Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a373030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a373030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          EQUaha91++mqdoeXpOU5/EJsZU3prYxxJRwp5/henM8=
Subject key identifier:   2E:EC:81:1C:F2:3D:DD:BF:D7:5D:81:39:4F:DE:66:9A:BB:74:86:CF
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       28F184CBD51B2BEFD888ADAA2B5157FFD00E4DC8
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a373030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c:7000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f1:84:cb:d5:1b:2b:ef:d8:88:ad:aa:2b:51:57:ff:d0:0e:4d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject: CN=3082010A0282010100C97EDC5D6ACB95E7C476A4F6FA3FE4E7A04EA6F52F0AE6BA1642C42C02BB7AE22B8956A881F9D36F0352EA9DB032A795D1D4D23CD8249D629D9362BBF113EBDC78740F23D3261FA7D0ECAC571347F3D77FC74BBD391E50EFA7886544A6EEE8D583C3F4A1FC1B40575F32EF1F32AD8E0F3F6A6180D8EB43713AE9BD50BEE0D8C012A0A8574EF960585A9A5A80E3D7DB0FB22979949769605226B0D24EFD5C751EC7EE6BB54CF90EA56ADF34CDAF0A615C8C0D44DC71D0A9CD50A06B1E52C93638CCAC7A0F62776D430540BB8118EEE1A274B7ABE658A3F76FB1BA9D72838C34ED9D3934FED1EF23481B23D8DF0A000D10296273BAA72D3E013802535CA09EF31B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:dc:5d:6a:cb:95:e7:c4:76:a4:f6:fa:3f:
                    e4:e7:a0:4e:a6:f5:2f:0a:e6:ba:16:42:c4:2c:02:
                    bb:7a:e2:2b:89:56:a8:81:f9:d3:6f:03:52:ea:9d:
                    b0:32:a7:95:d1:d4:d2:3c:d8:24:9d:62:9d:93:62:
                    bb:f1:13:eb:dc:78:74:0f:23:d3:26:1f:a7:d0:ec:
                    ac:57:13:47:f3:d7:7f:c7:4b:bd:39:1e:50:ef:a7:
                    88:65:44:a6:ee:e8:d5:83:c3:f4:a1:fc:1b:40:57:
                    5f:32:ef:1f:32:ad:8e:0f:3f:6a:61:80:d8:eb:43:
                    71:3a:e9:bd:50:be:e0:d8:c0:12:a0:a8:57:4e:f9:
                    60:58:5a:9a:5a:80:e3:d7:db:0f:b2:29:79:94:97:
                    69:60:52:26:b0:d2:4e:fd:5c:75:1e:c7:ee:6b:b5:
                    4c:f9:0e:a5:6a:df:34:cd:af:0a:61:5c:8c:0d:44:
                    dc:71:d0:a9:cd:50:a0:6b:1e:52:c9:36:38:cc:ac:
                    7a:0f:62:77:6d:43:05:40:bb:81:18:ee:e1:a2:74:
                    b7:ab:e6:58:a3:f7:6f:b1:ba:9d:72:83:8c:34:ed:
                    9d:39:34:fe:d1:ef:23:48:1b:23:d8:df:0a:00:0d:
                    10:29:62:73:ba:a7:2d:3e:01:38:02:53:5c:a0:9e:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EC:81:1C:F2:3D:DD:BF:D7:5D:81:39:4F:DE:66:9A:BB:74:86:CF
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a373030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:0a:07:21:ae:fc:8c:f2:64:9a:d8:48:4e:cd:86:bf:8d:
         83:11:ae:8f:ee:8e:0b:2e:cf:d5:64:87:b8:33:f9:69:84:02:
         be:d0:de:99:4a:ec:14:77:42:71:6b:4a:29:ad:93:ec:c9:5a:
         97:a3:e4:77:e7:0e:85:17:c0:59:fc:bb:75:64:8a:6f:8e:d0:
         ea:69:9e:06:ee:04:c9:64:93:ec:be:4f:44:da:84:9b:a3:51:
         34:25:06:de:51:e5:24:f9:50:1d:d3:24:18:97:b6:fd:b7:5c:
         8e:79:6d:29:8e:fe:4f:ed:04:c5:14:b0:bb:41:49:b0:41:f4:
         5b:ba:61:5f:28:f4:8c:c6:86:a8:3b:ec:46:8f:3f:19:7f:6b:
         d7:4b:2e:bb:94:2c:f1:60:5d:08:f9:92:f1:e6:a2:97:33:7b:
         c0:14:fd:e2:3a:f8:24:5a:23:0d:1a:7e:e3:a3:ec:d8:c4:76:
         c7:10:99:61:34:16:0a:bd:b3:a8:92:b0:b4:58:f8:a4:d1:75:
         91:77:94:70:db:25:34:ca:50:76:5d:fe:15:48:67:87:dc:07:
         e3:2e:b4:2b:ac:9b:44:86:dc:a9:1e:04:73:05:28:87:3c:09:
         6c:e4:f5:15:65:ac:a9:b7:7d:cb:75:0e:04:27:fa:03:11:e5:
         4c:17:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org