Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a383030303a3a2f33332d3333203d3e20323637333435.roa
File:                     323830343a346330633a383030303a3a2f33332d3333203d3e20323637333435.roa (raw, json)
Hash identifier:          4A0JxAFY59BzbVewh6Y6Q+qXBpJxAj36yBIRbh5WID8=
Subject key identifier:   CB:BE:EB:8A:78:92:8A:0D:E4:76:57:DA:F0:15:40:17:71:F1:40:BF
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       05528B8D115B3FA8868ED841F27CD8FD69DF6E67
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a383030303a3a2f33332d3333203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:52:8b:8d:11:5b:3f:a8:86:8e:d8:41:f2:7c:d8:fd:69:df:6e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:e0:7b:fb:38:31:be:5b:57:e9:b7:af:4d:
                    ee:ed:c2:10:cd:59:08:af:96:42:6b:ca:e5:68:ec:
                    d8:32:99:cc:49:6f:90:7f:5d:36:5f:8d:e8:60:38:
                    e3:ee:82:68:a0:db:cd:8d:bc:48:66:b6:0d:30:ee:
                    04:9a:5d:3e:ab:57:77:50:b3:a8:34:75:71:27:c3:
                    9b:af:45:e3:1d:ed:3f:fa:79:dc:d2:36:20:7e:c0:
                    00:2b:27:16:ee:2b:d6:a8:de:b0:b6:b3:f3:97:28:
                    5e:dc:24:ab:4e:8f:52:d5:68:b1:a8:01:e1:ae:92:
                    af:3d:54:b8:e9:e2:e5:28:2d:ec:54:a5:f9:5c:1f:
                    85:a8:92:5c:fa:87:93:22:a8:c3:35:7f:d3:34:1e:
                    d0:72:17:4e:07:20:2b:6f:37:22:77:dd:ce:d4:ca:
                    3d:f1:d2:0e:02:46:f2:96:e1:b6:02:27:e7:0d:02:
                    1b:3c:ef:ee:15:03:59:d6:00:ea:69:22:c3:6a:84:
                    ae:ea:f8:d5:c7:cd:84:55:72:6d:cb:1c:b7:68:8f:
                    da:76:2c:16:be:4d:55:52:66:8a:02:a3:4d:6a:72:
                    27:6a:43:73:8e:a9:d4:f2:ef:4e:08:6c:6c:be:72:
                    7c:d1:f2:b6:c1:11:6b:b1:9d:19:e9:3c:c0:b9:e7:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BE:EB:8A:78:92:8A:0D:E4:76:57:DA:F0:15:40:17:71:F1:40:BF
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a383030303a3a2f33332d3333203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:8f:37:dd:a3:e9:36:89:05:fa:84:08:80:f6:2f:60:84:bf:
         8e:05:bb:2e:80:b5:17:2e:54:ae:a6:6b:5f:97:96:69:c5:5c:
         86:b1:a2:d9:ad:6d:ea:53:6e:dd:91:04:01:41:69:78:06:78:
         1e:a2:9e:e9:b1:ec:e3:91:1d:4f:31:05:73:7a:3a:5b:6c:94:
         4a:05:bb:8e:93:9b:a2:56:50:16:5d:ab:c1:02:15:34:bf:35:
         2e:6e:1e:2d:36:52:a6:2f:f7:c6:cc:ec:81:83:7d:0e:56:dc:
         70:fb:35:2b:5e:12:a3:9b:fc:9a:d9:0b:d7:e2:23:08:f4:02:
         28:72:dd:92:91:92:f3:ac:00:8f:ef:b6:16:42:2a:7e:f9:c8:
         58:77:b4:01:0a:6a:24:a6:c8:07:e1:5c:b9:d2:a7:41:30:93:
         7c:d2:80:2c:a3:ba:09:13:e8:ac:15:61:9a:ee:0b:0f:67:da:
         6b:bb:26:6e:2a:48:cd:f8:79:69:8c:5c:bc:66:19:d6:f2:7a:
         3c:14:80:03:c6:c8:3a:fb:c1:2f:d7:ba:17:79:62:5f:5b:cc:
         74:0c:b6:d2:00:9b:35:fb:6e:52:f5:a3:6c:24:5a:51:62:4a:
         51:87:6b:37:f4:cb:1f:4f:4c:60:bc:e4:34:35:3f:ce:4f:4e:
         40:65:d6:12
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUBVKLjRFbP6iGjthB8nzY/WnfbmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwRDYyNkVBRTBDNENDMkZEQzY3NjdDNjJBQTQ3NEM1
ODZCOUQwNTAeFw0yNDA0MDMxODI2MjZaFw0yNTA0MDIxODMxMjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTE3REUwN0JGQjM4MzFCRTVC
NTdFOUI3QUY0REVFRURDMjEwQ0Q1OTA4QUY5NjQyNkJDQUU1NjhFQ0Q4MzI5OUND
NDk2RjkwN0Y1RDM2NUY4REU4NjAzOEUzRUU4MjY4QTBEQkNEOERCQzQ4NjZCNjBE
MzBFRTA0OUE1RDNFQUI1Nzc3NTBCM0E4MzQ3NTcxMjdDMzlCQUY0NUUzMURFRDNG
RkE3OURDRDIzNjIwN0VDMDAwMkIyNzE2RUUyQkQ2QThERUIwQjZCM0YzOTcyODVF
REMyNEFCNEU4RjUyRDU2OEIxQTgwMUUxQUU5MkFGM0Q1NEI4RTlFMkU1MjgyREVD
NTRBNUY5NUMxRjg1QTg5MjVDRkE4NzkzMjJBOEMzMzU3RkQzMzQxRUQwNzIxNzRF
MDcyMDJCNkYzNzIyNzdERENFRDRDQTNERjFEMjBFMDI0NkYyOTZFMUI2MDIyN0U3
MEQwMjFCM0NFRkVFMTUwMzU5RDYwMEVBNjkyMkMzNkE4NEFFRUFGOEQ1QzdDRDg0
NTU3MjZEQ0IxQ0I3Njg4RkRBNzYyQzE2QkU0RDU1NTI2NjhBMDJBMzRENkE3MjI3
NkE0MzczOEVBOUQ0RjJFRjRFMDg2QzZDQkU3MjdDRDFGMkI2QzExMTZCQjE5RDE5
RTkzQ0MwQjlFNzEzQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4X3ge/s4Mb5bV+m3r03u7cIQzVkIr5ZCa8rlaOzYMpnMSW+Qf102
X43oYDjj7oJooNvNjbxIZrYNMO4Eml0+q1d3ULOoNHVxJ8Obr0XjHe0/+nnc0jYg
fsAAKycW7ivWqN6wtrPzlyhe3CSrTo9S1WixqAHhrpKvPVS46eLlKC3sVKX5XB+F
qJJc+oeTIqjDNX/TNB7QchdOByArbzcid93O1Mo98dIOAkbyluG2AifnDQIbPO/u
FQNZ1gDqaSLDaoSu6vjVx82EVXJtyxy3aI/adiwWvk1VUmaKAqNNanInakNzjqnU
8u9OCGxsvnJ80fK2wRFrsZ0Z6TzAuecTyQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FMu+64p4kooN5HZX2vAVQBdx8UC/MB8GA1UdIwQYMBaAFGkNYm6uDEzC/cZ2fGKq
R0xYa50FMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzEvNjkwRDYyNkVBRTBDNEND
MkZEQzY3NjdDNjJBQTQ3NEM1ODZCOUQwNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82OTBENjI2RUFFMEM0Q0MyRkRDNjc2N0M2MkFBNDc0QzU4NkI5
RDA1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8xLzMyMzgzMDM0M2EzNDYzMzA2MzNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBEwMgDANBgkqhkiG9w0BAQsFAAOCAQEAdY833aPpNokF+oQIgPYv
YIS/jgW7LoC1Fy5UrqZrX5eWacVchrGi2a1t6lNu3ZEEAUFpeAZ4HqKe6bHs45Ed
TzEFc3o6W2yUSgW7jpObolZQFl2rwQIVNL81Lm4eLTZSpi/3xszsgYN9DlbccPs1
K14So5v8mtkL1+IjCPQCKHLdkpGS86wAj++2FkIqfvnIWHe0AQpqJKbIB+FcudKn
QTCTfNKALKO6CRPorBVhmu4LD2faa7smbipIzfh5aYxcvGYZ1vJ6PBSAA8bIOvvB
L9e6F3liX1vMdAy20gCbNftuUvWjbCRaUWJKUYdrN/TLH09MYLzkNDU/zk9OQGXW
Eg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org