Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a323030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a323030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          0jMJtyzraUWRneL+q35/FBqM48/mlRBiwokOnJwLze0=
Subject key identifier:   3B:C2:3A:E0:13:8D:54:30:4F:1D:BE:80:DC:E9:0D:FB:CA:04:60:FA
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       1BF830B4FE5A7DED0498B1A27EC0C4B9ACF7B63A
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a323030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f8:30:b4:fe:5a:7d:ed:04:98:b1:a2:7e:c0:c4:b9:ac:f7:b6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:32:f6:21:cb:69:64:0f:ee:ce:47:76:a2:
                    e9:7e:4e:5f:22:7c:af:5e:bc:a5:b2:da:2b:fa:2e:
                    7c:ed:4f:5d:e9:25:15:e5:aa:67:57:41:e9:1d:41:
                    22:c6:15:29:55:bc:81:11:a4:18:52:99:f4:1f:af:
                    b7:aa:37:0d:73:f8:44:57:4c:01:c9:02:67:47:c2:
                    0c:58:90:f5:23:45:a2:77:be:14:0a:b9:4e:54:21:
                    19:b2:62:58:78:a5:c0:db:42:4b:d8:fc:78:8c:3e:
                    a7:36:b0:af:bc:e1:8e:0c:a2:84:dd:5b:bf:b5:78:
                    26:62:49:13:ab:a0:11:2c:10:a2:06:e2:b0:48:09:
                    31:af:0d:4a:ea:a1:78:01:58:2e:53:4a:c1:c8:10:
                    26:bc:aa:c6:5b:ff:db:f8:e1:19:1a:a5:d6:16:dd:
                    18:ef:34:96:db:6a:05:ef:d4:0a:79:9a:96:e2:b5:
                    a0:50:d7:a0:c1:03:9e:0d:38:ed:84:2c:27:02:28:
                    e4:79:c5:46:02:e3:9a:1a:3f:d4:1b:51:ed:1c:0e:
                    c2:1a:76:ed:66:0c:2a:1b:b0:29:9f:11:c3:2f:07:
                    08:4f:06:a1:a5:48:90:0e:75:9d:fc:08:69:8f:63:
                    90:d0:41:a1:fb:dc:12:3b:77:b2:bd:5c:f4:8f:a7:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:3A:E0:13:8D:54:30:4F:1D:BE:80:DC:E9:0D:FB:CA:04:60:FA
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a323030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:42:7c:ba:e3:59:32:28:d0:4d:0f:a1:9b:11:a3:9e:44:fd:
         05:06:30:43:f7:0d:b4:e4:b7:6a:71:d5:9d:f2:aa:fd:9b:d1:
         60:47:d5:ea:61:d1:54:d0:4d:cd:dc:e9:e8:8e:2a:a9:f2:bd:
         fe:8d:fa:7e:30:7a:e5:1a:a6:8c:aa:06:67:9d:5a:7a:68:52:
         d5:c9:3e:89:32:72:f4:3a:5e:69:fd:ec:27:6c:4c:12:7e:38:
         f4:13:34:b2:36:6b:a7:0d:b4:5a:fe:5f:89:f1:03:09:4f:e4:
         1d:dc:93:48:40:08:f0:ea:98:4e:01:c2:b4:6b:82:e8:69:60:
         7d:02:72:f2:1d:47:3c:85:c2:0a:ed:5b:06:0a:41:74:08:51:
         dc:e9:4e:63:f1:8b:ec:97:1c:b7:1c:a3:36:cd:e3:d2:20:6a:
         08:29:f8:0c:06:51:bf:83:c4:f2:c4:c7:79:44:38:71:73:b5:
         83:a2:20:5f:86:a1:d6:57:cb:d9:08:53:ff:7b:f4:95:98:9f:
         fd:59:8f:0c:df:25:76:1f:ab:28:2b:3c:9e:70:42:51:90:c5:
         29:69:e0:a5:1c:a5:a3:f4:49:e0:34:30:8f:1d:44:c6:52:57:
         05:9c:ea:1f:b6:f9:60:c2:38:65:2e:93:e3:8a:9a:71:c5:43:
         a0:02:6a:79
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUG/gwtP5afe0EmLGifsDEuaz3tjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwRDYyNkVBRTBDNENDMkZEQzY3NjdDNjJBQTQ3NEM1
ODZCOUQwNTAeFw0yNDA0MDMxODI2MjZaFw0yNTA0MDIxODMxMjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkMzRDMyRjYyMUNCNjk2NDBG
RUVDRTQ3NzZBMkU5N0U0RTVGMjI3Q0FGNUVCQ0E1QjJEQTJCRkEyRTdDRUQ0RjVE
RTkyNTE1RTVBQTY3NTc0MUU5MUQ0MTIyQzYxNTI5NTVCQzgxMTFBNDE4NTI5OUY0
MUZBRkI3QUEzNzBENzNGODQ0NTc0QzAxQzkwMjY3NDdDMjBDNTg5MEY1MjM0NUEy
NzdCRTE0MEFCOTRFNTQyMTE5QjI2MjU4NzhBNUMwREI0MjRCRDhGQzc4OEMzRUE3
MzZCMEFGQkNFMThFMENBMjg0REQ1QkJGQjU3ODI2NjI0OTEzQUJBMDExMkMxMEEy
MDZFMkIwNDgwOTMxQUYwRDRBRUFBMTc4MDE1ODJFNTM0QUMxQzgxMDI2QkNBQUM2
NUJGRkRCRjhFMTE5MUFBNUQ2MTZERDE4RUYzNDk2REI2QTA1RUZENDBBNzk5QTk2
RTJCNUEwNTBEN0EwQzEwMzlFMEQzOEVEODQyQzI3MDIyOEU0NzlDNTQ2MDJFMzlB
MUEzRkQ0MUI1MUVEMUMwRUMyMUE3NkVENjYwQzJBMUJCMDI5OUYxMUMzMkYwNzA4
NEYwNkExQTU0ODkwMEU3NTlERkMwODY5OEY2MzkwRDA0MUExRkJEQzEyM0I3N0Iy
QkQ1Q0Y0OEZBNzhFOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvD0y9iHLaWQP7s5HdqLpfk5fInyvXrylstor+i587U9d6SUV5apn
V0HpHUEixhUpVbyBEaQYUpn0H6+3qjcNc/hEV0wByQJnR8IMWJD1I0Wid74UCrlO
VCEZsmJYeKXA20JL2Px4jD6nNrCvvOGODKKE3Vu/tXgmYkkTq6ARLBCiBuKwSAkx
rw1K6qF4AVguU0rByBAmvKrGW//b+OEZGqXWFt0Y7zSW22oF79QKeZqW4rWgUNeg
wQOeDTjthCwnAijkecVGAuOaGj/UG1HtHA7CGnbtZgwqG7ApnxHDLwcITwahpUiQ
DnWd/Ahpj2OQ0EGh+9wSO3eyvVz0j6eOnwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FDvCOuATjVQwTx2+gNzpDfvKBGD6MB8GA1UdIwQYMBaAFGkNYm6uDEzC/cZ2fGKq
R0xYa50FMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzEvNjkwRDYyNkVBRTBDNEND
MkZEQzY3NjdDNjJBQTQ3NEM1ODZCOUQwNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82OTBENjI2RUFFMEM0Q0MyRkRDNjc2N0M2MkFBNDc0QzU4NkI5
RDA1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8xLzMyMzgzMDM0M2EzNDYzMzA2MzNh
MzIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBEwMIDANBgkqhkiG9w0BAQsFAAOCAQEApEJ8uuNZMijQTQ+hmxGj
nkT9BQYwQ/cNtOS3anHVnfKq/ZvRYEfV6mHRVNBNzdzp6I4qqfK9/o36fjB65Rqm
jKoGZ51aemhS1ck+iTJy9Dpeaf3sJ2xMEn449BM0sjZrpw20Wv5fifEDCU/kHdyT
SEAI8OqYTgHCtGuC6GlgfQJy8h1HPIXCCu1bBgpBdAhR3OlOY/GL7JcctxyjNs3j
0iBqCCn4DAZRv4PE8sTHeUQ4cXO1g6IgX4ah1lfL2QhT/3v0lZif/VmPDN8ldh+r
KCs8nnBCUZDFKWngpRylo/RJ4DQwjx1ExlJXBZzqH7b5YMI4ZS6T44qaccVDoAJq
eQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org