Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a393030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a393030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          eclL6MvzykBq9+JL/TWsBXXPnRo9Yhfp00a7AHNUGEo=
Subject key identifier:   AB:0C:B4:CE:58:32:DD:41:79:D2:54:C5:81:A6:7A:D4:49:7C:C1:BA
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       3A7DB14FCA92A7E2B3D0C2FD45DCF8660F58F0B2
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a393030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        2804:4c0c:9000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7d:b1:4f:ca:92:a7:e2:b3:d0:c2:fd:45:dc:f8:66:0f:58:f0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:5b:2e:33:01:eb:9b:fd:7f:c4:9a:76:e0:
                    a3:db:0d:51:44:e5:79:ab:87:52:d2:30:a7:b0:0e:
                    69:23:ec:a8:54:c5:92:72:23:6b:bd:b4:a4:61:72:
                    b6:33:c7:fe:f7:19:6e:c7:3f:13:da:60:9e:7b:c0:
                    7f:f4:60:ef:f9:dd:4e:a7:c4:a4:c8:6f:22:ed:fa:
                    1d:3b:0b:ee:cd:37:12:ff:1e:e7:55:a7:0b:0a:b3:
                    89:d3:eb:87:de:47:68:a4:2d:db:1b:4f:f4:d2:cf:
                    2e:2a:d9:b8:6b:ff:c3:5e:6e:99:d9:8a:de:cd:a6:
                    34:e4:36:95:6b:9a:36:c3:4e:e6:be:27:ba:1a:35:
                    2b:e6:9d:f9:6f:94:14:68:ad:5f:b4:24:04:4c:b1:
                    00:87:3f:3d:0a:a1:23:c5:62:b8:3e:ba:6a:66:11:
                    ae:d3:77:58:9d:6c:14:7c:37:4b:ed:d2:a6:ac:07:
                    84:8f:7a:e5:0c:20:32:8f:9d:2e:26:e6:93:2b:6c:
                    1d:c4:8a:75:c9:80:85:d6:44:8a:fd:8b:1f:2f:04:
                    03:53:c2:9d:10:6e:c0:ee:7c:b3:8e:d9:aa:12:9b:
                    c1:ae:54:09:06:fe:aa:a3:92:8e:e8:ea:27:da:55:
                    43:42:a4:00:c1:77:36:be:06:40:5d:d9:92:a4:b3:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:B4:CE:58:32:DD:41:79:D2:54:C5:81:A6:7A:D4:49:7C:C1:BA
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a393030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:df:dc:f8:b1:b3:5e:36:99:3e:3a:01:50:d8:fb:38:54:a8:
         9c:51:25:6e:7b:ea:22:e0:90:68:67:74:24:9c:df:4b:18:e8:
         71:79:aa:e3:b6:05:ad:41:3d:d5:cb:5f:8f:c3:05:2a:10:bc:
         14:c9:f5:ce:e5:a8:7d:f6:9e:bd:54:5b:ce:7d:df:12:01:2f:
         08:6e:7f:26:ee:12:1a:14:29:25:c4:3b:1c:c9:63:f6:e9:14:
         a7:fc:f2:07:74:fa:b1:16:bf:e0:f2:fa:d7:ac:be:50:87:f9:
         ec:71:b4:d0:c8:83:90:5c:a9:b4:33:0b:36:6c:6c:2c:2f:f3:
         eb:02:b4:70:b0:ed:84:eb:cc:4d:77:48:51:a0:4b:98:22:cf:
         0d:aa:a7:32:b5:04:b7:76:e1:78:a1:0f:64:fe:34:74:b9:ec:
         01:8b:ca:61:4c:47:dd:5a:be:20:78:f6:ba:eb:85:18:51:7d:
         f5:49:f7:1a:22:e0:70:73:ea:1d:80:53:9e:19:a6:cf:2f:87:
         ee:d5:40:18:1e:c9:8b:67:6c:d1:bd:56:57:73:4b:12:b5:84:
         0f:3c:3c:3f:58:c5:6d:2f:38:8a:67:b7:f0:e8:72:b1:86:e3:
         59:97:8c:df:46:51:c3:10:8f:49:d9:16:73:d1:48:29:c1:d2:
         5a:f5:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org