Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a363030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a363030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          DYRPKaPOSDaUKqWbpdfTVLL3lNTT23wu5X5D0zYkgHU=
Subject key identifier:   C4:A0:6A:9F:C0:7B:CB:40:D7:75:E1:8F:01:94:36:BF:AA:5D:26:E4
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       08C2443C6D85788A96701B0B825D337217C558CA
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a363030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c:6000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c2:44:3c:6d:85:78:8a:96:70:1b:0b:82:5d:33:72:17:c5:58:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:6d:c7:c9:3f:6e:e5:dc:ac:e8:eb:d6:95:
                    94:cb:c5:5d:06:1b:be:a2:1b:17:79:9b:76:c9:c2:
                    15:a9:ef:97:56:45:12:46:6f:b2:ee:98:34:da:d5:
                    63:52:4c:12:ae:9f:26:97:6c:19:d6:77:3e:a4:d2:
                    9b:18:9a:6d:84:23:c8:c8:d4:6e:e5:ca:84:39:4e:
                    60:ef:ef:dd:6d:c2:44:3a:5f:d7:a7:26:60:a9:c7:
                    9f:37:f3:89:18:09:f6:bd:64:c0:4c:7a:c7:3b:86:
                    c1:62:95:e9:2b:23:e0:a2:22:4c:89:f9:41:64:5f:
                    da:07:e6:b8:b4:66:d7:6e:d1:37:63:65:92:bd:ab:
                    36:f6:49:39:fd:ad:6a:af:7e:1c:a6:e4:6f:2e:7b:
                    52:b7:f9:ae:92:e6:9b:3a:28:9d:bd:22:35:7c:25:
                    90:af:19:ab:9e:7b:d9:d7:19:f6:b6:c8:a0:13:ed:
                    bc:33:4d:25:93:22:66:31:8d:22:cf:d7:bd:48:65:
                    7c:f3:c6:1e:d2:cb:18:22:05:a0:79:9f:f6:10:70:
                    34:a7:ab:75:d7:fd:53:cd:ae:a7:f3:c8:13:e4:d1:
                    ba:db:27:7f:f5:db:2d:be:9f:61:86:76:4d:8e:6e:
                    4b:a5:71:1c:f1:f6:f4:2f:62:ec:3e:e9:b1:bf:fa:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A0:6A:9F:C0:7B:CB:40:D7:75:E1:8F:01:94:36:BF:AA:5D:26:E4
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a363030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:b3:a6:63:c0:b1:73:1a:6e:72:41:40:9e:b4:7f:b0:e0:4e:
         f6:27:10:b5:21:26:fd:75:cb:0a:20:ad:fb:c9:44:29:d0:68:
         02:1e:7b:4c:2f:99:4b:1f:87:f6:dd:8a:b6:6c:b9:db:79:e5:
         6c:4e:3d:51:bf:b7:8a:d5:ee:35:18:96:d7:6c:f8:03:a7:47:
         70:c4:46:ec:ca:04:60:f4:01:97:0c:a7:0d:3c:2f:c9:fc:9e:
         ad:a7:3a:be:08:9b:b9:4f:4a:9a:c9:ee:98:53:cf:26:e4:4b:
         81:02:4a:c9:3b:09:7a:1c:8b:e5:91:31:07:61:e5:cb:e6:ab:
         60:19:21:37:fd:60:ad:66:e2:88:38:19:2f:33:4e:e3:05:b3:
         9e:ea:90:23:32:98:f6:0c:6b:16:4b:ca:67:23:ab:68:70:f5:
         65:40:9d:e9:40:63:7d:92:33:8a:6a:9f:43:f5:b1:4a:7e:9e:
         34:bd:1a:e0:69:d1:40:61:e4:cd:52:a9:44:06:ca:1b:a2:25:
         6a:b9:56:29:40:0d:25:3f:46:6c:5b:0a:fa:0b:49:dd:d7:56:
         68:fd:4f:2e:3b:7d:c1:f9:71:5d:9e:51:15:d0:a6:65:82:8b:
         39:f6:47:f6:3d:e8:59:d5:31:96:34:71:1e:9c:03:bb:19:c6:
         32:f7:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org