Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a353030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a353030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          8yrC5NhOMeCFu59S1FFk4CcOz8WKKGFOgbWU9PxgEAo=
Subject key identifier:   9F:D2:FF:4B:BF:69:C0:9D:34:FE:07:80:A6:BC:51:24:8B:81:F7:97
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       691BA354864DD9DF36E3540EBD1BC15B01172B8F
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a353030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     267345
IP address blocks:        2804:4c0c:5000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1b:a3:54:86:4d:d9:df:36:e3:54:0e:bd:1b:c1:5b:01:17:2b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject: CN=3082010A0282010100CEEC30900F0E3FFF96785C8BF85099F80AE8C41AB4287AEB04C2B94E237E573FC265E68EC397593B196F7034437CB13FD355EB2E428C4514DEBBA92D0125D1ED9770AAEB5C3168280E5BA3AA92BBD926C0A1EF359346214FA91D86CD0ACA4FFAC8A09C15407CFB2F59BF78EC0AB51D21C841436092CE77FC8C6F2F30423EF6A7CFCD16D200833592D3EDA4C940D6D7028A7B7CB49A0CC33AC5A7D91FBF61746D9F748AA061FFE32F6C133998EC5584471E3C1516AEA59FE9462127E1393BD3327E5FFB40E9D21E69CD10C49798595D0CF87ACC2A239B21B0DDB3D7E242AE28ECA22491B35761937E01E54A2DF1DF50EF874407624B78F73E4B66776E8D48D09B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:30:90:0f:0e:3f:ff:96:78:5c:8b:f8:50:
                    99:f8:0a:e8:c4:1a:b4:28:7a:eb:04:c2:b9:4e:23:
                    7e:57:3f:c2:65:e6:8e:c3:97:59:3b:19:6f:70:34:
                    43:7c:b1:3f:d3:55:eb:2e:42:8c:45:14:de:bb:a9:
                    2d:01:25:d1:ed:97:70:aa:eb:5c:31:68:28:0e:5b:
                    a3:aa:92:bb:d9:26:c0:a1:ef:35:93:46:21:4f:a9:
                    1d:86:cd:0a:ca:4f:fa:c8:a0:9c:15:40:7c:fb:2f:
                    59:bf:78:ec:0a:b5:1d:21:c8:41:43:60:92:ce:77:
                    fc:8c:6f:2f:30:42:3e:f6:a7:cf:cd:16:d2:00:83:
                    35:92:d3:ed:a4:c9:40:d6:d7:02:8a:7b:7c:b4:9a:
                    0c:c3:3a:c5:a7:d9:1f:bf:61:74:6d:9f:74:8a:a0:
                    61:ff:e3:2f:6c:13:39:98:ec:55:84:47:1e:3c:15:
                    16:ae:a5:9f:e9:46:21:27:e1:39:3b:d3:32:7e:5f:
                    fb:40:e9:d2:1e:69:cd:10:c4:97:98:59:5d:0c:f8:
                    7a:cc:2a:23:9b:21:b0:dd:b3:d7:e2:42:ae:28:ec:
                    a2:24:91:b3:57:61:93:7e:01:e5:4a:2d:f1:df:50:
                    ef:87:44:07:62:4b:78:f7:3e:4b:66:77:6e:8d:48:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D2:FF:4B:BF:69:C0:9D:34:FE:07:80:A6:BC:51:24:8B:81:F7:97
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a353030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:91:ef:1b:f5:5e:48:f4:35:30:44:56:29:ab:0e:a7:0b:
         02:31:ba:4c:da:87:14:6c:6b:36:0b:70:a3:10:03:d4:42:30:
         7b:04:dc:64:34:81:da:30:59:56:8e:e7:e6:4c:7d:d9:b7:6c:
         d4:06:96:61:ed:6c:97:89:01:0a:d7:86:c2:70:ff:5e:ff:74:
         6c:35:a8:16:c6:58:7d:19:c8:30:dc:06:98:a1:cd:5d:e2:85:
         cc:bf:8e:2f:4e:c7:3a:e9:e5:81:59:76:c5:a6:10:29:48:e8:
         c7:e4:b6:e8:41:2b:7b:1a:0f:c9:03:8d:53:9f:de:6c:99:90:
         40:96:97:30:4e:4d:1b:45:95:f6:dd:cc:73:0a:32:90:c1:37:
         3c:e5:c3:b3:4d:b4:d2:70:de:f4:42:d7:c8:39:f8:6d:e0:de:
         b2:29:d2:e2:51:91:b8:a9:3a:a2:b1:b6:e1:00:67:72:fb:42:
         dc:a2:ce:bf:63:fc:bd:72:47:6b:c6:32:39:a6:75:8f:d8:14:
         ee:d9:b0:e5:8e:3d:e1:48:71:43:66:93:da:50:60:e3:1e:bf:
         2b:e5:88:b9:ea:36:40:ce:e9:81:f0:ac:c2:ea:86:77:f6:fb:
         8b:e7:fd:34:66:e2:8e:5c:4c:18:66:d3:a5:b0:9f:f5:9d:d1:
         18:74:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org