Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3332203d3e20323637333435.roa
File:                     323830343a346330633a3a2f33322d3332203d3e20323637333435.roa (raw, json)
Hash identifier:          NFP+7Yndhn1NKHi4321QvXzsw+JRkAQR2j/leYzVivY=
Subject key identifier:   2C:AE:B5:38:E2:D2:10:1B:30:62:93:0C:21:FE:AE:95:FB:78:9A:12
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       068A9B5BB53A1F43E9D967857A270284140D9E02
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3332203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8a:9b:5b:b5:3a:1f:43:e9:d9:67:85:7a:27:02:84:14:0d:9e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:3a:5c:79:17:1a:2b:95:36:a3:05:ab:fa:
                    85:88:56:18:e3:8e:f7:aa:e7:95:45:d9:56:bc:e4:
                    98:65:3e:3f:16:31:0e:57:89:af:5c:ed:48:e2:f4:
                    c6:d9:30:2a:22:30:46:77:52:c7:d1:b4:17:16:29:
                    06:c3:a1:5d:7e:5f:b6:f5:b2:4e:d8:cb:06:7f:2b:
                    98:9a:60:f5:43:e4:e8:9f:5b:8d:16:48:fb:54:d5:
                    af:8e:7c:e4:94:d0:80:69:5d:04:45:f6:01:3e:7b:
                    75:f6:19:b6:c4:7e:88:40:6a:de:23:82:05:6e:5c:
                    52:ac:89:24:2c:be:ed:03:5c:91:bc:fb:a5:1c:41:
                    e6:16:87:63:5d:6a:71:63:66:9a:08:98:12:11:b8:
                    15:1f:4c:1c:39:19:0a:9d:9b:39:78:cd:94:4c:12:
                    6f:33:b7:22:07:db:39:df:90:d5:87:a2:52:16:41:
                    29:0e:d1:18:3d:56:63:90:5d:c0:aa:41:76:76:76:
                    e9:27:30:66:65:8d:59:a9:03:0b:e4:97:e8:07:67:
                    b2:f8:30:a5:2d:c6:b3:ff:b6:79:ba:95:08:97:ba:
                    aa:d9:84:ff:f5:29:25:82:5d:5c:ad:c3:81:76:d0:
                    6f:e6:fc:89:69:25:0c:c7:0a:d9:30:91:b7:62:60:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AE:B5:38:E2:D2:10:1B:30:62:93:0C:21:FE:AE:95:FB:78:9A:12
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3332203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:91:1e:70:4d:24:24:a8:ab:7a:f3:eb:60:42:17:58:f1:d3:
         fb:fc:b3:c0:4d:9e:ce:f5:26:5c:97:60:dd:f5:09:42:3e:87:
         b0:7c:56:e7:fa:35:cc:65:7b:db:a6:da:89:3a:35:65:6a:b4:
         e8:8b:87:73:44:e0:1e:40:69:9e:6f:d1:ea:ea:54:cd:88:76:
         74:16:46:f7:1b:6c:54:0e:e1:54:60:55:e9:67:c5:50:a9:71:
         47:16:c5:b1:8f:09:ef:6c:29:36:9f:da:23:c5:8c:c9:1b:d7:
         30:e5:47:75:a7:b5:ee:0a:b9:3a:67:9e:bf:c7:53:68:04:7e:
         99:e0:91:ca:bc:09:af:ef:53:42:11:9c:d2:f3:09:c3:d9:71:
         99:f9:e2:dd:98:52:c0:02:fe:cb:ed:0f:6d:08:e3:b3:2e:4d:
         df:7d:fc:bd:11:21:94:90:57:08:48:2f:5d:63:ac:95:c3:c0:
         8f:dc:38:cc:df:09:5c:c5:63:c0:e6:af:9b:7d:1c:6e:c9:37:
         90:8b:78:1f:95:d5:5a:8c:67:52:52:eb:0a:47:5e:12:67:d1:
         75:cf:73:56:aa:50:48:7d:b5:68:50:57:05:09:96:3f:49:0d:
         d4:63:69:90:08:71:c4:2d:8e:97:4f:a8:4b:73:6e:ef:d0:97:
         74:9d:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org