Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3332203d3e20323733343539.roa
File:                     323830343a386566383a3a2f33322d3332203d3e20323733343539.roa (raw, json)
Hash identifier:          meV8qreiViM8TKe4t5v1F3Z6KsKUNBX62xYBvzbZwWw=
Subject key identifier:   F2:FF:47:FD:6D:35:33:12:97:BE:7B:09:CF:3F:4A:58:1F:16:42:CC
Certificate issuer:       /CN=60394DEF47E6D547EE9A7D8544543C8F0B072BDA
Certificate serial:       1FBA956C63AFEC8316C8542072E5D25257BB64BD
Authority key identifier: 60:39:4D:EF:47:E6:D5:47:EE:9A:7D:85:44:54:3C:8F:0B:07:2B:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3332203d3e20323733343539.roa
Signing time:             Tue 26 Nov 2024 16:16:21 +0000
ROA not before:           Tue 26 Nov 2024 16:11:21 +0000
ROA not after:            Tue 25 Nov 2025 16:16:21 +0000
asID:                     273459
IP address blocks:        2804:8ef8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 26 Nov 2024 22:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ba:95:6c:63:af:ec:83:16:c8:54:20:72:e5:d2:52:57:bb:64:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60394DEF47E6D547EE9A7D8544543C8F0B072BDA
        Validity
            Not Before: Nov 26 16:11:21 2024 GMT
            Not After : Nov 25 16:16:21 2025 GMT
        Subject: CN=F2FF47FD6D35331297BE7B09CF3F4A581F1642CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:69:9d:07:9a:45:c1:e9:68:ed:54:8d:d6:
                    3d:76:00:d4:4f:4c:0b:3a:a9:d6:1a:5f:fd:7c:b7:
                    d9:15:3c:2a:d6:53:e8:4e:bf:10:77:2f:c7:8f:e0:
                    41:77:c6:4c:7e:95:8f:fa:4a:fd:f0:0e:cd:ff:86:
                    7c:fe:48:00:b2:f5:de:2b:b1:ca:9a:89:fb:ae:37:
                    8b:27:4f:aa:c9:d6:7b:16:60:be:1c:e5:12:97:17:
                    a5:ee:bd:53:c5:09:33:fc:21:33:2f:56:75:0f:40:
                    4f:75:4e:39:d5:98:ac:40:59:5e:69:4b:e7:69:fa:
                    10:10:79:9c:81:e3:20:8f:56:22:7e:19:4b:f5:d3:
                    ab:c5:f6:1f:6e:88:14:d1:d0:b7:b2:8e:00:62:10:
                    ac:b2:f0:41:03:7c:f9:a5:ca:92:c1:1b:77:b4:e8:
                    dd:d9:83:5e:bb:85:9c:d2:f1:7e:c0:ae:f6:0c:7c:
                    63:3a:05:6c:97:51:ed:11:56:4c:8b:d5:f1:73:e0:
                    bf:dc:39:79:d0:af:f4:1f:1c:b7:63:13:60:77:ad:
                    01:51:d3:6a:3a:d2:cd:16:08:a0:01:f8:7d:87:71:
                    df:ad:a7:69:9d:5f:76:46:8c:ee:c2:12:21:0d:79:
                    02:9e:d1:00:47:0b:f9:af:1d:68:49:6b:5c:db:a9:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FF:47:FD:6D:35:33:12:97:BE:7B:09:CF:3F:4A:58:1F:16:42:CC
            X509v3 Authority Key Identifier:
                keyid:60:39:4D:EF:47:E6:D5:47:EE:9A:7D:85:44:54:3C:8F:0B:07:2B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3332203d3e20323733343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:bd:ca:53:a2:72:13:91:06:9b:38:37:c1:23:02:3c:5f:8e:
         23:b0:f4:a4:6d:dc:c7:92:40:72:e4:fa:36:9a:1d:75:17:c0:
         bc:b2:f1:31:f8:cb:35:0e:96:fe:af:b5:18:4c:dd:18:f7:46:
         64:7b:fb:09:95:97:0c:f2:65:48:7c:7e:c7:40:77:8e:8e:36:
         09:c4:47:2d:77:4b:16:f6:eb:5d:86:62:a8:58:f4:22:5f:fe:
         28:6a:d9:75:f7:70:18:39:55:26:8a:81:9f:e8:9a:53:51:bd:
         8a:c3:fe:34:71:9a:9a:bc:d2:e0:03:c5:40:a3:85:88:39:5d:
         09:0f:d5:88:a3:29:76:4e:b9:2b:68:48:eb:71:f1:d5:5f:18:
         66:88:b6:ba:35:fb:09:e4:24:15:01:08:34:eb:cd:43:72:0e:
         31:ef:07:06:d4:87:51:91:b8:0e:a2:94:e0:cf:e5:6d:4d:c4:
         87:87:a0:92:79:0e:bb:c9:db:22:cb:a4:e9:cb:81:c1:09:91:
         7d:f0:9c:a6:a9:a9:bc:00:86:2c:a4:a0:b7:a5:79:9b:9e:a4:
         09:68:c2:f2:be:da:9d:da:83:d5:a9:51:1c:b5:ad:91:b4:00:
         b1:69:57:53:5a:6f:ef:73:07:c8:00:d5:22:73:7c:ca:52:63:
         2a:55:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:15:40 2024 by rpki-client on console.sobornost.net