Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383032303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a383032303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          fa7vtfDsuMupeGBz1iPwcXwo7f4UlighKkPDeSXFBxY=
Subject key identifier:   60:1F:76:75:0A:04:C5:0D:11:07:CA:12:21:F4:09:F8:B6:34:1F:7A
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       3006A3D79429D59893D6B46A203B3CF89B340E77
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383032303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:39 +0000
ROA not before:           Sat 29 Jul 2023 16:21:39 +0000
ROA not after:            Sat 27 Jul 2024 16:26:39 +0000
asID:                     269194
IP address blocks:        2804:60d4:8020::/43 maxlen: 43

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:06:a3:d7:94:29:d5:98:93:d6:b4:6a:20:3b:3c:f8:9b:34:0e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:39 2023 GMT
            Not After : Jul 27 16:26:39 2024 GMT
        Subject: CN=601F76750A04C50D1107CA1221F409F8B6341F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:04:d8:16:d1:a0:ce:cb:40:8f:fc:86:86:
                    fa:10:7b:cb:f6:cf:25:7a:30:14:2b:1d:12:6c:80:
                    18:da:e3:e9:4b:d8:d8:c1:33:bb:fc:ac:d2:7e:fe:
                    e2:c3:6c:42:0d:f7:09:ee:e3:42:83:50:f5:60:a3:
                    15:6c:ed:02:eb:bb:94:8c:02:39:ae:b3:9c:3d:84:
                    37:fc:35:4d:cb:0b:1b:1a:8b:59:9a:6c:0b:68:04:
                    da:07:6b:77:cc:67:63:a8:d3:77:e6:0d:93:f2:e3:
                    0d:e4:39:2d:0e:60:16:8b:e8:8b:d8:98:3e:c6:31:
                    4f:20:99:c0:ab:aa:f8:70:05:c2:36:80:dc:0e:29:
                    b7:ba:2d:73:2c:13:af:bc:bc:92:e9:ac:c8:4a:e7:
                    bd:6d:0c:3c:72:0f:5d:a3:9b:d7:05:64:51:b1:20:
                    bd:c6:d1:46:5d:6d:8b:22:14:22:7d:b7:d7:7d:dc:
                    98:6b:db:22:c8:2d:62:fe:20:e9:c7:9b:b7:9b:bd:
                    4d:0f:32:ee:38:b6:65:d7:57:36:a4:e8:8a:35:7d:
                    4a:0e:0c:af:d5:c3:b6:24:98:24:01:35:93:84:a9:
                    a7:a4:aa:aa:c3:fe:da:9c:91:f2:dd:4c:9b:ae:53:
                    1f:d7:2a:8f:4c:f2:93:9a:a7:2d:9c:b7:51:b0:9c:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1F:76:75:0A:04:C5:0D:11:07:CA:12:21:F4:09:F8:B6:34:1F:7A
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383032303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:8020::/43

    Signature Algorithm: sha256WithRSAEncryption
         a1:14:19:ec:92:96:6d:d9:ca:a7:31:f6:8d:79:73:c6:52:77:
         54:e7:4c:29:89:68:dd:ad:68:91:87:b1:1f:b7:5a:d3:ef:83:
         b9:f2:0b:a6:02:6a:7f:80:9f:55:ce:bf:64:46:1e:b1:fb:49:
         b4:c6:a7:52:54:ab:a6:8c:53:a2:9f:00:87:ae:bc:36:de:3a:
         f8:fe:07:85:ea:71:ea:06:15:58:ad:80:38:65:8b:ad:95:ca:
         7d:f0:c7:cb:a7:96:1c:b5:97:c5:82:52:a6:3d:73:c0:e7:7c:
         c7:96:63:de:6d:02:e1:b5:6b:c7:b6:d1:ab:19:32:61:be:26:
         30:d9:79:65:83:86:82:78:8e:7a:21:b1:9f:1e:5c:23:1c:f8:
         6f:8a:28:dc:27:8a:46:60:51:4b:01:c6:9d:f0:dc:2a:80:9c:
         22:d7:14:69:1a:03:d9:a2:52:ac:43:e5:09:73:31:dc:c4:fc:
         85:a3:98:db:8c:a7:ed:6a:40:2e:41:ea:07:92:3c:67:05:f7:
         d0:e0:66:25:2b:79:e7:da:ab:b0:0c:f5:c3:1e:cb:2c:b8:b8:
         81:9b:33:d1:f8:47:f2:f1:8f:ad:a6:b4:27:aa:51:66:dc:b7:
         f5:5d:7f:07:b8:29:2a:6a:aa:f8:87:ab:b5:45:2c:e0:37:3e:
         c9:b9:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net