Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a333030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a333030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          ROg9lIwScxa7B5PyfDqcS4YRoBrn5xxhY5/DDwaLmXI=
Subject key identifier:   CC:A9:97:95:5D:CD:AC:17:48:38:27:0E:8D:3F:40:24:78:32:E4:19
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       45ED760EB7BB9EF921ECF5FAFEAF471497C3BB49
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a333030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     267345
IP address blocks:        2804:4c0c:3000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ed:76:0e:b7:bb:9e:f9:21:ec:f5:fa:fe:af:47:14:97:c3:bb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:32:2e:48:dc:4e:c1:a6:ff:0c:23:41:d2:b8:
                    fc:f2:3d:5e:8d:66:f4:e9:0d:9a:e8:f6:36:07:c1:
                    01:31:8c:24:7f:7d:7d:d0:13:6e:a7:0c:42:80:f2:
                    cc:9c:63:5c:e6:d0:cf:57:c6:82:59:8c:e9:4c:07:
                    43:df:c9:05:db:89:27:14:e1:98:45:dd:ea:31:3c:
                    46:f6:36:c9:b9:70:9c:15:29:7b:7d:5a:61:8c:8a:
                    31:fc:e1:8e:22:b9:93:9b:5b:e0:c9:11:41:df:ae:
                    d1:2b:d4:46:01:2f:6c:33:2e:4d:fa:c1:2f:44:59:
                    33:aa:a0:63:4c:79:25:e7:25:48:67:0b:c2:80:a8:
                    23:27:f8:ca:12:da:2d:f4:68:4f:7e:fb:ad:35:72:
                    4e:6b:9b:8f:f5:6f:4c:b7:c5:47:68:7a:57:06:ed:
                    c2:61:8e:24:ec:b9:dc:9c:83:0c:73:f7:f5:b9:f5:
                    47:32:9a:aa:82:ee:d1:f1:13:ec:33:31:80:e0:cb:
                    a7:c0:59:7b:68:2f:80:9c:14:e6:3f:00:dd:94:22:
                    c9:be:02:e4:86:77:03:3b:d6:a5:28:a8:9e:9f:e9:
                    5b:ff:59:58:3d:f6:c9:4c:a0:66:d6:bd:5b:2b:02:
                    f2:89:64:d5:16:a5:62:05:6a:70:fe:30:ea:b7:68:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A9:97:95:5D:CD:AC:17:48:38:27:0E:8D:3F:40:24:78:32:E4:19
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a333030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:7f:ed:2c:ce:bf:9b:d8:08:f4:dd:4e:ab:ec:6c:3b:a5:
         69:ef:75:10:37:e8:e5:bb:87:aa:e9:fd:41:da:2b:2e:87:a1:
         f9:b9:bd:0f:88:ce:66:a5:e9:eb:b7:7e:0e:18:84:97:e0:89:
         a9:7d:ab:94:15:94:8c:2b:aa:71:41:2c:d4:60:c1:a3:74:fc:
         c4:d6:f7:28:86:2c:6d:bf:22:1d:2c:8d:80:a0:ac:e4:35:2a:
         cd:88:7a:84:23:a0:3e:8b:9e:82:2b:dc:98:d1:02:78:39:51:
         ac:32:38:10:76:44:17:27:fa:68:c4:69:2e:c4:77:dd:b9:34:
         48:41:a6:d4:4d:1d:17:25:12:d4:78:e6:de:9e:96:c2:5a:9e:
         68:3e:1d:07:2f:2f:42:c1:87:69:e9:ec:b9:e1:1c:46:68:f0:
         9e:bb:17:73:8c:f4:0b:85:93:8d:ea:d0:dc:90:29:16:25:92:
         b0:eb:8f:ce:e3:34:0e:b7:ca:ef:63:bb:c2:41:4d:13:7f:31:
         19:17:3b:8a:04:c0:22:56:5b:59:9c:a0:c0:dc:d8:a4:42:10:
         a0:00:2f:4b:d5:29:a3:21:54:ff:cd:7e:cb:73:05:24:9d:38:
         47:ee:5d:28:e5:97:02:5b:70:12:ca:78:90:4c:f9:62:f5:c2:
         84:c2:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org