Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383038303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a383038303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          XYRaPGXiT5V1hMf1deYBFIVxAGcaPx6MFx6WUdJS94E=
Subject key identifier:   9D:D3:68:61:45:FB:87:B3:A0:80:3D:7E:F2:4E:A0:F4:DF:BB:A2:E9
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       2D6C3A5FE03AC6F29DE7B3BD3FEC7D04BDF8EAD3
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383038303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:37 +0000
ROA not before:           Sat 29 Jul 2023 16:21:37 +0000
ROA not after:            Sat 27 Jul 2024 16:26:37 +0000
asID:                     269194
IP address blocks:        2804:60d4:8080::/43 maxlen: 43

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6c:3a:5f:e0:3a:c6:f2:9d:e7:b3:bd:3f:ec:7d:04:bd:f8:ea:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:37 2023 GMT
            Not After : Jul 27 16:26:37 2024 GMT
        Subject: CN=9DD3686145FB87B3A0803D7EF24EA0F4DFBBA2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:5d:44:5e:92:59:6c:87:c8:f1:5c:62:6e:
                    db:96:54:b2:c3:4d:95:11:97:71:76:ea:3b:ed:2b:
                    cf:7e:13:99:a6:45:bf:43:c4:26:b5:8e:5e:83:56:
                    dc:72:28:5f:d6:db:5b:0b:8e:04:9c:df:b5:5c:ff:
                    d4:24:aa:49:a7:d6:40:41:a9:38:f0:11:05:b2:41:
                    d5:90:ea:b1:29:35:77:1b:66:94:66:26:a5:12:3d:
                    5b:be:9b:8b:29:74:ec:47:e3:60:5f:94:17:d9:93:
                    2e:44:96:02:4c:cc:50:f1:30:72:61:81:29:4e:1c:
                    94:94:16:1f:79:d1:43:f8:4a:4c:44:1f:85:f3:62:
                    e7:99:da:4a:79:c8:95:49:13:31:ca:9c:59:46:76:
                    5a:e6:75:45:67:44:9c:30:d5:fe:bc:d4:ff:40:36:
                    f1:a3:ca:67:3e:81:d7:6c:ed:91:da:d5:4d:4a:c7:
                    41:5f:ed:16:9b:2f:31:88:d9:3d:88:99:15:8c:de:
                    1f:37:ad:65:93:07:e1:81:3e:2c:b2:94:cf:35:8f:
                    49:3c:df:bb:27:ec:3f:46:90:73:6a:37:a0:92:e0:
                    ff:bb:dc:9f:b5:47:82:ee:bf:f4:20:70:31:68:a7:
                    61:32:09:88:97:70:f1:62:00:fb:ca:29:70:7d:14:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D3:68:61:45:FB:87:B3:A0:80:3D:7E:F2:4E:A0:F4:DF:BB:A2:E9
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383038303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:8080::/43

    Signature Algorithm: sha256WithRSAEncryption
         a6:2c:06:b2:94:a3:b9:56:2b:8f:76:4d:b4:fb:19:5d:a5:88:
         48:8a:89:b6:05:fd:d0:ac:f1:9c:5a:8e:06:49:1e:e5:04:bd:
         2d:b6:60:8e:26:b4:47:ae:6f:76:5c:47:09:a4:44:f2:39:13:
         e0:e1:3b:d7:8e:ef:c7:00:b1:f0:ea:b6:a7:07:4d:2b:76:95:
         b6:f3:dd:99:74:ec:97:a1:2a:22:00:d1:09:6b:ca:dd:4c:5d:
         c5:14:ff:40:0a:32:c2:9e:93:dc:a0:c0:fa:36:d0:c0:6d:d0:
         b3:d9:30:92:03:8a:ee:99:9e:0d:07:14:c8:57:a0:ca:a4:f2:
         26:d7:7a:04:76:1c:86:97:15:34:51:8d:66:50:db:32:5e:e6:
         39:4a:a1:09:41:7d:8c:20:1b:17:81:84:38:f0:3f:78:da:35:
         d4:bb:4c:d3:10:43:a5:51:f9:49:2f:c4:35:88:70:69:5a:66:
         65:ea:8f:c1:5f:c3:4e:f7:cd:91:1e:fd:be:0e:aa:53:cd:89:
         c3:46:6d:33:71:87:bb:ec:66:e1:60:3d:c0:40:c9:5d:20:4b:
         6d:64:96:b6:6c:6c:b6:93:a2:59:6c:e0:0d:87:2e:f7:bf:9c:
         df:5f:eb:85:4f:ae:17:4b:66:6e:af:43:05:6f:7d:43:ba:99:
         f3:41:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net