Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a343030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a343030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          3gP3GgeDsIHOD6x9UmpwqwHIkyqpRlXnpN9vSGM06fc=
Subject key identifier:   51:7E:EA:B1:3E:A9:31:A8:FC:5C:CD:EB:65:76:83:AD:68:AD:1B:0E
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       3DC270D1DDDB153D11E91A05C2B3BE247F5CB7DC
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a343030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        2804:4c0c:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c2:70:d1:dd:db:15:3d:11:e9:1a:05:c2:b3:be:24:7f:5c:b7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:1b:c2:eb:7a:e9:cd:d9:52:03:ab:00:bb:
                    8a:bb:74:e1:4c:96:29:a8:51:b3:bf:e6:d8:b9:fe:
                    f0:aa:38:ef:01:9d:19:a4:7d:55:d1:f1:05:9d:44:
                    11:c2:12:39:da:0b:dd:16:cf:1b:e7:cd:79:4c:73:
                    e2:e5:82:37:42:06:04:5f:40:5f:e0:23:78:51:64:
                    b7:29:1b:77:76:a5:77:44:fb:4e:75:ff:9f:14:37:
                    4d:20:9e:c8:ed:e3:d5:79:fc:51:cd:2d:e2:e3:83:
                    90:f7:d6:96:95:4c:6d:82:07:2c:bf:80:0e:ca:00:
                    0c:f6:1e:01:3d:29:11:64:8c:18:29:5d:1a:04:8a:
                    b8:10:eb:72:58:b5:e8:5a:7a:a6:5f:b1:85:0b:1e:
                    df:6d:4f:d3:11:0a:7a:de:85:93:61:23:33:7f:d2:
                    55:26:d7:3a:78:c6:a2:2b:92:f5:b7:5a:9b:b1:44:
                    d7:11:61:92:e7:5c:cd:6b:65:6a:8d:6e:a2:52:b7:
                    16:ee:8d:9f:b2:c0:1e:30:0c:2c:c7:c1:50:8c:b2:
                    e6:d5:c6:6d:ac:1a:5c:b3:65:06:ba:d5:2e:c9:8a:
                    08:74:52:3c:34:04:22:1e:85:99:74:d6:70:62:ea:
                    0c:aa:40:87:c2:bc:69:3b:d2:a1:12:77:00:53:95:
                    45:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:EA:B1:3E:A9:31:A8:FC:5C:CD:EB:65:76:83:AD:68:AD:1B:0E
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a343030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bb:1e:33:4c:42:9e:53:c0:4c:0b:39:4a:4e:57:05:ad:cf:d4:
         c0:2a:23:18:25:6c:ac:91:db:55:32:06:47:fc:c2:e7:2e:54:
         74:0e:b6:37:e4:87:70:af:f7:bf:d5:98:8e:65:2e:d7:d3:33:
         31:70:d5:91:b6:55:af:e6:b3:43:e4:ff:b4:4a:78:da:6e:d3:
         86:3f:4e:4d:f1:ec:c3:6e:c8:e1:c8:39:9e:d6:fd:8e:7f:4a:
         3c:b5:ba:94:89:16:66:18:40:5c:c4:88:b3:3e:8b:f0:a7:c6:
         af:94:e6:af:ed:00:5a:3f:53:ee:55:53:81:fd:4b:a3:bf:2f:
         36:a3:59:ed:4e:92:92:94:71:8e:a7:ee:6f:f5:cb:3d:8e:64:
         46:d9:f0:0f:e1:18:51:69:9e:7e:96:db:7c:34:6b:30:bc:2c:
         c9:21:5f:b0:68:8a:90:b3:93:49:86:82:af:34:a6:a1:18:3a:
         6b:82:40:6c:2c:c4:0d:c8:1a:c1:04:29:54:d6:bb:46:9a:5f:
         34:11:38:50:a1:90:18:1f:fd:e4:35:42:b4:f2:8f:42:bd:8f:
         16:63:52:35:9d:02:4a:6b:28:5d:c5:b4:db:94:e6:10:47:05:
         d9:3d:1f:1a:cf:17:db:77:ba:53:7f:1e:21:da:82:05:78:b2:
         c0:36:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org