:04:
                    ee:72:c7:1f:a1:9f:56:a5:41:ea:f9:d9:8f:46:f1:
                    3b:de:dc:a8:6b:c9:60:04:6d:05:ce:b2:5b:42:58:
                    23:43:0f:9e:b3:22:91:6c:d1:71:ee:90:17:f2:50:
                    1e:6f:3f:9b:b7:96:ef:4a:b4:62:22:ef:79:0e:60:
                    9c:2e:32:8b:9a:f1:ca:27:84:df:3e:b7:43:3b:4c:
                    b9:69:4d:0b:84:31:a5:5d:d5:00:2e:7a:d1:46:c8:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:0F:85:FC:C0:6B:CC:8F:39:57:45:73:6A:C8:89:FD:33:AA:DE
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032323a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7022::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:49:42:f9:0e:a8:64:ab:06:bb:89:02:3d:97:7a:44:06:d6:
         1d:22:c8:ef:c0:d1:e5:01:a1:e1:96:6a:00:dc:e5:21:65:60:
         b5:fb:2a:43:ed:a0:48:57:fb:c4:e7:d4:b7:66:92:05:5f:15:
         5b:95:84:39:45:78:fa:7b:c8:21:d7:8e:cf:1a:f2:41:e0:71:
         e9:52:aa:16:8f:c6:11:17:75:e8:45:b8:56:45:40:f8:18:a9:
         c9:ff:8f:d6:7c:9f:6d:76:a9:3e:1e:15:44:d4:6c:8e:16:76:
         a0:c8:af:db:34:b7:59:62:61:f3:3d:af:72:40:3a:39:9c:a1:
         0b:25:41:d3:19:45:98:60:93:6b:ea:3d:47:a0:12:0c:06:bd:
         33:fe:ff:36:e0:df:98:c2:98:72:54:87:c9:57:2e:70:27:32:
         a8:1f:3c:e7:99:1f:41:89:44:b5:49:62:82:8c:7f:9c:c0:64:
         2a:78:a4:90:07:db:80:fc:01:13:dd:b1:48:b8:f9:49:46:34:
         fc:e4:e1:6e:9a:2b:dc:bf:f0:d2:b3:55:c2:18:0b:50:07:8e:
         71:39:bf:3c:bf:f2:55:0a:32:71:f6:b5:1d:21:71:77:f2:82:
         c1:40:96:57:1f:00:4b:d2:0f:03:32:e1:3f:c8:86:09:30:a6:
         5d:11:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net