Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032353a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032353a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          vtW8lNwIiVXM00myjkP/Fx81cfYsG6R/YAI9iMb8PQE=
Subject key identifier:   04:45:4F:38:E4:36:75:8D:31:D8:45:20:49:F9:E1:E6:D1:5C:FC:F0
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       229385DCC6CAAA066EA396B40DDF93ED33A4B0DC
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032353a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:38 +0000
ROA not before:           Sat 29 Jul 2023 16:21:38 +0000
ROA not after:            Sat 27 Jul 2024 16:26:38 +0000
asID:                     269194
IP address blocks:        2804:60d4:7025::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:93:85:dc:c6:ca:aa:06:6e:a3:96:b4:0d:df:93:ed:33:a4:b0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:38 2023 GMT
            Not After : Jul 27 16:26:38 2024 GMT
        Subject: CN=04454F38E436758D31D8452049F9E1E6D15CFCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:03:f0:c3:90:e3:54:3b:59:92:f7:a6:64:c5:
                    50:9d:b7:80:0d:30:b1:c1:d4:db:63:ca:fe:52:2c:
                    56:27:36:ff:a0:f9:eb:6e:43:13:b9:bb:d9:9b:59:
                    e1:3a:98:fb:8d:f6:d8:f6:85:2e:35:6c:57:85:c2:
                    5d:f2:32:01:93:93:d1:a0:6c:81:34:c7:5d:47:22:
                    27:3a:05:fc:2e:c2:af:ce:43:17:ed:af:8d:ef:53:
                    94:c3:c6:a0:86:a4:85:16:a9:a3:9e:9e:d2:a4:55:
                    04:d2:e3:ea:9c:3a:fc:0a:c8:12:96:40:36:ab:2d:
                    3d:21:78:5f:a8:70:7d:4b:15:14:50:8a:8c:c1:cb:
                    7a:58:0d:2e:9f:90:19:22:d1:62:5d:39:e7:6b:c7:
                    e6:62:45:91:70:a2:c9:53:3b:17:2f:8b:de:26:4b:
                    af:7f:ff:52:43:ff:26:1e:fd:24:3b:96:8f:ac:37:
                    53:28:ba:dd:18:c0:57:bb:5a:b2:ca:e9:b3:c4:19:
                    c0:75:6e:62:2e:88:1a:20:a0:a6:27:dd:5c:34:05:
                    b2:5a:15:ee:dd:df:c2:98:61:b8:f5:8d:dc:7b:2d:
                    1b:e8:05:43:71:7d:09:3b:6b:4e:f5:50:9c:a0:92:
                    ca:a8:a0:fa:6e:f5:0a:b9:6d:d2:e5:d2:ba:18:b0:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:45:4F:38:E4:36:75:8D:31:D8:45:20:49:F9:E1:E6:D1:5C:FC:F0
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032353a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7025::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:1f:51:10:12:57:36:64:c2:b4:89:63:b0:7d:32:98:60:df:
         42:62:7e:75:00:29:ff:16:43:c9:8e:6d:a9:20:f3:c8:ee:92:
         5d:79:14:4c:e2:67:3e:0d:5a:7c:f3:21:6f:68:a9:cf:dd:1a:
         dd:4c:d9:51:8b:d6:84:ad:d2:95:24:5c:6a:8b:53:6b:ed:4a:
         52:a4:6d:6c:77:96:a8:45:ce:48:bd:84:43:d8:d5:8f:60:d1:
         c8:f2:8b:0c:d2:71:3d:c7:4f:1b:6a:47:47:56:b4:bd:02:a0:
         b7:be:49:fe:dc:a1:46:98:97:47:60:09:e7:c2:bb:18:7f:38:
         0f:63:03:9f:ea:29:03:bd:1a:f9:97:ec:06:51:f2:36:9c:9a:
         e6:1d:a6:87:a9:67:00:b1:6a:31:87:d3:33:9c:cc:0a:24:ec:
         7a:cf:c2:41:af:a1:c7:81:82:e2:47:a5:67:79:b4:b5:3f:96:
         39:72:8e:c4:be:60:e8:53:fd:da:b1:56:53:f6:3d:c1:4a:ba:
         73:d4:9d:61:f4:92:53:e7:92:25:8c:2f:85:7f:75:e9:f1:46:
         0f:fe:37:f9:08:0d:e4:0a:39:96:98:e1:d9:65:7f:bf:0f:0d:
         44:74:46:fd:cb:28:dc:16:62:35:f6:b4:11:23:24:29:90:16:
         ba:bc:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net