Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33332d3333203d3e20323637333435.roa
File:                     323830343a346330633a3a2f33332d3333203d3e20323637333435.roa (raw, json)
Hash identifier:          84+dDYrLKa2jeDv5ixefTwYcud/nxKR5+BAIAbV/NKI=
Subject key identifier:   18:CA:5E:38:18:65:4D:8F:0C:C9:42:A3:2D:C9:8D:EC:BB:5F:66:03
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       49E9238A053807AF8AF6EDF8C30B901604FBA95D
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33332d3333203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e9:23:8a:05:38:07:af:8a:f6:ed:f8:c3:0b:90:16:04:fb:a9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:1c:2d:a8:20:25:62:1a:36:2e:98:a0:a0:
                    f5:4e:d4:28:4c:ae:f6:c3:a3:40:8f:88:6e:46:a5:
                    67:6d:b7:2b:a0:8d:70:ff:ce:a1:b6:a5:ed:4c:12:
                    ef:cd:6e:e3:f5:37:ff:6e:73:96:37:bc:7f:1f:00:
                    69:7b:c7:bb:1a:08:03:a9:03:14:84:e9:e8:45:f7:
                    e0:3c:c1:65:e7:9c:e9:1c:40:31:46:24:3c:e3:e2:
                    dc:bc:cb:35:27:2f:40:31:71:cc:31:24:fb:e1:1e:
                    4b:14:bc:5d:37:60:61:55:06:43:7e:52:32:8d:c0:
                    cf:b8:78:06:3b:b5:29:94:70:42:f7:79:1a:33:c4:
                    5b:7a:af:0b:ae:aa:bc:f0:00:54:41:fb:46:89:05:
                    a3:cc:11:8c:bf:e4:44:32:06:0b:76:b5:fc:8a:9d:
                    32:07:56:2f:5e:2a:bd:ef:ef:7e:60:c4:50:15:02:
                    4e:e0:13:b4:33:24:5f:48:6a:24:33:f1:fd:d0:60:
                    56:a7:ff:7f:94:93:ec:ee:44:bb:9e:99:41:0f:ee:
                    91:62:63:04:36:9d:b7:92:a0:8b:1b:34:fd:59:53:
                    7a:2a:40:c7:09:e5:b7:c9:21:e9:22:43:03:48:a8:
                    17:e2:db:0b:db:09:57:62:d0:0c:6d:80:4c:83:ae:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CA:5E:38:18:65:4D:8F:0C:C9:42:A3:2D:C9:8D:EC:BB:5F:66:03
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33332d3333203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:3d:a5:13:d1:c5:f7:5d:89:2a:72:27:e1:b0:e2:03:08:
         7e:3b:a7:90:0b:0f:6f:fe:dc:9c:62:25:33:c0:e2:35:28:5a:
         0e:15:a2:bb:df:05:97:c7:4e:78:e9:53:d6:f1:83:db:0e:20:
         fd:66:a1:d6:6c:66:d7:71:b5:e0:6e:37:0f:bc:cd:f0:ff:92:
         31:c1:7e:84:51:aa:f3:fc:ca:a9:41:06:8f:2e:d0:99:72:f5:
         dc:df:e2:2b:65:21:40:dd:7a:c8:e8:8c:54:51:03:86:c9:1f:
         74:a2:45:17:a4:67:9d:46:e1:36:9f:ba:70:03:e8:de:68:1d:
         44:f3:c0:c5:0f:80:23:20:d8:ad:84:34:7b:83:10:d8:54:b7:
         4d:60:81:bb:dc:6d:a7:11:3a:c0:e5:15:36:3b:3f:e4:64:8e:
         6d:ee:db:0d:a9:2a:3a:ae:97:51:03:63:f0:e6:b8:96:3f:32:
         5e:3c:47:28:94:2e:12:95:a1:68:b2:96:a4:de:af:48:cb:26:
         4a:03:6b:ae:59:2b:5f:dd:c4:44:ed:33:12:03:c4:af:be:00:
         a2:b7:d4:5e:74:b7:44:2e:6b:07:43:58:41:f2:7b:df:71:35:
         97:c5:30:a2:4a:58:a5:89:7a:0c:b0:b8:52:5c:99:0c:7d:94:
         d1:12:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org