Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a313030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a313030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          Bev5FWveT5U7Med2BuYQGiPvycxWWv9fqvR5n2Eh3rU=
Subject key identifier:   07:64:A5:ED:3B:5D:58:32:74:93:6B:99:7E:0A:55:64:7C:53:87:53
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       27DF9E3D99758BBD3EEE7BADAFB1135AF165B2D4
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a313030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:df:9e:3d:99:75:8b:bd:3e:ee:7b:ad:af:b1:13:5a:f1:65:b2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:84:bd:d0:cf:5e:f0:71:3e:e4:c4:09:97:
                    5a:5f:0c:17:51:fe:68:aa:75:28:6c:e7:78:4d:f1:
                    da:77:3f:e3:57:be:bd:4b:cb:d0:49:aa:d6:8f:e0:
                    9f:8d:43:81:1f:54:60:bf:a2:9b:4e:e8:0f:74:59:
                    91:db:91:c8:f9:f3:7f:14:fc:33:ae:95:33:1d:45:
                    b3:06:2b:bd:eb:de:49:03:7e:eb:dc:f7:ab:7b:09:
                    a9:22:ab:52:e3:75:04:6a:64:39:3f:da:29:93:0f:
                    d9:1f:9c:e5:ef:df:f8:fa:14:0c:76:63:ae:5e:2b:
                    87:16:b8:e6:61:3e:4d:0f:e6:d8:9c:1a:3e:5a:f9:
                    0b:b2:8e:99:53:25:31:3e:2d:95:65:f1:b4:a1:bb:
                    ba:19:b7:24:f8:75:b3:12:06:5b:b5:db:75:8a:aa:
                    18:92:9c:a7:a6:36:b7:24:0c:de:dc:4f:46:5e:52:
                    14:f0:26:8a:2e:55:a1:db:7f:ad:b7:f9:40:e1:79:
                    b6:1f:21:85:ff:ff:ac:d0:f6:d1:8c:38:f1:51:e2:
                    c8:c7:85:1e:69:15:07:47:96:c9:9f:e4:5f:6a:ca:
                    08:d2:bc:b0:bc:62:2d:e6:88:01:c1:b1:76:43:39:
                    7d:b4:29:9a:17:ff:ff:ee:73:1d:77:03:b0:ff:97:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:64:A5:ED:3B:5D:58:32:74:93:6B:99:7E:0A:55:64:7C:53:87:53
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a313030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:9a:63:7a:5e:ff:43:13:76:a1:b6:6d:fc:75:ac:c8:de:
         a2:8e:6a:b6:6a:1f:a0:40:ef:8b:64:5f:14:8f:7c:7e:e8:00:
         c2:0e:27:17:a0:e5:f9:93:2e:f8:56:14:64:a2:4c:b4:48:69:
         9a:4f:e4:3e:c4:ed:99:3f:20:26:00:53:36:c2:05:34:f5:39:
         84:93:d6:08:ee:6f:c6:f9:52:1c:4e:37:9d:8b:32:e5:29:b0:
         9d:90:f2:ad:61:24:29:fb:5a:c6:d6:69:bb:79:07:20:b5:e6:
         99:fd:54:42:a9:a0:dd:c1:57:92:1e:04:aa:4d:bb:5e:d8:1f:
         41:03:90:1f:f6:21:3a:74:eb:01:fb:ce:9a:a3:82:88:3e:7a:
         16:d3:48:eb:a5:20:9e:5f:4e:66:0d:83:e0:24:0a:6d:8a:c9:
         27:34:60:45:54:5b:8d:87:ac:bb:05:33:40:12:e6:21:cf:c0:
         57:71:f9:a1:17:23:82:a5:77:b9:90:f2:b9:50:2a:3d:ca:b0:
         85:1f:53:16:1d:16:db:84:bb:de:58:97:9a:c8:60:dc:7b:ad:
         32:26:3b:3c:3e:37:a9:a2:4a:2e:29:1d:74:12:8c:36:65:c5:
         9e:3b:c4:11:26:c5:4f:00:a0:bb:ad:e6:3f:eb:89:c8:e0:0d:
         16:4f:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org