Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a383030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a383030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          nreLhT3kor1xFWNp6dCQDvT3A4xrJnpR7o83wr9TW5w=
Subject key identifier:   E6:F2:82:FA:C7:A0:A1:8C:0A:60:CC:F1:DD:CB:E6:78:89:E7:96:F6
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       31DA39C0C350B6B3C171A4260F4C0286DC998585
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a383030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:da:39:c0:c3:50:b6:b3:c1:71:a4:26:0f:4c:02:86:dc:99:85:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject: CN=3082010A0282010100D0B7B6FF3D8761B29731C3994B0FB88CBDD3B4CB3E5D9406EFBE8D7A930581D9DCD67413F9FC2CD74C6664D9C633DD989B6487093962440432C42917292E742FEC77042ACBBF1CE66976D8D856680146A433E36A19969CE986460374783A9C3AAEB8A0193C87921118A23A3393D75F8B640E4CEA5FEAB8877329157935CF845DDBCE8B20940749672D31C1C692DA326CABB605FEF0D5AF89E0A511BD66145266D3A22CE47E46CC2A044BCF8A6D84BFCB09AF6E379C5212BBB918320ED3260512E820503E443D92C897FA4AB09FB6DCBB6F112291BC8BD91343B3254C725A3A0714860DD9CA2A071DAF2A772EFEA525C56E6243AA32B59BD046315349A135876D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:b6:ff:3d:87:61:b2:97:31:c3:99:4b:0f:
                    b8:8c:bd:d3:b4:cb:3e:5d:94:06:ef:be:8d:7a:93:
                    05:81:d9:dc:d6:74:13:f9:fc:2c:d7:4c:66:64:d9:
                    c6:33:dd:98:9b:64:87:09:39:62:44:04:32:c4:29:
                    17:29:2e:74:2f:ec:77:04:2a:cb:bf:1c:e6:69:76:
                    d8:d8:56:68:01:46:a4:33:e3:6a:19:96:9c:e9:86:
                    46:03:74:78:3a:9c:3a:ae:b8:a0:19:3c:87:92:11:
                    18:a2:3a:33:93:d7:5f:8b:64:0e:4c:ea:5f:ea:b8:
                    87:73:29:15:79:35:cf:84:5d:db:ce:8b:20:94:07:
                    49:67:2d:31:c1:c6:92:da:32:6c:ab:b6:05:fe:f0:
                    d5:af:89:e0:a5:11:bd:66:14:52:66:d3:a2:2c:e4:
                    7e:46:cc:2a:04:4b:cf:8a:6d:84:bf:cb:09:af:6e:
                    37:9c:52:12:bb:b9:18:32:0e:d3:26:05:12:e8:20:
                    50:3e:44:3d:92:c8:97:fa:4a:b0:9f:b6:dc:bb:6f:
                    11:22:91:bc:8b:d9:13:43:b3:25:4c:72:5a:3a:07:
                    14:86:0d:d9:ca:2a:07:1d:af:2a:77:2e:fe:a5:25:
                    c5:6e:62:43:aa:32:b5:9b:d0:46:31:53:49:a1:35:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:82:FA:C7:A0:A1:8C:0A:60:CC:F1:DD:CB:E6:78:89:E7:96:F6
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a383030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:89:98:67:a6:50:03:1f:0c:73:3c:59:5d:d4:68:90:3d:
         2c:82:46:e2:6f:ad:7d:ac:46:ee:c5:bb:09:ee:5b:51:fa:8c:
         88:f9:ff:25:4b:9e:68:af:04:7f:86:ae:57:2e:b1:e4:e7:f2:
         a8:a8:1d:3b:dc:12:4a:28:cb:d0:d7:8e:64:02:dc:45:d1:d3:
         3c:67:d8:54:c7:d0:90:dd:de:34:73:70:15:41:ac:dc:22:ba:
         fe:90:b8:6b:c4:dd:57:6d:8e:62:66:cb:d8:0a:bb:5c:b0:f2:
         f0:50:63:08:50:b6:8c:39:5f:05:f6:d2:5b:98:5e:da:97:58:
         e1:e3:6e:43:c1:2a:a7:fb:93:13:94:c3:99:5d:6d:c1:ed:91:
         d9:29:ae:78:2b:1d:82:6d:31:af:b0:de:33:7e:42:1f:f0:9c:
         b1:58:94:ef:05:74:f9:f7:7c:bc:e7:b8:f7:be:4d:de:17:18:
         0b:f6:2e:ea:5d:7a:ce:1c:60:38:e4:e3:bd:01:74:11:27:77:
         9a:00:c1:16:30:8b:c5:23:9e:b4:e4:8d:22:81:7a:2a:0a:df:
         33:14:b5:cf:98:3f:90:b4:ca:bd:77:c0:df:9b:ab:d8:73:12:
         3a:f9:c9:fc:5c:db:fb:97:18:7f:e0:92:73:95:10:9a:02:ae:
         ba:92:a2:81
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUMdo5wMNQtrPBcaQmD0wChtyZhYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwRDYyNkVBRTBDNENDMkZEQzY3NjdDNjJBQTQ3NEM1
ODZCOUQwNTAeFw0yNDA0MDMxODI2MjZaFw0yNTA0MDIxODMxMjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBCN0I2RkYzRDg3NjFCMjk3
MzFDMzk5NEIwRkI4OENCREQzQjRDQjNFNUQ5NDA2RUZCRThEN0E5MzA1ODFEOURD
RDY3NDEzRjlGQzJDRDc0QzY2NjREOUM2MzNERDk4OUI2NDg3MDkzOTYyNDQwNDMy
QzQyOTE3MjkyRTc0MkZFQzc3MDQyQUNCQkYxQ0U2Njk3NkQ4RDg1NjY4MDE0NkE0
MzNFMzZBMTk5NjlDRTk4NjQ2MDM3NDc4M0E5QzNBQUVCOEEwMTkzQzg3OTIxMTE4
QTIzQTMzOTNENzVGOEI2NDBFNENFQTVGRUFCODg3NzMyOTE1NzkzNUNGODQ1RERC
Q0U4QjIwOTQwNzQ5NjcyRDMxQzFDNjkyREEzMjZDQUJCNjA1RkVGMEQ1QUY4OUUw
QTUxMUJENjYxNDUyNjZEM0EyMkNFNDdFNDZDQzJBMDQ0QkNGOEE2RDg0QkZDQjA5
QUY2RTM3OUM1MjEyQkJCOTE4MzIwRUQzMjYwNTEyRTgyMDUwM0U0NDNEOTJDODk3
RkE0QUIwOUZCNkRDQkI2RjExMjI5MUJDOEJEOTEzNDNCMzI1NEM3MjVBM0EwNzE0
ODYwREQ5Q0EyQTA3MURBRjJBNzcyRUZFQTUyNUM1NkU2MjQzQUEzMkI1OUJEMDQ2
MzE1MzQ5QTEzNTg3NkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Le2/z2HYbKXMcOZSw+4jL3TtMs+XZQG776NepMFgdnc1nQT+fws
10xmZNnGM92Ym2SHCTliRAQyxCkXKS50L+x3BCrLvxzmaXbY2FZoAUakM+NqGZac
6YZGA3R4Opw6rrigGTyHkhEYojozk9dfi2QOTOpf6riHcykVeTXPhF3bzosglAdJ
Zy0xwcaS2jJsq7YF/vDVr4ngpRG9ZhRSZtOiLOR+RswqBEvPim2Ev8sJr243nFIS
u7kYMg7TJgUS6CBQPkQ9ksiX+kqwn7bcu28RIpG8i9kTQ7MlTHJaOgcUhg3ZyioH
Ha8qdy7+pSXFbmJDqjK1m9BGMVNJoTWHbQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FObygvrHoKGMCmDM8d3L5niJ55b2MB8GA1UdIwQYMBaAFGkNYm6uDEzC/cZ2fGKq
R0xYa50FMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzEvNjkwRDYyNkVBRTBDNEND
MkZEQzY3NjdDNjJBQTQ3NEM1ODZCOUQwNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82OTBENjI2RUFFMEM0Q0MyRkRDNjc2N0M2MkFBNDc0QzU4NkI5
RDA1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8xLzMyMzgzMDM0M2EzNDYzMzA2MzNh
MzgzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBEwMgDANBgkqhkiG9w0BAQsFAAOCAQEABe+JmGemUAMfDHM8WV3U
aJA9LIJG4m+tfaxG7sW7Ce5bUfqMiPn/JUueaK8Ef4auVy6x5OfyqKgdO9wSSijL
0NeOZALcRdHTPGfYVMfQkN3eNHNwFUGs3CK6/pC4a8TdV22OYmbL2Aq7XLDy8FBj
CFC2jDlfBfbSW5he2pdY4eNuQ8Eqp/uTE5TDmV1twe2R2SmueCsdgm0xr7DeM35C
H/CcsViU7wV0+fd8vOe4975N3hcYC/Yu6l16zhxgOOTjvQF0ESd3mgDBFjCLxSOe
tOSNIoF6KgrfMxS1z5g/kLTKvXfA35ur2HMSOvnJ/Fzb+5cYf+CSc5UQmgKuupKi
gQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org