Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032333a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032333a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          GW26hU7KuwAZpetV//jfGUV70c3lEJ+gFl8KM0VzVQ4=
Subject key identifier:   0C:70:8E:64:39:48:CA:B1:E3:C9:23:43:50:B2:A9:7A:1C:98:E3:D4
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       47546F54BD44791C178EBD1F51E320624A95D0BE
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032333a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:40 +0000
ROA not before:           Sat 29 Jul 2023 16:21:40 +0000
ROA not after:            Sat 27 Jul 2024 16:26:40 +0000
asID:                     269194
IP address blocks:        2804:60d4:7023::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:54:6f:54:bd:44:79:1c:17:8e:bd:1f:51:e3:20:62:4a:95:d0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:40 2023 GMT
            Not After : Jul 27 16:26:40 2024 GMT
        Subject: CN=0C708E643948CAB1E3C9234350B2A97A1C98E3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:9c:70:13:75:3c:f8:c8:7a:54:52:db:59:
                    74:e4:d2:b0:08:f7:14:c7:72:42:e6:09:74:f8:bb:
                    30:8f:71:1f:4e:28:d8:c4:66:fa:cd:1b:d3:08:00:
                    29:9f:37:d0:53:5f:a3:05:b0:5a:fa:71:5b:25:04:
                    44:c8:38:a5:d6:af:8c:0e:08:b8:94:42:ed:17:13:
                    66:ac:11:7b:4e:ac:ae:cd:37:10:4e:4f:b6:e0:0d:
                    a5:61:a7:d5:f9:54:4c:81:c0:6c:82:67:68:ec:01:
                    9b:10:0d:79:a9:62:d9:9b:05:8b:b4:88:2a:eb:46:
                    fd:51:83:6a:b6:eb:5d:d4:da:87:2f:aa:1a:7b:ee:
                    60:ad:69:a3:ef:bd:9a:8b:ca:f2:41:77:7f:41:4f:
                    c5:2c:10:01:90:2e:9d:42:2d:a8:07:fe:19:70:f9:
                    57:6b:0b:64:81:2e:f5:86:4a:ad:80:01:96:9c:7d:
                    75:80:cd:01:a3:e5:f3:39:6f:ab:bd:43:3b:84:be:
                    1c:09:80:25:d4:9a:26:66:8e:7a:a0:fa:ed:c8:a3:
                    89:79:d4:9d:f5:75:a3:ea:32:be:83:ac:c2:cc:a1:
                    a6:a4:e1:03:32:d5:67:61:af:21:72:24:dc:45:45:
                    51:bc:f1:a5:36:95:2b:e0:33:87:50:8a:bd:1e:40:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:70:8E:64:39:48:CA:B1:E3:C9:23:43:50:B2:A9:7A:1C:98:E3:D4
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032333a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7023::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:3b:3e:f1:b0:e8:b2:59:98:be:d0:b0:94:ee:42:56:d1:6e:
         1d:98:45:9e:4f:84:d0:9f:f5:67:9c:41:5c:82:03:b6:f9:79:
         a2:f8:b1:7a:34:34:af:c7:ef:77:1f:1b:2f:a5:ba:55:51:a0:
         39:d1:bf:6d:6a:3f:4c:04:56:81:b8:09:d1:39:a5:98:07:26:
         84:44:f2:be:f4:5b:b0:04:2a:bb:33:f8:a1:f0:bb:05:44:99:
         1f:e3:cc:2f:18:6b:d1:bb:d3:b2:1c:91:d2:08:ef:44:97:3d:
         7e:1d:f4:86:a1:d2:15:5b:3a:ad:81:53:ae:af:0b:5d:5b:36:
         7d:2f:38:c9:36:b6:09:9d:13:0b:8c:56:fe:95:72:99:34:39:
         33:b3:fc:05:d1:8e:67:a1:d1:f5:ae:cb:dc:c2:c0:d0:f1:48:
         fc:66:b0:19:3a:33:6f:09:7d:b8:a3:64:22:7a:0d:aa:81:bf:
         8b:51:61:22:a9:24:d6:7f:df:cd:85:1d:0b:b8:ad:48:d8:01:
         94:e4:53:cf:70:1d:06:38:26:e8:d6:ab:6e:45:a2:40:4e:c7:
         93:0d:ce:94:a6:d0:77:af:63:8a:0b:fd:c8:21:10:5b:06:42:
         53:4a:d3:94:bd:78:86:d6:3e:2c:03:c4:fd:bd:d0:14:92:3b:
         22:e1:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net